Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ajZCnzTF3CNS7TG3YpdYZG_-ZVw.roa
File: ajZCnzTF3CNS7TG3YpdYZG_-ZVw.roa (raw, json)
Hash identifier: +y9q3+XVJWHEqOTb2MlmH+lTlIOvBYuui86S6qgi7T4=
Subject key identifier: 6A:36:42:9F:34:C5:DC:23:52:ED:31:B7:62:97:58:64:6F:FE:65:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01832713A9CDE5DF2268547FB67467533609
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ajZCnzTF3CNS7TG3YpdYZG_-ZVw.roa
Signing time: Sat 10 Sep 2022 11:05:43 +0000
ROA not before: Sat 10 Sep 2022 11:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:2712:c601/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:27:13:a9:cd:e5:df:22:68:54:7f:b6:74:67:53:36:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 10 11:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a36429f34c5dc2352ed31b7629758646ffe655c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:8c:dc:70:04:67:f8:37:ca:71:a8:cc:24:
28:e6:d3:a5:39:fb:f1:c9:a0:fd:17:bd:d7:95:b3:
b5:bd:f8:7f:51:65:70:ff:ff:27:a6:b9:ee:85:5a:
00:4e:b8:48:1e:1d:fa:85:70:0c:15:e8:92:b9:16:
de:91:eb:bf:24:28:57:4e:5c:ea:05:a8:46:09:a3:
f7:7c:c3:cf:37:5c:b3:46:13:49:8d:52:61:a2:de:
d2:0a:2a:e5:e4:44:be:ff:f7:22:6d:46:a6:b9:4b:
95:13:d7:01:1f:f3:61:09:e2:83:29:1b:50:da:de:
55:aa:45:9e:ef:2b:31:c2:73:50:e1:f1:24:a8:58:
22:77:69:94:29:e4:9a:32:3d:c5:f0:5f:d1:28:ba:
ab:7b:df:ea:14:55:98:5e:7b:4f:03:a1:6b:5e:a2:
0e:38:08:11:10:27:25:2b:b1:a6:13:78:f0:8d:13:
9c:85:68:d7:d5:96:44:6f:7b:26:8e:b5:a8:a5:03:
6a:36:f8:44:d8:19:7c:1c:ba:82:09:f5:6c:a6:63:
bc:b5:8f:bc:b9:f3:04:88:26:b9:a3:91:84:28:1c:
d2:2e:4d:d9:a9:67:33:44:f2:ca:2c:58:4f:8e:35:
d3:49:73:8d:bf:c6:cf:ab:5d:e3:be:57:ba:a8:a9:
7b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:36:42:9F:34:C5:DC:23:52:ED:31:B7:62:97:58:64:6F:FE:65:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ajZCnzTF3CNS7TG3YpdYZG_-ZVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:2e:4e:7f:d6:f7:33:02:96:20:bb:3f:3e:e9:95:e6:b6:76:
4b:6a:9c:1f:7d:fc:11:3c:8e:23:8b:10:eb:37:aa:be:a8:c3:
46:8c:39:f9:d6:69:8d:7e:83:d3:09:53:9a:a3:15:f5:3d:fb:
32:42:d0:60:22:00:db:d1:3f:92:2b:0e:a5:2c:27:68:0d:a2:
6c:62:68:67:ea:03:e0:86:f4:3d:46:8f:a5:2c:7f:32:63:ed:
7f:f1:cd:71:37:ac:a3:13:ee:ae:96:93:c4:dd:b2:68:45:72:
d3:67:63:b5:ef:1f:8d:f3:f2:f2:b3:b6:94:68:ca:b6:10:08:
4a:12:2f:4c:5f:91:7f:e0:ed:a4:8d:b9:c9:58:1d:19:58:9d:
ba:f3:7a:e4:1b:29:ff:9d:05:ec:b6:36:98:48:5f:c2:0e:44:
5e:10:21:13:32:62:1d:47:27:69:c0:72:f0:5d:76:33:05:ce:
00:47:29:8f:79:24:f5:ba:60:7a:aa:82:3e:a3:fc:99:e6:cf:
e8:20:d1:2b:d7:58:a3:7b:16:3d:39:2c:17:67:a0:56:f5:2c:
a4:b2:5e:ff:ef:d2:ce:78:51:a3:fe:ea:7e:24:0b:2f:bb:f2:
ac:b3:03:1d:8b:aa:19:8c:2d:98:0c:c0:f3:bc:94:e1:b7:4b:
5c:2b:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:58:25 2025 by rpki-client