Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aRnZHLQ5Iw8Lo8-0fKF3M6h-qFs.roa
File: aRnZHLQ5Iw8Lo8-0fKF3M6h-qFs.roa (raw, json)
Hash identifier: BYpxHmZxx02YMY4GUOIb3hLF2+2+7h3cMShJLjvtf0o=
Subject key identifier: 69:19:D9:1C:B4:39:23:0F:0B:A3:CF:B4:7C:A1:77:33:A8:7E:A8:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01827A968DAE3A918187EDD7319EAA59A61F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aRnZHLQ5Iw8Lo8-0fKF3M6h-qFs.roa
Signing time: Sun 07 Aug 2022 23:14:23 +0000
ROA not before: Sun 07 Aug 2022 23:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7a:96:8d:ae:3a:91:81:87:ed:d7:31:9e:aa:59:a6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 23:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6919d91cb439230f0ba3cfb47ca17733a87ea85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:c0:ce:a8:09:58:be:95:3a:57:4a:f2:55:
85:b7:af:b5:ab:c5:82:0c:9f:44:30:cb:d6:d8:6c:
af:64:aa:5e:fe:8f:1b:c2:11:b5:4a:73:4c:1c:73:
68:fb:ca:86:1d:8f:c8:81:81:b6:a2:68:44:46:ec:
1f:b3:21:26:8a:18:c7:9d:7f:d4:7e:29:cc:fe:eb:
24:a9:6d:f7:7e:89:ad:8e:59:88:c2:c0:ff:53:e0:
a2:06:bf:3c:2f:4a:bd:8d:43:ab:1d:12:12:3b:a6:
6b:98:66:e9:70:1d:dd:d4:2d:be:a6:34:5e:da:26:
f0:d1:e6:0e:00:81:9f:3f:cb:59:60:27:b4:fd:20:
b0:0e:73:c0:4a:0b:c7:fa:de:1d:9b:c3:12:2c:e2:
b7:b9:02:7e:de:97:b6:68:cb:86:c3:fb:a6:3d:00:
da:36:40:0c:32:66:15:b0:33:55:fb:28:91:33:c0:
2a:cb:21:89:b0:bb:2e:1c:df:d6:be:e4:59:3e:f1:
ed:b3:9e:b5:1a:e1:03:37:44:51:80:06:13:b2:9c:
29:9e:4d:1b:4a:bf:a5:94:f8:ac:6e:18:bf:94:80:
7d:eb:cc:15:1c:92:7e:c6:69:aa:e6:50:c6:74:18:
c2:c5:f1:96:04:17:3b:19:37:4f:be:be:0d:04:40:
a4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:19:D9:1C:B4:39:23:0F:0B:A3:CF:B4:7C:A1:77:33:A8:7E:A8:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aRnZHLQ5Iw8Lo8-0fKF3M6h-qFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:b4:cd:7c:de:c1:e0:ac:ce:f6:0f:08:56:33:e1:a1:7a:14:
8a:2e:7a:4f:f3:b5:1c:71:7d:b9:21:ca:7f:24:54:48:46:6c:
e5:c3:24:f4:f3:82:40:bd:52:44:89:a0:7f:10:30:c6:2c:40:
e1:72:c8:14:e7:da:32:f9:83:d5:bb:19:1f:3f:3e:30:3a:2b:
9d:8c:6a:24:e8:69:91:47:d6:fb:1a:42:02:0e:5a:cd:72:8a:
b1:7b:3d:b1:58:65:24:96:ed:5d:c2:ea:e0:77:3c:97:e4:10:
49:03:6e:90:db:b1:8e:02:f8:15:25:9e:a6:ef:36:01:20:41:
17:3d:3a:8e:51:cc:1b:51:77:65:09:fc:59:5f:b6:f6:55:aa:
3d:c3:86:64:a5:8e:43:b6:bd:82:82:be:81:c3:0e:ed:9d:84:
46:95:b2:1d:b7:8f:a0:53:8b:c5:94:85:e2:6d:90:68:85:f2:
2d:f2:98:e0:a6:35:34:e7:91:d8:a8:f6:c3:2d:2d:ef:72:96:
24:73:8b:15:3b:bb:e9:3e:98:90:ae:40:ae:23:47:c3:0b:c6:
ec:c0:92:39:54:14:39:11:aa:6e:52:46:f8:6f:01:dc:4b:3d:
ec:c3:4d:4b:80:fe:2e:98:17:91:98:db:66:36:54:e8:97:1d:
63:aa:7f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:58:37 2025 by rpki-client