Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aXioKjy-q2CbSy9AKTdb8R6QP2o.roa
File: aXioKjy-q2CbSy9AKTdb8R6QP2o.roa (raw, json)
Hash identifier: xAGVizZayRPu4ZD3AIi/hCx9spsYJR35KK++RXXJLPI=
Subject key identifier: 69:78:A8:2A:3C:BE:AB:60:9B:4B:2F:40:29:37:5B:F1:1E:90:3F:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188E0DD9009B4B9F769956AF743A69AC15D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aXioKjy-q2CbSy9AKTdb8R6QP2o.roa
Signing time: Thu 22 Jun 2023 02:09:56 +0000
ROA not before: Thu 22 Jun 2023 02:09:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e0:dd:90:09:b4:b9:f7:69:95:6a:f7:43:a6:9a:c1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 22 02:09:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6978a82a3cbeab609b4b2f4029375bf11e903f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ec:6d:60:30:e9:54:19:a5:18:b1:b2:03:6d:
27:57:f2:c5:94:3a:80:37:42:7f:8f:21:4d:a4:f4:
6f:1c:f5:40:de:f2:80:79:16:3c:92:a7:3d:87:31:
fd:92:8f:db:ed:5c:5b:de:74:9a:de:fc:c7:9a:21:
db:e5:8b:1e:a5:9a:a7:57:4a:90:ac:17:f0:26:85:
a5:16:b9:80:d2:71:e5:24:79:fe:13:14:2c:d8:cd:
aa:8d:a0:ad:72:03:69:98:dd:22:f4:f5:37:40:8a:
93:20:61:1d:28:b6:6e:71:33:86:10:30:33:a6:85:
3d:21:31:ec:c8:74:c1:3f:26:ec:ba:29:31:45:bc:
81:37:73:48:d8:53:da:ec:ff:75:7b:b5:2a:95:ad:
45:f2:8e:12:70:13:f9:51:49:d8:b8:0c:66:b4:fe:
3b:26:71:63:28:77:98:20:25:e3:1b:79:c7:e0:f8:
f5:66:32:6f:48:17:e2:09:32:02:8f:96:32:7c:5b:
e4:7f:72:b4:5e:c8:a6:e9:dc:f2:8a:eb:35:0f:f8:
46:86:93:41:40:e7:9b:32:32:c4:f5:85:a9:7d:5f:
0e:3b:fa:b8:7d:36:a2:58:1d:0f:58:6f:bd:3e:b8:
a2:eb:ad:01:21:40:75:78:82:ca:ef:4c:04:c5:43:
aa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:78:A8:2A:3C:BE:AB:60:9B:4B:2F:40:29:37:5B:F1:1E:90:3F:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aXioKjy-q2CbSy9AKTdb8R6QP2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:0b:3d:ed:38:9e:e2:2f:76:b5:1c:ef:2f:d7:b0:d6:08:98:
86:92:a6:2a:24:87:1c:e0:96:ef:a1:a6:c2:47:87:cf:e4:11:
7e:f5:ec:7c:cb:5e:75:a5:cf:ff:28:a9:a2:ca:0e:93:6e:7c:
9b:79:c0:fd:f5:d1:ce:eb:34:79:b1:09:5f:30:44:4a:27:c2:
91:55:31:64:e9:c5:d0:80:08:8b:34:c1:48:b4:08:6c:da:10:
b0:6e:82:0b:9f:05:ff:1a:f7:50:2c:04:c4:3c:86:2a:17:24:
e7:35:9c:81:cf:d7:52:af:ed:b3:32:54:ae:31:14:f7:51:9a:
d0:1e:de:5b:77:4f:9d:08:51:36:2b:5e:09:dd:0c:35:eb:b7:
41:4b:7d:03:83:8d:fd:d7:ea:8b:ad:7a:12:ed:7f:4c:b9:ed:
fd:f1:f5:4d:9e:ff:67:43:b7:2a:70:2f:94:61:ed:75:ed:2f:
e3:b6:15:01:c4:4d:6b:58:09:6d:44:2f:ca:6f:81:70:c5:ed:
69:be:6a:7a:ca:aa:87:d3:4e:ec:fc:29:59:36:67:de:07:43:
a6:a9:41:e5:0a:f9:2f:11:b7:9e:f0:e6:6d:4c:48:2e:46:06:
3f:62:46:14:63:ea:ff:a1:a3:e2:42:bc:da:70:25:9c:c9:6c:
b2:d4:56:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:07:56 2025 by rpki-client