Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aBWUYPs7wHb97vpXM05QIJKoyCU.roa
File: aBWUYPs7wHb97vpXM05QIJKoyCU.roa (raw, json)
Hash identifier: gWCi4D6pQlPkYGTymerF8N/HCGkdd6PdaNGYUEcis1s=
Subject key identifier: 68:15:94:60:FB:3B:C0:76:FD:EE:FA:57:33:4E:50:20:92:A8:C8:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186963252664E9F5A9F3ADE824CB30D7B4C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aBWUYPs7wHb97vpXM05QIJKoyCU.roa
Signing time: Tue 28 Feb 2023 04:05:25 +0000
ROA not before: Tue 28 Feb 2023 04:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9631:a8a8/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:96:32:52:66:4e:9f:5a:9f:3a:de:82:4c:b3:0d:7b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 04:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68159460fb3bc076fdeefa57334e502092a8c825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c6:b3:b7:f7:9d:5d:cb:e8:1b:5d:a0:92:fa:
87:82:b4:c0:7c:c1:4f:25:8b:04:4a:6a:70:dc:8f:
12:93:f7:41:20:9f:ee:a8:71:10:0b:1a:ba:b0:d5:
39:29:bf:70:b2:f3:76:fb:eb:6b:e3:95:6a:2c:30:
05:f5:24:9f:02:31:60:c6:04:9b:17:66:81:58:f9:
12:b2:99:ac:e2:b2:2e:30:26:6a:1b:ce:ec:7e:9f:
2f:3a:a2:29:a0:eb:da:cc:39:a3:5c:96:1a:82:71:
3b:ee:27:67:9c:86:ae:5c:27:01:83:0a:1c:ac:7f:
ee:52:0d:08:0c:e0:0f:91:36:b0:3c:e9:aa:41:64:
8d:b4:78:9c:06:20:72:c7:51:d4:0a:17:f0:a8:68:
b7:f5:44:c2:e3:7a:89:5f:db:fb:cc:49:bd:bc:d7:
35:e2:c1:a3:7f:f1:84:05:cd:e0:d4:16:4f:cb:68:
ed:3a:97:ec:e7:01:84:76:bd:76:16:83:cc:73:32:
39:e1:b2:19:f9:29:a1:cc:4e:28:5c:a2:a2:24:dc:
a3:f6:89:ba:5f:97:dc:ae:9d:f6:a3:93:69:01:fa:
77:2a:d1:03:6d:fe:e1:d5:09:ba:63:af:bf:22:5d:
98:73:e5:cb:76:89:bc:9b:85:ff:78:9e:df:a1:93:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:15:94:60:FB:3B:C0:76:FD:EE:FA:57:33:4E:50:20:92:A8:C8:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aBWUYPs7wHb97vpXM05QIJKoyCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:d9:47:fa:fc:23:d5:6f:35:17:38:b2:60:d5:ee:29:a9:7b:
5b:17:6f:80:ef:d7:a3:93:4f:75:3b:1a:da:e9:de:19:3f:eb:
99:1c:86:8d:29:6c:8b:65:e4:92:9b:a4:20:a4:d6:91:ec:0a:
90:be:3f:89:1a:77:46:da:25:ee:3d:cb:6a:4b:57:aa:44:64:
72:cf:84:6b:93:f3:3e:ce:61:98:58:e9:d2:3a:19:ad:50:ce:
93:46:1a:8a:0a:64:b2:a9:45:77:4b:9a:48:14:e7:c6:f8:a9:
0f:5e:99:73:2c:47:78:60:2f:79:bd:f1:d7:f5:a2:ec:8f:e9:
b5:35:a1:bc:0d:6a:92:66:a4:63:8f:29:4c:67:62:5c:6c:89:
cb:ed:ec:61:58:3a:fc:b7:d5:dd:98:24:89:20:f9:2b:d7:b9:
57:06:f8:3f:e8:c2:27:84:d5:c7:b2:9b:e4:4d:a8:9b:69:2b:
d5:60:15:3c:2c:87:8f:bd:fd:78:45:88:84:df:cb:cb:9b:51:
ce:16:16:aa:78:ff:1a:93:9c:36:de:bf:a9:a8:c7:0c:00:c1:
4a:40:ea:70:fe:92:1b:96:43:5d:8d:b5:a5:5e:7c:8b:5e:96:
8c:93:96:cd:24:54:fd:92:88:df:86:24:74:95:3d:14:72:48:
eb:ac:cd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:44:03 2025 by rpki-client