Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aXczF-68-suJy53Tp0vZwaZ5Hw4.roa
File: aXczF-68-suJy53Tp0vZwaZ5Hw4.roa (raw, json)
Hash identifier: cvmyLiQ0QaeWU/1oAKDaeF4hlnJIBNE2DFd/dsFkAr0=
Subject key identifier: 69:77:33:17:EE:BC:FA:CB:89:CB:9D:D3:A7:4B:D9:C1:A6:79:1F:0E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018846CC28532CA323A78A788608B2A72726
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aXczF-68-suJy53Tp0vZwaZ5Hw4.roa
Signing time: Tue 23 May 2023 04:09:24 +0000
ROA not before: Tue 23 May 2023 04:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:46:cc:28:53:2c:a3:23:a7:8a:78:86:08:b2:a7:27:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 23 04:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69773317eebcfacb89cb9dd3a74bd9c1a6791f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:30:d9:b2:74:fb:31:f4:cc:89:09:fd:ff:
47:34:95:11:5f:ef:ba:aa:e2:62:f7:61:fa:c4:1b:
20:37:50:09:ff:63:c3:6d:4b:e6:aa:55:73:d5:a5:
2e:7e:8a:b5:d9:eb:6b:7c:0e:70:9c:8e:04:67:43:
55:00:59:46:65:d3:8f:9b:c8:74:83:f2:dc:9c:df:
28:d0:a0:2d:56:80:c6:c7:4d:b1:8b:d4:79:8d:44:
94:7e:6c:c8:da:e0:73:2d:8a:8d:99:ec:3b:39:0a:
ac:aa:12:74:8b:c0:d1:62:15:8a:25:df:72:75:71:
f6:17:97:99:79:0f:d0:4c:78:e1:b0:55:b8:37:92:
f5:55:e2:b7:23:46:7f:aa:44:d0:04:cc:68:9d:60:
80:14:25:19:a0:dc:6a:ed:74:01:d9:b8:19:b6:f8:
90:d8:9b:40:83:6a:39:20:e6:dc:87:1d:f8:05:34:
15:c1:5d:d5:2e:9f:9d:19:7a:94:88:13:a0:98:53:
9b:9f:7f:d3:6c:2c:44:7c:53:2a:46:d7:a6:d5:86:
72:cb:b8:4c:3e:f6:f2:bb:fa:a2:bc:82:20:a1:a6:
3c:54:af:1f:07:2a:43:43:9c:e7:0d:73:2b:cc:a2:
a4:7f:60:a0:b9:9d:62:70:a9:ee:5e:d7:ce:c8:d6:
4e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:77:33:17:EE:BC:FA:CB:89:CB:9D:D3:A7:4B:D9:C1:A6:79:1F:0E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aXczF-68-suJy53Tp0vZwaZ5Hw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:15:51:74:3b:8d:c0:e8:61:26:87:dc:05:bb:96:a4:76:e7:
f6:57:e1:92:fe:bf:08:10:6d:a1:63:9f:73:20:39:dc:ed:da:
a0:20:81:32:b8:b0:66:4a:d4:30:0d:8c:d0:9e:ef:15:cf:a1:
5b:a6:80:c9:92:ef:91:cd:49:bf:b7:0b:51:3d:12:69:a8:a0:
81:7e:3c:9a:cf:b3:b8:ed:2b:a6:55:87:d0:c6:39:a4:ad:31:
c6:6b:88:d1:88:83:19:10:6c:ac:95:0f:12:44:03:1f:e4:a5:
20:6e:2b:10:10:25:ea:5b:e4:c8:14:d1:68:40:7c:38:ed:de:
02:f7:41:c9:cd:9b:74:08:7d:30:54:4f:80:dc:27:76:c5:c1:
21:97:9d:a7:e3:ee:18:af:fe:5d:73:fb:67:b5:cd:de:b4:3b:
cd:0f:f6:48:9f:5f:5b:c0:ed:d8:15:cf:f4:03:c6:42:2e:9c:
af:7c:c0:e2:ac:db:72:59:f5:eb:fd:28:83:ec:0f:b0:1a:0c:
e4:cb:6e:e4:95:62:96:e1:a7:db:8f:0f:c6:c3:ad:40:22:bf:
3d:cc:f4:62:c1:ba:13:cb:f5:44:c1:6a:6d:41:3a:98:76:50:
64:f6:f7:db:c5:9b:69:4b:ce:2b:b4:51:6b:ff:c7:b0:74:88:
91:bd:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:01:05 2025 by rpki-client