Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aBG4n9q2clVLI7vG7UScSdi6TSU.roa
File: aBG4n9q2clVLI7vG7UScSdi6TSU.roa (raw, json)
Hash identifier: SSq4BstUNPQyC0C0SEZOMwruTGS4d3CarrBDgX1Cbv4=
Subject key identifier: 68:11:B8:9F:DA:B6:72:55:4B:23:BB:C6:ED:44:9C:49:D8:BA:4D:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7E5C3C15
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aBG4n9q2clVLI7vG7UScSdi6TSU.roa
Signing time: Mon 25 Apr 2022 11:10:34 +0000
ROA not before: Mon 25 Apr 2022 11:10:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2119973909 (0x7e5c3c15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 25 11:10:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6811b89fdab672554b23bbc6ed449c49d8ba4d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:ea:99:f9:e5:62:fa:55:33:8c:e4:e8:f6:
44:63:4b:b1:a6:cf:4a:6c:39:6f:a8:70:c1:25:28:
93:0e:96:78:c7:d9:ab:d8:48:47:e7:5f:3d:90:95:
df:c6:69:ee:40:d7:78:b1:05:f0:ce:42:30:fc:9c:
40:b8:0f:00:97:12:24:9d:cf:6a:52:10:f6:fb:ee:
8e:94:2c:c1:75:31:f7:98:82:d7:7a:4f:db:50:4f:
09:b9:20:ef:5a:66:8f:3d:26:7b:55:0a:d3:dd:3e:
8f:74:bf:b2:6d:62:ec:63:11:2c:8c:87:9c:3e:42:
b3:8a:25:31:0d:3e:85:9a:ab:3a:f8:10:ce:a6:66:
8f:36:2e:f0:8d:8b:c4:fd:57:5e:73:85:1c:73:4e:
86:a7:93:48:be:00:bf:70:6b:91:83:1d:fb:ca:cd:
64:a8:19:07:4b:db:09:79:a2:cd:c0:d5:35:2d:fc:
5c:61:28:05:5d:e8:f1:22:00:c2:93:02:91:95:7d:
27:b4:f6:b5:24:30:74:1b:2f:61:e5:9b:2e:11:4b:
30:f3:a0:f2:e5:72:d7:2f:1c:fa:00:80:74:2e:b7:
5e:74:8e:35:62:ba:36:18:5b:73:72:33:aa:b2:d5:
db:47:1e:57:d6:3c:82:97:22:e3:29:ee:7c:0b:0e:
60:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:11:B8:9F:DA:B6:72:55:4B:23:BB:C6:ED:44:9C:49:D8:BA:4D:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aBG4n9q2clVLI7vG7UScSdi6TSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:54:4e:53:20:6c:eb:cd:f5:31:ce:18:02:86:06:a5:0a:aa:
97:d0:0c:56:dc:ba:b8:65:fb:05:c7:b1:12:ad:de:33:2d:9a:
cc:aa:2d:9e:5a:fc:56:51:7c:5d:a4:c9:14:3d:3d:04:06:98:
16:c4:b5:dc:89:74:45:f5:97:f1:35:b5:92:8e:e0:20:3d:5e:
61:0c:d8:8c:b2:34:ae:ad:7b:6f:33:8f:f9:24:87:55:21:2d:
21:01:e9:b4:97:48:81:5e:04:17:c7:7c:10:a7:82:ad:65:0a:
e5:71:0a:5a:bd:a0:19:fa:16:bc:68:84:b7:7d:cb:aa:8d:91:
49:5e:3c:bd:62:0d:c8:80:4b:6b:ac:8a:9f:d1:ce:8a:89:84:
76:6f:82:2a:4a:f9:94:cd:8c:0c:80:c8:38:f1:f9:73:d1:73:
1d:13:15:b0:a2:be:bb:ba:da:fb:33:da:86:be:61:a7:53:68:
30:29:10:de:04:82:4a:81:90:af:af:a8:44:a3:9e:a2:26:38:
51:10:ab:11:04:8c:a9:f7:e0:64:8e:a2:9c:1e:c6:4a:f5:42:
69:71:df:70:7a:91:ca:8f:e7:00:29:23:0b:96:3d:e8:65:b6:
57:e2:a0:f1:dd:96:da:f5:a0:32:27:a4:c6:3b:bf:40:b4:5b:
65:e5:e1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:56:35 2025 by rpki-client