Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aAAhWUHhaOK7CmHPDMXsyY2lOPc.roa
File: aAAhWUHhaOK7CmHPDMXsyY2lOPc.roa (raw, json)
Hash identifier: SphR66oWh2sbUdKvGRmK8X+5squGQ03ynwfzfe2cxGI=
Subject key identifier: 68:00:21:59:41:E1:68:E2:BB:0A:61:CF:0C:C5:EC:C9:8D:A5:38:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018988765FAE5961ADB3FF8E9ED93AC505AE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aAAhWUHhaOK7CmHPDMXsyY2lOPc.roa
Signing time: Mon 24 Jul 2023 15:13:26 +0000
ROA not before: Mon 24 Jul 2023 15:13:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:88:76:5f:ae:59:61:ad:b3:ff:8e:9e:d9:3a:c5:05:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 15:13:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6800215941e168e2bb0a61cf0cc5ecc98da538f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:3c:22:64:16:08:a6:20:75:7a:66:b3:90:
49:03:09:f8:89:1a:fb:af:70:dd:a0:74:1e:ac:51:
1c:72:4d:c9:10:35:e4:e0:22:52:7e:ac:5f:02:13:
50:e5:85:85:14:a7:0d:72:ab:ca:c0:0f:cd:f7:85:
e8:10:85:68:d1:d3:f3:b6:7a:18:6e:e3:d1:5a:a6:
3f:fb:0e:f8:38:cd:fb:73:2a:30:ac:14:55:6e:70:
ef:d0:93:67:53:12:d5:db:89:02:ab:03:85:56:64:
67:3f:72:e4:3d:87:19:d7:9a:65:a2:14:65:31:dc:
93:35:9c:d3:c1:39:93:e5:dc:83:3e:f4:c1:33:4a:
25:fb:fa:7e:f4:64:49:cf:ff:eb:36:68:73:dc:1e:
dc:bd:c9:10:6c:af:d7:32:73:22:70:60:12:e2:90:
4f:24:58:26:c3:ae:da:18:12:55:d5:5f:18:68:42:
16:a4:08:d6:24:9a:65:83:8b:ab:d0:8a:25:47:ad:
43:1c:c2:de:ae:1e:db:64:50:02:7c:da:a2:df:ed:
e9:35:43:e3:93:13:5f:24:d4:6d:51:8a:cb:25:c4:
9d:f6:ee:0f:bf:f3:cd:35:cf:e4:a6:1f:0e:26:65:
3c:2d:97:83:61:d9:41:e8:d9:7e:4c:01:3b:18:73:
02:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:00:21:59:41:E1:68:E2:BB:0A:61:CF:0C:C5:EC:C9:8D:A5:38:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aAAhWUHhaOK7CmHPDMXsyY2lOPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:38:76:83:19:10:09:f0:29:ea:f5:5d:46:e5:7c:aa:f5:c7:
43:3a:1e:a1:3e:54:28:bd:65:c1:3c:79:a7:30:37:05:ec:d1:
3f:3b:a0:6c:74:19:e8:8b:0f:07:59:34:79:06:a5:5c:3e:dd:
93:9a:10:78:c2:8c:d6:86:ce:4a:8c:1a:96:1b:bb:56:1b:ac:
d4:85:bb:13:5f:23:7a:f8:05:c5:24:6d:e8:cd:e3:a1:b8:f0:
3e:66:6d:62:e1:b8:dd:c1:c1:b3:eb:a9:48:6a:46:d0:ef:ff:
65:02:c8:0b:21:77:9d:6b:32:eb:16:49:64:82:26:27:6f:36:
75:cc:ce:06:fb:64:a9:7b:2d:f1:d6:38:8d:dc:82:47:8a:27:
0a:2d:b2:a2:43:5e:ac:0e:35:9a:1d:d1:f1:3d:86:ee:b7:cd:
ec:39:8e:02:d2:55:58:4a:2e:75:20:33:d5:87:15:dc:f0:a6:
b1:08:0d:59:df:ea:39:58:13:6d:46:fc:03:44:a1:5f:09:14:
ea:ac:9e:d5:ab:d7:72:ce:af:cd:c3:06:89:28:0e:6d:97:80:
fa:59:40:8f:b5:86:e6:54:7c:7b:bf:1f:72:45:7d:6c:a5:c7:
bd:74:44:cf:51:94:93:5f:ce:d5:02:12:9c:b8:f6:24:3c:fc:
7e:7f:87:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:45:38 2025 by rpki-client