Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aBWq3HxizthPiFNaYo0CaScynRM.roa
File: aBWq3HxizthPiFNaYo0CaScynRM.roa (raw, json)
Hash identifier: EIaXfSvYry8+425o4d+G6JIbvQLYC5FSHgkuab9ul74=
Subject key identifier: 68:15:AA:DC:7C:62:CE:D8:4F:88:53:5A:62:8D:02:69:27:32:9D:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6F9C1DC4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aBWq3HxizthPiFNaYo0CaScynRM.roa
Signing time: Fri 04 Mar 2022 14:04:19 +0000
ROA not before: Fri 04 Mar 2022 14:04:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:553e:e3c6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1872502212 (0x6f9c1dc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 14:04:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6815aadc7c62ced84f88535a628d026927329d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b5:16:11:92:72:28:07:44:51:d8:b1:bd:01:
29:cf:e2:4c:d4:3c:c8:40:22:6d:dc:04:0a:15:00:
87:88:ca:e5:a7:28:af:67:0a:4e:79:20:d7:4b:1e:
ea:7e:1c:7f:36:51:ff:04:29:09:0d:de:fc:66:bd:
9e:00:c5:1b:5c:0a:d3:66:d5:5b:04:14:09:f9:23:
02:de:4e:92:2c:46:1c:30:1b:fd:e9:df:52:1c:a6:
a0:8a:17:1f:f4:4c:48:c1:99:94:6d:9d:9d:c5:4c:
37:26:6c:52:18:e9:25:d0:c7:0d:22:08:11:48:76:
cb:49:7b:15:00:72:89:f7:6a:95:65:ca:86:b9:7d:
76:36:31:69:95:26:2a:c1:6c:31:24:53:6a:70:6b:
1e:a4:88:e8:bc:9a:0e:e4:35:63:6a:bd:6a:d2:21:
38:33:41:64:03:4d:51:16:2e:72:9f:ac:8b:4e:2d:
a1:77:7c:39:f2:7b:d5:3f:9f:0e:e1:57:23:e5:ce:
ad:e8:18:04:62:75:fd:c2:c8:aa:0f:4f:73:93:2a:
3f:98:c9:31:b6:81:02:b5:8f:14:40:26:e2:68:ac:
55:f7:66:52:9d:fc:55:0a:11:60:7f:dc:d3:f7:a4:
0b:1a:5e:1d:47:84:2c:50:f4:e6:59:96:1b:ff:62:
51:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:15:AA:DC:7C:62:CE:D8:4F:88:53:5A:62:8D:02:69:27:32:9D:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aBWq3HxizthPiFNaYo0CaScynRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:c8:aa:90:66:09:3d:c1:0a:9c:db:9e:46:95:64:0d:2d:ac:
c8:5f:c6:90:12:b0:68:44:af:5a:6a:6c:1b:41:f2:33:05:37:
c9:ae:8e:fb:86:fd:48:b7:d4:9e:14:2b:67:67:49:cf:38:fd:
ff:9e:1b:6c:fd:bd:a2:3e:59:e8:fd:76:b1:b9:bb:e3:56:23:
8a:c5:b7:35:4f:91:1f:4c:68:d6:30:0f:f2:4b:f1:ac:70:b6:
81:c4:ed:79:b7:f8:f0:7e:b4:2b:08:8b:15:43:2a:8a:ec:b2:
59:9b:b6:a0:39:1e:46:ea:90:2d:8e:b9:4a:fb:9e:c5:99:8d:
dd:e1:58:c8:46:54:c5:b0:98:41:42:51:60:1e:ae:0c:66:4e:
8e:c2:70:38:dd:f2:f9:d8:23:15:4c:40:cb:7d:26:78:57:07:
66:f4:91:7d:6c:68:80:02:58:ad:7c:68:02:26:9d:6e:39:6b:
68:88:82:02:39:2f:7a:39:37:35:3b:6d:61:7e:20:dd:1a:9b:
ae:1a:13:7e:54:c6:56:b6:fd:a0:9b:96:a8:66:7c:fc:99:f3:
52:50:36:72:aa:45:e0:7c:7f:40:31:c4:88:22:05:c7:47:e0:
bb:5a:ea:71:34:a1:d3:29:55:56:83:7f:97:f4:3b:be:69:f7:
16:7a:c6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:32:30 2025 by rpki-client