Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ajiJUnwHdn5AooJQ_0clC-nMULo.roa
File: ajiJUnwHdn5AooJQ_0clC-nMULo.roa (raw, json)
Hash identifier: zC72WY3DZCqMPEMNIX0qtF/qnDuRIGaYFjAgYq3HkKY=
Subject key identifier: 6A:38:89:52:7C:07:76:7E:40:A2:82:50:FF:47:25:0B:E9:CC:50:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F543AC38BEDB36C2CDB834A1D93464D8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ajiJUnwHdn5AooJQ_0clC-nMULo.roa
Signing time: Sun 07 May 2023 08:11:05 +0000
ROA not before: Sun 07 May 2023 08:11:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f5:43:ac:38:be:db:36:c2:cd:b8:34:a1:d9:34:64:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 7 08:11:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a3889527c07767e40a28250ff47250be9cc50ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:48:f5:46:50:7f:12:9f:2a:96:75:4b:07:40:
83:b9:b3:f4:d8:76:b5:d4:21:ee:67:ec:92:ad:31:
bf:57:f7:b6:af:d6:fd:1c:cc:29:b6:3d:37:c2:af:
61:32:71:02:6c:f5:cb:78:be:9d:77:45:0f:90:95:
40:d8:b6:db:c6:9b:04:57:ff:93:4e:0e:8a:64:12:
e5:bc:45:00:9e:2f:60:29:a8:09:7d:0a:9d:59:0f:
96:7d:17:b9:c8:95:00:ac:62:bb:fe:e1:a9:ff:94:
17:b8:88:a7:56:81:43:19:f6:08:b5:ed:7a:97:32:
11:6a:04:80:3f:24:7e:11:74:5d:15:36:ab:d7:23:
51:f8:06:ba:8b:2a:f6:aa:bf:f3:9e:10:f9:02:bb:
cd:7d:b9:39:94:1b:41:31:cd:6b:29:87:b8:bb:ae:
4a:af:db:d0:2c:4f:fb:43:91:7a:0c:92:0a:3c:35:
fd:e7:da:43:26:53:17:4c:51:9d:c9:17:cc:ea:e7:
74:3c:8f:39:6c:3d:70:60:bf:15:87:fa:40:24:66:
ca:bc:0e:b7:c7:fb:d8:b9:bd:20:2d:f6:87:be:7d:
33:ae:59:7d:45:83:33:46:84:e5:3f:89:c3:77:08:
94:68:7b:73:46:96:64:3e:8b:5b:2f:6b:8f:74:1a:
7f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:38:89:52:7C:07:76:7E:40:A2:82:50:FF:47:25:0B:E9:CC:50:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ajiJUnwHdn5AooJQ_0clC-nMULo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:4a:80:0f:ee:2a:f9:72:64:8f:c3:9b:b1:14:80:f5:1c:5d:
f4:c6:0e:f7:b6:32:ba:c5:8c:9d:9e:3a:10:2d:83:05:2c:4e:
75:62:da:60:0d:0b:73:19:b3:d7:11:0a:cf:14:6d:68:16:09:
b7:3e:a7:10:ce:97:c7:10:14:27:5a:c8:5d:1e:6f:8e:42:3c:
3c:97:0b:cb:5d:34:7f:50:f3:0a:a9:7d:1b:57:97:c8:88:6e:
db:81:10:41:4f:8b:06:24:b3:43:75:16:79:0a:fe:76:70:e5:
2f:9d:b7:79:bb:49:46:19:5c:70:cf:38:1c:04:cb:b1:62:82:
cc:d7:bf:a6:a7:4f:26:7e:03:e9:83:c3:b2:77:95:2c:e7:66:
fb:04:3f:15:60:4e:00:19:21:1f:49:89:8f:d6:e4:7f:15:54:
b8:5e:33:bf:fe:d8:a4:34:27:f8:5c:0f:68:42:bf:a0:30:8f:
42:a3:3f:37:f6:71:42:22:e3:0e:2a:6c:54:22:b9:c4:15:3f:
da:61:c8:00:ea:b2:69:65:c1:5d:b1:b2:7f:eb:3d:34:07:c4:
58:45:c2:af:c7:32:c1:ca:fc:d1:18:0f:9e:87:82:72:c4:39:
a4:db:3e:4e:4b:f6:c6:3c:1e:c1:c5:bc:26:83:49:9a:47:f0:
7f:fe:da:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:27 2025 by rpki-client