Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aicnC8wIlmF4nCYzzzC08mBbz8I.roa
File: aicnC8wIlmF4nCYzzzC08mBbz8I.roa (raw, json)
Hash identifier: n6tezt53r2s/FI6hBmnCzU0jC2Gv8+m5cnAU7mBYFCM=
Subject key identifier: 6A:27:27:0B:CC:08:96:61:78:9C:26:33:CF:30:B4:F2:60:5B:CF:C2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184ED23D97FF975E1E7F2E99560D3236BEF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aicnC8wIlmF4nCYzzzC08mBbz8I.roa
Signing time: Wed 07 Dec 2022 15:11:00 +0000
ROA not before: Wed 07 Dec 2022 15:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ed:23:d9:7f:f9:75:e1:e7:f2:e9:95:60:d3:23:6b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 7 15:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a27270bcc089661789c2633cf30b4f2605bcfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:81:e0:2d:b5:c8:51:99:45:4e:92:14:e0:
ed:b6:0b:55:a0:86:34:47:0d:af:cb:23:9b:b8:cf:
90:7f:ff:ae:52:0b:05:a2:79:72:1c:d4:3c:32:14:
d2:7a:5a:57:9f:fd:62:4b:2a:05:38:66:02:08:44:
3c:96:14:78:c2:f9:b8:88:bc:61:21:b9:84:b0:15:
91:a6:43:1a:3e:fe:9b:7f:44:7d:fb:f1:0a:39:f6:
c5:c1:77:e1:28:0f:67:70:53:2a:18:a3:f5:5c:4d:
30:14:14:c0:38:ef:a7:9a:fc:b7:20:07:45:05:95:
df:aa:ec:a4:88:74:66:3c:28:0c:ca:de:1d:37:10:
fc:29:54:f9:a6:40:b5:b9:44:18:28:90:59:60:55:
fb:73:78:5e:fa:31:eb:82:ba:dc:ae:c7:8e:cb:ee:
b5:ee:fb:e1:5d:1d:72:48:b5:97:e7:1d:da:c9:90:
85:d9:e0:5b:e8:09:31:2b:cf:c4:20:3e:9c:33:d5:
39:a8:a1:26:eb:e8:8e:15:69:56:2d:54:5c:e9:14:
8f:73:a0:b2:91:6b:98:82:81:40:a4:5a:34:ee:db:
e7:15:bd:dc:06:9c:62:4d:1a:e0:34:f1:91:22:58:
f3:d0:95:c2:d2:64:da:03:1c:90:8c:77:17:72:d7:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:27:27:0B:CC:08:96:61:78:9C:26:33:CF:30:B4:F2:60:5B:CF:C2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aicnC8wIlmF4nCYzzzC08mBbz8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:ac:71:56:64:95:03:b7:4f:e5:2d:ca:6d:1a:d7:49:0b:ad:
dd:3d:c4:51:7a:ac:76:f2:f7:33:ac:cc:ec:05:a2:bf:fd:ff:
dc:77:bc:8a:df:6e:86:cb:25:94:55:da:ab:63:09:dc:02:d7:
28:35:1f:2b:f2:9f:8e:91:a0:fa:7e:e5:7b:dd:f0:1b:0b:d4:
5e:fe:d5:d4:e3:99:88:ef:00:51:c0:05:70:7e:98:95:5e:53:
9c:34:cf:27:28:3c:0f:b1:0e:68:73:9a:b5:c5:6b:bf:c1:84:
78:ac:ca:c1:66:7f:89:6c:6d:0d:d7:87:d4:84:1a:a4:e3:64:
4b:19:91:34:d9:81:c7:f8:55:93:9b:11:76:f0:de:fa:16:e0:
13:23:6b:e3:b4:bd:b2:99:e6:1d:40:71:70:be:77:4f:e9:3b:
87:e6:25:16:1d:f6:da:0c:40:b6:ba:d9:2b:9c:94:12:2c:81:
a9:72:14:f0:41:fd:3b:f3:21:c1:2b:4e:75:b7:76:13:2e:f6:
b1:35:f7:bf:2c:ac:da:93:93:5b:3d:45:c5:db:48:02:99:ce:
35:6c:39:8d:72:9e:2d:82:b5:8a:d9:a7:a7:0c:78:35:44:4f:
60:d4:82:58:18:36:2f:ca:66:1d:a8:90:6f:fa:02:8d:51:3c:
c7:bf:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:24:56 2025 by rpki-client