Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aH_1AjSskKuMdtdaINx496Z1neY.roa
File: aH_1AjSskKuMdtdaINx496Z1neY.roa (raw, json)
Hash identifier: 1MBab0tlxPeC6YkybvYIazADuYLTCvWndiZnEqZxJtk=
Subject key identifier: 68:7F:F5:02:34:AC:90:AB:8C:76:D7:5A:20:DC:78:F7:A6:75:9D:E6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7EA8C66F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aH_1AjSskKuMdtdaINx496Z1neY.roa
Signing time: Tue 26 Apr 2022 12:09:42 +0000
ROA not before: Tue 26 Apr 2022 12:09:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2124990063 (0x7ea8c66f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 26 12:09:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=687ff50234ac90ab8c76d75a20dc78f7a6759de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:45:a5:37:85:bb:86:9f:36:f6:72:68:14:
94:b8:7a:d6:28:04:04:81:f3:f8:a8:2c:44:64:f6:
ea:b5:9e:69:74:6e:b1:fe:4c:29:0a:66:d4:5b:4c:
27:f4:b9:37:ce:ce:ca:ba:18:3f:1a:9d:0c:8a:7b:
66:15:e5:f7:d1:a2:ce:fc:09:90:eb:9c:61:bb:3c:
fe:41:26:06:0f:d1:04:8c:42:fd:bd:14:cd:2c:de:
13:d4:df:48:bd:e7:32:c9:d3:47:3b:99:35:ee:bf:
f7:66:b8:2c:65:45:d4:db:ef:97:25:1c:30:bf:17:
b9:f4:a3:e9:71:eb:0d:3e:30:7e:57:3e:88:81:3e:
0f:66:a7:d3:4a:12:d8:ca:02:70:29:24:70:2e:ff:
d2:c8:19:a8:0f:6a:35:ba:61:bd:3f:59:01:9f:b1:
61:49:2a:c0:57:a8:13:d6:78:d3:8e:ab:73:7d:b3:
63:21:ff:ee:ca:64:c6:00:61:47:48:68:a5:e1:f8:
ee:59:db:e1:20:fe:57:ed:b4:fa:48:28:72:01:c7:
ea:9a:fe:18:a9:c4:21:22:08:3e:69:2b:bf:bd:f2:
48:77:c2:05:14:21:e9:bd:1c:36:31:0e:70:4e:29:
60:b0:65:f8:6e:de:1c:dc:f9:e2:31:4a:62:f9:92:
f5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7F:F5:02:34:AC:90:AB:8C:76:D7:5A:20:DC:78:F7:A6:75:9D:E6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aH_1AjSskKuMdtdaINx496Z1neY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:9b:51:ba:25:10:bd:d8:37:7d:d3:45:f2:81:1b:a6:27:86:
1b:fc:26:fa:5c:28:eb:4e:7b:98:a7:da:6a:68:1c:49:2f:b0:
2d:fa:02:c2:fe:26:5b:09:35:c9:ae:4e:1d:9e:43:21:f8:2c:
3d:8f:d6:00:4e:47:c4:d6:f2:db:7f:63:f3:e8:c4:fc:9f:e8:
0f:41:1f:0b:c6:8a:14:6e:55:52:e9:d6:e6:51:e1:60:28:17:
c3:6b:43:4f:dc:79:d6:f0:77:da:9e:e9:3e:ea:6b:b5:5e:bf:
1e:a2:42:a4:da:68:31:59:1f:b3:6c:06:08:d9:e3:0d:d6:13:
f9:78:32:18:4f:93:f2:5a:b5:bf:5f:c8:4a:c8:da:e4:c5:d7:
8b:1b:a0:79:13:7c:82:5d:f1:d1:4e:98:40:8d:cf:28:36:97:
c5:15:91:ca:9f:51:7b:96:c8:cf:ee:31:e1:32:69:99:10:8d:
43:44:2d:d6:e4:7f:60:7d:7c:ea:b4:23:3f:1e:97:30:46:56:
79:9b:2b:7d:54:b3:5b:9b:40:21:12:67:45:9e:1f:b8:a3:db:
b2:bf:d5:16:7a:55:be:95:09:c1:f3:57:1c:73:ad:76:e4:ff:
8f:0a:6b:d8:3f:1c:4f:2c:bd:68:fe:d9:64:d7:79:fa:02:13:
57:a6:9a:28
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEfqjGbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQy
NjEyMDk0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjg3ZmY1MDIzNGFj
OTBhYjhjNzZkNzVhMjBkYzc4ZjdhNjc1OWRlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK5WRaU3hbuGnzb2cmgUlLh61igEBIHz+KgsRGT26rWeaXRu
sf5MKQpm1FtMJ/S5N87OyroYPxqdDIp7ZhXl99GizvwJkOucYbs8/kEmBg/RBIxC
/b0UzSzeE9TfSL3nMsnTRzuZNe6/92a4LGVF1NvvlyUcML8XufSj6XHrDT4wflc+
iIE+D2an00oS2MoCcCkkcC7/0sgZqA9qNbphvT9ZAZ+xYUkqwFeoE9Z4046rc32z
YyH/7spkxgBhR0hopeH47lnb4SD+V+20+kgocgHH6pr+GKnEISIIPmkrv73ySHfC
BRQh6b0cNjEOcE4pYLBl+G7eHNz54jFKYvmS9d8CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRof/UCNKyQq4x211og3Hj3pnWd5jAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2FIXzFBalNza0t1TWR0ZGFJTng0OTZaMW5lWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQA4m1G6JRC92Dd900XygRumJ4Yb/Cb6XCjrTnuY
p9pqaBxJL7At+gLC/iZbCTXJrk4dnkMh+Cw9j9YATkfE1vLbf2Pz6MT8n+gPQR8L
xooUblVS6dbmUeFgKBfDa0NP3HnW8Hfanuk+6mu1Xr8eokKk2mgxWR+zbAYI2eMN
1hP5eDIYT5PyWrW/X8hKyNrkxdeLG6B5E3yCXfHRTphAjc8oNpfFFZHKn1F7lsjP
7jHhMmmZEI1DRC3W5H9gfXzqtCM/HpcwRlZ5myt9VLNbm0AhEmdFnh+4o9uyv9UW
elW+lQnB81ccc6125P+PCmvYPxxPLL1o/tlk13n6AhNXppoo
-----END CERTIFICATE-----
Generated at Thu May 1 04:05:15 2025 by rpki-client