Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aGa3yroBr1NJ9inyC6L6YPOIT_c.roa
File: aGa3yroBr1NJ9inyC6L6YPOIT_c.roa (raw, json)
Hash identifier: ToljgRAIByO/UTN1XU/ME/B8jcpZIhuJye5dEBwNW4A=
Subject key identifier: 68:66:B7:CA:BA:01:AF:53:49:F6:29:F2:0B:A2:FA:60:F3:88:4F:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182D2BF26498188F314E3960E6402DECAEE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aGa3yroBr1NJ9inyC6L6YPOIT_c.roa
Signing time: Thu 25 Aug 2022 02:05:18 +0000
ROA not before: Thu 25 Aug 2022 02:05:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:d2be:a337/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d2:bf:26:49:81:88:f3:14:e3:96:0e:64:02:de:ca:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 02:05:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6866b7caba01af5349f629f20ba2fa60f3884ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:46:e4:74:d1:39:eb:0c:33:9f:3b:98:ec:
fe:d0:f9:f9:10:94:c0:e1:ab:3c:25:e0:9d:14:fa:
5b:84:be:51:22:fb:f8:03:a8:84:46:72:3a:fc:6a:
87:d2:55:e9:c9:cc:d0:b4:a7:5e:ff:ff:ed:e2:27:
09:f6:73:07:1a:d1:50:1c:48:32:93:ac:5e:89:f3:
73:20:a1:b1:5b:b4:3a:e4:16:07:4c:49:6f:30:46:
b8:7c:25:00:e2:81:14:dd:b6:a6:ed:d6:07:35:d1:
72:2e:2d:30:1c:37:1c:e5:da:47:f9:80:29:29:71:
f3:dc:8a:3a:1c:ce:11:ff:24:21:48:8b:44:d1:a0:
6e:23:50:77:79:7b:4c:bf:2b:bb:0b:b9:f8:ca:73:
d0:bb:76:a0:43:57:26:99:e7:71:96:8f:dd:92:ee:
6b:81:c5:be:d8:3e:4f:3e:28:14:18:c6:b3:88:69:
d1:c8:2a:05:6f:f3:bb:22:7b:2d:ea:46:50:0e:ed:
8f:f0:11:0c:a1:61:4c:1b:45:a0:bb:37:91:6d:d4:
97:2a:d8:9b:87:f7:2c:a3:54:9b:73:c9:29:cd:69:
d7:12:2e:27:26:74:28:23:cf:3e:bd:c1:44:62:fa:
87:ce:e6:6c:cd:b5:fd:ae:cc:f1:64:ff:01:4f:75:
49:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:66:B7:CA:BA:01:AF:53:49:F6:29:F2:0B:A2:FA:60:F3:88:4F:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aGa3yroBr1NJ9inyC6L6YPOIT_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:0b:00:d7:66:e3:e2:87:9b:64:d7:b1:08:e9:ef:8c:b6:da:
87:2e:56:58:aa:8d:cd:7e:30:b7:e7:82:9d:b2:a3:d6:f1:00:
2b:e0:b0:93:96:44:66:83:43:b7:4b:a9:c6:b9:36:2c:e2:2b:
bb:5d:b5:02:9e:78:88:ed:9e:b7:38:c4:59:be:32:43:11:c5:
ce:ba:bc:8b:7b:0c:d5:a8:71:29:3e:a7:33:dc:9d:89:fd:e1:
69:d5:eb:a7:93:8f:9a:ab:5d:95:98:1e:da:0c:5b:9a:68:92:
e5:a9:81:3c:f0:35:52:80:be:55:b0:74:d0:de:1a:aa:b6:07:
fc:39:a5:ba:59:05:44:a2:0a:2b:87:6d:4f:89:20:14:d0:8f:
d6:6a:e4:92:b7:92:83:f7:d6:e5:53:af:08:4d:f0:41:a2:2a:
8b:ee:9c:17:78:4c:fb:3a:32:b7:cc:94:8a:3d:38:80:c0:f6:
5e:5a:33:64:9f:3b:82:73:7c:11:13:5f:4a:d3:92:46:18:ad:
58:03:70:ba:b6:ae:b6:a0:7d:51:98:2f:fc:0f:ac:5a:b4:95:
ed:e9:c6:1d:60:49:36:03:87:3d:f6:c5:b3:67:ce:3f:e8:9a:
3d:91:64:f4:e6:65:16:d7:45:26:e7:f0:d6:01:07:87:c0:b4:
0d:36:27:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:34 2025 by rpki-client