Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aW81jjnmcy6hd9T9opU8rNA8xoI.roa
File: aW81jjnmcy6hd9T9opU8rNA8xoI.roa (raw, json)
Hash identifier: 2W67ITxG8CLLOpjmg9ygjV0Rhymx8pEFy4zc3EIcULE=
Subject key identifier: 69:6F:35:8E:39:E6:73:2E:A1:77:D4:FD:A2:95:3C:AC:D0:3C:C6:82
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7EC66300
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aW81jjnmcy6hd9T9opU8rNA8xoI.roa
Signing time: Tue 26 Apr 2022 22:12:27 +0000
ROA not before: Tue 26 Apr 2022 22:12:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2126930688 (0x7ec66300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 26 22:12:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=696f358e39e6732ea177d4fda2953cacd03cc682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:f1:85:bc:83:d1:3d:2e:2a:9b:ff:44:62:
dc:0c:6f:b0:0e:b6:d0:3c:b4:0c:d1:84:99:c4:38:
72:34:b2:e5:eb:b0:de:9f:95:36:16:7a:5b:14:00:
99:87:e7:66:a7:12:53:c4:7a:63:19:67:37:fc:2a:
60:65:9f:ea:d6:f4:94:ac:79:69:78:c8:4d:9e:b6:
59:3d:15:a2:b1:fe:72:1d:26:7f:d1:67:d7:49:f2:
35:e2:c2:68:60:01:18:94:76:92:7f:78:94:c3:1c:
c8:2a:3e:d9:40:16:37:05:b2:8e:4d:89:dd:be:f1:
30:f7:97:b0:7a:bc:7f:ac:62:7b:23:10:58:06:e0:
de:63:14:a5:e5:62:d2:52:58:0e:71:43:f6:f2:db:
4d:e3:54:00:3e:39:03:f4:0d:fc:df:bd:e0:40:5b:
45:b4:a6:bf:e4:2c:98:81:33:4a:8b:e5:d2:20:60:
ae:d8:c6:f4:51:02:38:96:29:d9:38:60:e9:ea:de:
20:23:fc:26:0b:c7:bf:05:97:d9:11:a9:c8:ee:ed:
b4:1b:ff:cc:fd:26:ec:27:e4:11:eb:f9:05:22:91:
02:96:05:cd:01:20:20:01:95:61:d8:b1:a9:41:5d:
ce:35:4c:9f:dd:3f:c4:9b:8c:52:5b:00:9d:08:2b:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6F:35:8E:39:E6:73:2E:A1:77:D4:FD:A2:95:3C:AC:D0:3C:C6:82
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aW81jjnmcy6hd9T9opU8rNA8xoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:3b:a9:6f:f3:2c:55:77:0b:b1:61:7c:08:fd:69:2a:a0:4f:
82:c0:51:2f:75:eb:d2:60:d2:b7:68:5e:c2:52:de:db:bf:99:
ab:8f:fd:59:da:f1:35:36:fd:84:36:e7:61:04:c8:3e:17:52:
47:e4:23:9b:d4:6c:f3:54:ae:3b:36:ba:9e:f4:1b:ef:0a:ae:
59:79:81:22:f3:48:03:65:45:68:8b:f9:11:ff:b9:b8:ca:8f:
58:90:b6:60:1f:4b:89:40:e8:ed:a6:9c:2a:c3:73:30:b3:83:
8d:48:88:aa:d2:0e:eb:46:6d:eb:02:ff:4b:dd:04:a0:62:a6:
d9:78:88:ae:56:5b:79:ac:a6:b3:1c:a4:f8:8d:54:f3:a9:3a:
bd:fd:ef:db:35:3e:8e:8e:58:a6:73:ce:10:03:49:a9:fa:e3:
8c:8b:da:ab:88:43:52:89:60:50:d4:93:93:82:ba:86:4d:3f:
0c:e1:e7:4e:7b:62:1e:72:fe:62:01:8e:30:7b:88:20:9c:32:
0f:b1:ef:38:fd:a3:4e:f6:d6:a4:a5:0a:7f:5a:dd:08:7a:41:
df:0c:2b:d8:2f:c8:ad:f7:a0:21:44:dd:74:93:6f:d1:1c:a9:
9b:c5:ae:1f:94:83:2f:76:94:ef:f6:78:9d:b8:d8:73:c2:34:
f2:03:b8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 15:44:16 2025 by rpki-client