Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/afWV2c8AmPaSEtRE6zf612dtK70.roa
File: afWV2c8AmPaSEtRE6zf612dtK70.roa (raw, json)
Hash identifier: ln5BKjJhIvWO9Mytd3nSsy9pRzuvFI/PY8Wn964FsfQ=
Subject key identifier: 69:F5:95:D9:CF:00:98:F6:92:12:D4:44:EB:37:FA:D7:67:6D:2B:BD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874CD4EB4BEF5364216E39F25530ED20BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/afWV2c8AmPaSEtRE6zf612dtK70.roa
Signing time: Tue 04 Apr 2023 15:13:54 +0000
ROA not before: Tue 04 Apr 2023 15:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4c:d4:eb:4b:ef:53:64:21:6e:39:f2:55:30:ed:20:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 4 15:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69f595d9cf0098f69212d444eb37fad7676d2bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:d6:cd:9b:30:2b:e5:0f:7e:78:1f:d9:68:
1e:ad:db:fd:24:9d:5f:0d:2a:18:22:36:8e:86:9e:
a8:23:d1:2d:3c:7a:9f:9b:3b:32:f0:03:01:4f:ac:
e3:b1:45:4a:f5:63:3c:ad:3d:c0:98:e6:bc:b0:d2:
89:35:39:89:ef:38:f0:e1:08:7b:ca:8c:1c:d5:e4:
20:b8:95:a3:23:bf:af:16:da:f6:48:18:86:1b:18:
b2:68:12:81:4c:1d:18:6d:70:c0:9a:fe:88:96:6c:
eb:3a:2d:21:d5:38:27:e1:9b:17:76:c8:9a:fa:d8:
c5:99:70:38:27:7f:28:d5:4c:ec:07:8a:ca:98:ae:
7d:3b:84:2a:47:0e:d7:d6:98:08:c1:b1:1b:0f:eb:
b6:7e:54:f2:05:0e:4e:04:a3:82:27:ed:a3:e3:87:
1a:84:b6:01:7e:49:73:fc:62:22:b8:40:06:68:b2:
96:48:30:8b:10:6f:39:76:7e:e6:a3:ca:59:4a:22:
6f:43:15:8e:84:fb:56:af:2f:d5:51:ee:1c:a1:bf:
96:16:d7:73:62:89:da:36:ea:12:74:fb:9e:80:fd:
54:9a:83:2d:48:22:4a:be:7e:27:c5:9d:43:d7:f5:
a9:6a:fb:88:7a:39:52:9f:74:5a:5e:41:b2:59:fe:
e3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F5:95:D9:CF:00:98:F6:92:12:D4:44:EB:37:FA:D7:67:6D:2B:BD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/afWV2c8AmPaSEtRE6zf612dtK70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:5a:2e:9f:ee:fe:3b:e3:32:63:1b:9d:15:df:f2:73:98:cb:
93:75:a1:18:aa:84:3d:50:6a:8c:e3:11:52:9a:59:13:60:a7:
62:f8:76:0b:b3:34:dc:7d:58:f4:29:69:40:10:4d:f1:05:c9:
40:17:47:23:df:00:24:48:11:6c:dc:d3:fa:6f:43:fc:31:da:
ac:b5:9c:69:8e:42:8a:6f:ca:e0:6c:c0:16:c8:12:6e:36:bb:
6e:fc:23:de:db:f1:5e:ec:eb:1a:cd:57:91:7c:e6:a7:45:c1:
2c:1a:fa:de:06:bb:4f:08:b4:06:7a:a1:d9:5f:08:ce:4e:ac:
8c:bc:fb:7c:e5:94:10:69:11:c2:cb:a0:7e:66:c7:af:ff:d7:
df:2d:04:3a:31:63:e7:44:88:cf:a1:ab:12:63:da:8c:5d:65:
56:c6:22:e3:89:45:9c:0b:45:5d:bf:a8:6b:bc:d5:28:05:5a:
b6:6c:da:69:92:66:fc:69:da:44:2c:3f:cc:53:4e:02:48:17:
73:38:37:a5:65:4f:6d:c3:9c:78:0d:1c:ce:4a:12:a8:bb:6d:
1c:88:8f:44:c3:5c:4b:d4:7e:c9:28:07:4e:e2:ae:30:9f:e7:
c8:a7:af:5f:86:1b:a2:3e:69:fe:12:59:72:cc:03:d1:20:61:
84:e6:b2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:36:23 2025 by rpki-client