Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aFfiosF-ktQlxwxVTlp1Q3i5PXE.roa
File: aFfiosF-ktQlxwxVTlp1Q3i5PXE.roa (raw, json)
Hash identifier: cvxEajnnm1HbgJ17iDioE5Sk04Ly1NUq67hY8dcpi9o=
Subject key identifier: 68:57:E2:A2:C1:7E:92:D4:25:C7:0C:55:4E:5A:75:43:78:B9:3D:71
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018538741AF763D377F29E18E8E5768EBC92
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aFfiosF-ktQlxwxVTlp1Q3i5PXE.roa
Signing time: Thu 22 Dec 2022 06:10:11 +0000
ROA not before: Thu 22 Dec 2022 06:10:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:38:74:1a:f7:63:d3:77:f2:9e:18:e8:e5:76:8e:bc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 22 06:10:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6857e2a2c17e92d425c70c554e5a754378b93d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:81:93:3c:48:d8:78:0d:74:a1:d5:98:c3:a4:
90:65:eb:75:f7:f8:9f:a1:f5:5d:04:00:97:88:a6:
1f:08:d8:9f:41:31:22:11:7e:d5:9e:e2:e7:dd:87:
8a:c5:4b:b2:c4:aa:2e:d1:00:18:82:f2:4e:32:08:
47:a4:08:8f:d6:93:b1:89:62:96:ab:5d:5e:db:36:
29:e4:1b:0d:dc:a9:b0:4f:47:60:f8:09:36:2e:10:
17:6b:dd:6a:64:9f:2c:81:ad:3c:74:d8:99:71:0f:
e3:f2:1a:77:b4:92:96:b5:75:a9:02:ec:7d:bb:36:
08:73:08:97:de:72:37:3d:34:c3:eb:f4:7d:04:f8:
9e:78:e8:78:b5:e2:79:41:d6:3a:46:06:6a:5e:4f:
e1:69:5d:fc:41:3d:6c:7e:6b:65:30:b4:dd:31:84:
9a:b2:d2:ca:96:c4:15:84:7c:b9:81:2e:b6:a4:65:
57:60:82:0e:ae:b5:94:6e:30:31:25:d9:e1:84:83:
1c:39:14:e0:f1:95:8a:94:a8:51:ac:0d:45:d8:82:
48:d1:69:c9:20:29:70:3c:b1:7e:c5:b2:61:5d:af:
d3:b2:7a:54:79:52:ff:48:53:85:55:ef:73:a0:8f:
35:24:fc:af:ae:2e:76:8f:7e:f5:5c:fe:b9:fa:38:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:57:E2:A2:C1:7E:92:D4:25:C7:0C:55:4E:5A:75:43:78:B9:3D:71
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aFfiosF-ktQlxwxVTlp1Q3i5PXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:e8:46:95:df:5c:ef:6f:d5:7e:71:13:3f:94:f8:f6:03:96:
14:37:1c:e2:09:40:14:13:39:c0:cc:ff:bb:82:97:27:a6:85:
f6:9b:77:af:92:f8:d6:5e:b5:a4:d8:82:6d:b8:44:d5:ff:bc:
a7:18:6e:11:ae:14:df:65:07:46:5f:20:5a:75:52:ed:14:4b:
a2:b7:f7:89:af:e9:81:c8:d8:41:0f:41:55:27:67:4d:4f:0d:
9f:40:4e:8e:c9:e1:6a:3e:a1:72:e0:c6:0b:f1:42:3d:a4:e2:
7d:81:de:c4:cd:77:a1:76:60:ce:ec:e8:f3:39:7a:71:ad:19:
67:39:42:ab:24:21:19:52:83:63:fa:03:ac:11:47:9c:6c:6a:
73:20:de:42:1f:50:e2:83:da:80:62:a8:40:86:49:dd:5d:d5:
c3:dc:57:d8:59:c4:56:84:01:69:c5:9d:1c:2b:9b:d7:78:94:
66:25:c1:e3:dc:53:01:f1:01:b5:85:82:aa:b4:6d:5a:b7:e7:
15:55:dc:fc:cd:29:3f:7c:31:b2:4a:94:3f:d8:6f:31:41:6b:
c0:65:90:47:8f:1b:18:23:70:fd:4b:12:95:bf:3c:03:74:e0:
a0:25:39:b8:60:4c:e5:da:ff:b6:5f:a8:b8:da:57:38:78:d5:
27:96:6c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:17 2025 by rpki-client