Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aMuPj9mIhWEYYnc-q5E9hEah0T8.roa
File: aMuPj9mIhWEYYnc-q5E9hEah0T8.roa (raw, json)
Hash identifier: k/iTRSNRPJVabG5f375hTtWfJwgcsjtInlsnXZ329Xw=
Subject key identifier: 68:CB:8F:8F:D9:88:85:61:18:62:77:3E:AB:91:3D:84:46:A1:D1:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01827C86C4F3620442855F8055E9B5B61FC2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aMuPj9mIhWEYYnc-q5E9hEah0T8.roa
Signing time: Mon 08 Aug 2022 08:16:23 +0000
ROA not before: Mon 08 Aug 2022 08:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:86:c4:f3:62:04:42:85:5f:80:55:e9:b5:b6:1f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 08:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68cb8f8fd98885611862773eab913d8446a1d13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:02:ba:22:fa:e2:3f:dc:7e:7f:df:94:7b:8f:
2d:c4:8c:9a:e0:bc:c5:b1:86:f5:cd:18:4d:d7:94:
7a:ef:fa:88:26:08:1d:05:2c:7e:8d:ca:50:d5:54:
4d:ad:bd:85:11:a0:10:5b:52:43:5d:c7:76:a1:51:
e6:a6:3c:63:ef:dd:61:0a:8d:54:e0:dd:a6:ea:c7:
4d:b9:77:c7:7b:ea:0b:4c:5d:ad:90:41:be:02:cc:
a0:87:f1:5c:65:9f:88:d3:17:50:10:cb:2f:8a:cb:
84:67:52:a0:2d:e1:45:cd:a2:9c:11:d5:93:04:db:
9f:6a:54:78:e5:de:da:21:62:71:7e:21:44:f4:73:
69:06:57:9e:f7:e1:35:7e:fd:5e:6c:d9:51:4f:aa:
3f:f6:e2:a3:c1:b1:33:9d:fc:82:da:4b:f6:06:b2:
a6:e5:a7:51:a2:80:d7:10:f3:f7:04:93:a3:9a:af:
0a:b0:7e:10:29:02:09:36:e6:c7:e7:89:70:fb:c1:
fe:72:a4:28:65:e8:63:78:51:48:90:e1:ef:6e:0b:
ed:13:23:20:d3:bb:2d:e5:e1:a4:06:8a:fc:42:ab:
39:46:c3:89:2d:7c:f3:f0:79:13:2c:a2:96:5f:1c:
a4:f1:f4:ed:f7:6e:e8:bd:a4:5c:a4:d4:ae:73:09:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CB:8F:8F:D9:88:85:61:18:62:77:3E:AB:91:3D:84:46:A1:D1:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aMuPj9mIhWEYYnc-q5E9hEah0T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:1c:60:56:cd:86:4d:61:f3:0c:be:53:c5:18:62:4f:0c:84:
2c:31:11:73:07:0a:6c:ce:aa:83:9d:ed:8c:6b:64:54:69:0f:
87:00:40:2c:13:b8:c1:67:10:fc:4a:ed:25:22:02:50:49:00:
b6:54:f5:c0:93:24:43:78:6b:c7:1e:07:a7:1a:65:29:d4:23:
a1:f4:8b:ce:38:b9:c1:b4:d1:e4:fa:52:9d:a2:78:c7:a4:21:
97:86:2e:7d:93:06:90:7d:86:a7:c9:5d:89:cb:7b:f2:3b:d9:
b4:75:8c:6e:34:0b:0b:38:fd:36:38:a8:5f:a0:3a:29:e5:74:
95:5c:66:56:a1:b7:29:92:d4:05:a6:ad:68:52:0f:64:2b:11:
41:c1:43:86:33:3f:8b:8a:15:05:a7:af:86:e8:88:65:2f:ff:
4d:42:d0:bf:47:15:9e:17:cb:ff:d2:98:fc:e7:42:47:68:bb:
db:a8:9e:7c:f0:47:28:b9:b6:77:cd:7c:3d:02:dc:fd:6e:3b:
e1:46:38:9b:e6:4c:ed:ae:60:46:34:47:e4:c7:d8:5c:7c:20:
25:f6:a1:b9:e4:cb:5f:d7:79:37:07:e5:3e:05:64:3a:c9:d5:
6d:03:68:13:41:40:82:f1:17:93:30:00:52:d8:0a:9e:b4:71:
9d:de:95:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:05:27 2025 by rpki-client