Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_aM12MBV2bi2CyPCz7SxbvgCg8A.roa
File: _aM12MBV2bi2CyPCz7SxbvgCg8A.roa (raw, json)
Hash identifier: 2Qu778RbgJQ5EDwKHp2RIm8wHHdc3E2MQtaT7J3oauU=
Subject key identifier: FD:A3:35:D8:C0:55:D9:B8:B6:0B:23:C2:CF:B4:B1:6E:F8:02:83:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018726A1E43C559318879CD19BB06A5913B6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_aM12MBV2bi2CyPCz7SxbvgCg8A.roa
Signing time: Tue 28 Mar 2023 05:12:36 +0000
ROA not before: Tue 28 Mar 2023 05:12:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:26:a1:e4:3c:55:93:18:87:9c:d1:9b:b0:6a:59:13:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 05:12:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fda335d8c055d9b8b60b23c2cfb4b16ef80283c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f0:c2:ce:c4:4c:53:1f:97:c4:91:1c:ad:20:
26:d8:17:08:93:31:fa:ca:60:68:3e:41:40:85:af:
f2:3c:54:27:34:ed:bc:f4:d7:58:13:96:66:c6:c4:
c0:b3:86:ec:0c:4a:52:a8:85:cc:a6:6d:25:d5:bc:
f6:7f:f2:77:a3:da:ba:12:b9:bf:9d:a1:b5:bb:c5:
e1:af:09:20:c3:cc:fe:f9:29:50:c8:f8:61:7d:97:
78:d6:2b:a1:4c:6d:91:57:5c:0e:a5:90:4f:a6:98:
b7:9a:19:30:b2:07:11:07:31:01:ec:46:33:24:e8:
46:7f:b3:1e:3f:fd:ff:57:07:3c:c4:43:ff:7a:ed:
ae:8f:8a:d1:21:74:a2:d3:3c:fa:83:db:b4:46:4b:
ea:95:c4:92:ee:81:c8:76:11:19:89:4c:fc:d6:87:
37:ac:4d:d8:37:9b:61:66:48:f3:1c:12:4d:d5:1b:
b9:0c:10:74:1e:a9:4d:81:2e:9a:d5:d9:4e:5d:b2:
96:02:77:33:ee:a0:20:e4:61:f1:d6:77:58:7e:69:
cb:89:8d:b0:27:13:88:b1:1f:fe:d3:48:b6:48:46:
9c:38:f0:d0:af:eb:28:d7:8f:bb:f6:5b:d1:01:8f:
d3:d8:cd:ad:90:26:8c:fa:67:c3:47:39:96:c7:41:
0f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A3:35:D8:C0:55:D9:B8:B6:0B:23:C2:CF:B4:B1:6E:F8:02:83:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_aM12MBV2bi2CyPCz7SxbvgCg8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:65:05:19:68:a9:de:e8:b5:50:1a:47:2c:2a:1d:fa:48:95:
b3:e1:bc:05:05:a7:9e:28:4d:ca:cd:f1:1c:3c:e3:96:34:7c:
f2:8a:d2:74:19:11:d7:80:c4:60:1c:ba:8a:f5:c3:cb:18:2a:
81:d2:01:eb:d1:47:68:d3:07:dd:13:e5:5e:da:69:a0:bd:fe:
75:37:97:3c:1e:e0:cd:ed:35:98:db:27:0c:20:d7:b4:7b:90:
4d:98:96:7e:92:4d:5b:32:9c:8c:57:6c:f5:de:2c:b1:e3:e7:
ac:d8:d3:bf:7a:9c:63:0c:80:31:7f:9a:07:e4:a6:fb:d8:bc:
de:ef:39:b3:04:a5:3d:ec:92:f3:18:d1:3f:6f:68:24:a3:50:
cd:59:42:ff:f5:d9:2e:7e:f3:9a:60:55:f6:d9:3b:35:0d:c7:
9c:4c:6e:26:a0:3e:51:33:46:f9:fb:a7:aa:f0:6d:5d:20:19:
75:c0:eb:00:7a:fd:22:cb:b9:39:47:0e:b4:db:9b:91:cf:88:
59:30:ea:cd:d4:10:62:5e:43:a2:a8:ff:a8:be:29:fc:02:d7:
ec:fe:a4:15:fa:73:85:24:a1:c2:96:73:b0:79:b0:b1:22:7e:
51:98:77:80:f2:0c:46:de:50:2b:0d:7b:ff:b8:ac:04:8b:b4:
59:ec:ca:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:03:24 2025 by rpki-client