Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aWWm6qwu-Ga8X3iNLgTFDwxJJ-M.roa
File: aWWm6qwu-Ga8X3iNLgTFDwxJJ-M.roa (raw, json)
Hash identifier: ZXQjJ30pai1zH6n6JMhDG33ri6/wvzTYNfr5y3qZboo=
Subject key identifier: 69:65:A6:EA:AC:2E:F8:66:BC:5F:78:8D:2E:04:C5:0F:0C:49:27:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018745C1FF803F78AB114C06F850ED3F4DDF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aWWm6qwu-Ga8X3iNLgTFDwxJJ-M.roa
Signing time: Mon 03 Apr 2023 06:15:54 +0000
ROA not before: Mon 03 Apr 2023 06:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:45:c1:ff:80:3f:78:ab:11:4c:06:f8:50:ed:3f:4d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 06:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6965a6eaac2ef866bc5f788d2e04c50f0c4927e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:35:2c:18:e4:e2:ce:0b:86:e1:3d:b7:dd:
4a:79:81:9e:d6:3c:50:1d:f8:19:59:f9:fe:b1:d8:
1f:ac:da:c3:7a:d4:90:da:81:d6:d4:85:c8:fd:af:
4a:d0:28:36:6f:ec:22:f7:1f:9f:15:de:2d:38:8c:
d2:05:2a:28:08:53:12:5c:05:c7:6f:73:24:a3:8f:
d1:91:62:ff:a7:9a:08:de:88:17:ba:c3:3a:31:b1:
c6:96:ff:4b:c8:26:da:9f:53:39:94:72:92:1c:99:
f3:13:c5:27:63:a2:6c:76:d4:de:ad:c9:e5:cc:bf:
2a:d2:8f:a4:44:da:df:0b:be:82:da:f4:55:3a:70:
63:02:30:80:1c:0e:4c:b9:d7:f5:9b:82:dd:90:2e:
91:65:e5:6e:4d:ff:08:a8:1b:d8:5a:33:a2:62:9d:
d2:52:8f:a8:33:82:f1:1c:cf:75:0f:80:d8:c3:57:
3a:c7:61:ca:82:cb:cf:9d:d8:df:95:31:7d:6d:93:
c3:0d:8e:aa:b6:30:52:54:f1:5f:c9:72:9c:08:2a:
9e:49:68:5f:c9:11:f3:53:e7:aa:a9:78:2b:57:f3:
4e:0a:35:bf:07:d2:96:42:76:f5:84:aa:c4:4c:b9:
c9:f7:36:d0:86:2a:c8:a6:95:34:9e:83:84:43:cd:
e3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:65:A6:EA:AC:2E:F8:66:BC:5F:78:8D:2E:04:C5:0F:0C:49:27:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aWWm6qwu-Ga8X3iNLgTFDwxJJ-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:e7:79:3a:96:48:48:ce:6e:8c:eb:1a:10:b1:91:7a:23:9f:
3c:56:40:fa:d9:71:0b:c4:b0:73:b0:18:48:ff:9d:b2:c9:b9:
ea:5d:f4:ce:9e:5d:47:b8:f0:9a:f9:a9:01:38:d4:39:56:f4:
4c:f5:be:83:f7:8e:d7:71:97:c1:d0:1a:ca:55:db:48:ba:49:
be:94:07:76:91:5a:dc:d7:88:c9:a1:d8:76:a4:d0:31:e5:81:
a8:99:c9:fe:b2:94:d0:06:00:4a:39:b8:b2:21:bb:f6:47:dc:
e0:83:d5:b6:37:8a:dd:2c:2b:07:c9:70:ac:a9:32:9a:ef:84:
fd:be:9c:05:ca:0c:75:1f:57:05:f9:23:bf:3a:e1:dc:35:0e:
f0:e2:0c:d0:0e:3b:d0:8f:89:d3:b4:7d:fe:5f:d7:6b:62:ba:
53:df:1a:43:83:2d:93:f5:68:1d:31:e9:e4:61:7a:d7:b8:fd:
a4:e9:a2:8c:71:34:fe:0e:82:b5:56:c6:a3:e8:67:72:b9:9a:
d6:03:eb:8a:83:83:9a:bc:73:a4:a0:15:ca:91:08:3e:f2:61:
2e:99:42:b6:6e:84:86:48:67:9d:aa:cd:a5:df:17:3b:9c:6e:
fe:89:55:5d:01:9a:03:fe:1d:a9:32:f6:10:62:9b:0b:ca:1a:
a9:32:55:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:58:38 2025 by rpki-client