Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ankg_dCrFaQxP91BSWwESUB8NJk.roa
File: ankg_dCrFaQxP91BSWwESUB8NJk.roa (raw, json)
Hash identifier: w96uon809dlcQvDUfbvd8QEqmKrH+YfQXzvbKn+K/+I=
Subject key identifier: 6A:79:20:FD:D0:AB:15:A4:31:3F:DD:41:49:6C:04:49:40:7C:34:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018414DB965EF02E2F0D4122D5278F56FC53
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ankg_dCrFaQxP91BSWwESUB8NJk.roa
Signing time: Wed 26 Oct 2022 15:14:05 +0000
ROA not before: Wed 26 Oct 2022 15:14:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:db:96:5e:f0:2e:2f:0d:41:22:d5:27:8f:56:fc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 26 15:14:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a7920fdd0ab15a4313fdd41496c0449407c3499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:25:b5:63:0d:61:43:ad:7d:b5:89:f3:24:
00:ad:72:ba:32:65:8e:f0:81:f6:6c:32:06:76:58:
af:da:39:11:02:4f:6d:56:5f:32:92:30:91:d9:0a:
d1:ad:b2:97:3d:0a:cd:ff:9c:ed:35:b6:94:d6:1d:
0b:4e:03:3f:be:03:86:51:6b:5f:7d:7b:40:c0:6f:
d0:ff:c0:7d:f4:b9:ab:9a:b2:f6:26:fa:b3:ed:b6:
f5:59:bd:04:ff:26:75:e1:b0:2c:d9:d5:40:ba:89:
77:cd:5f:ca:7f:e3:fb:f0:d2:6a:54:b0:f8:f1:c3:
31:2d:05:fb:a3:35:af:35:8a:96:cc:d6:01:7e:d1:
68:f2:1d:0d:dd:98:15:c2:72:34:c5:b1:a8:66:9b:
d1:20:c9:54:4c:1f:0e:a4:ef:63:d4:c3:22:48:36:
a7:d4:3f:89:7e:f0:da:30:d7:8c:5e:c0:82:4c:14:
0d:43:91:d7:dc:d1:9d:90:39:2f:c0:6d:ff:ff:ee:
f9:f4:f8:dc:dd:31:58:c2:88:80:cc:0f:5b:a3:6c:
91:fd:94:c8:b0:f3:38:fe:4b:e6:8f:37:92:f9:23:
a9:61:0b:14:77:29:82:35:91:c4:03:6b:b4:27:b2:
c2:2f:81:67:ff:c5:fb:62:b0:29:1c:80:39:90:8e:
30:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:79:20:FD:D0:AB:15:A4:31:3F:DD:41:49:6C:04:49:40:7C:34:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ankg_dCrFaQxP91BSWwESUB8NJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:42:50:9a:52:f6:6e:c1:ae:f8:51:82:da:96:2f:47:01:79:
6e:bc:e6:c0:54:6d:ab:e0:32:bf:1f:40:e6:a4:b2:4f:22:1c:
ea:a2:83:90:81:1d:60:af:36:5d:3e:8b:af:aa:f0:da:7f:72:
67:eb:2e:ae:8e:0b:b0:20:67:4c:ac:54:83:b0:7f:e1:84:1f:
ea:63:6d:d1:cd:0a:aa:8d:41:9c:1a:ee:ee:9c:9b:47:e4:bd:
84:2f:ac:3f:8f:7b:33:56:78:a4:03:bd:3f:20:7a:09:01:c4:
42:ca:0a:8b:10:fe:44:49:c6:68:e3:1b:6c:85:14:9b:32:7c:
1b:a1:8e:31:54:de:94:6f:cf:b4:fd:b5:7f:73:ab:5a:7f:d3:
0e:44:c3:b2:c6:95:78:65:57:d8:85:43:65:69:57:80:f8:27:
54:bf:58:65:df:2a:7d:54:1b:9a:a4:c2:c3:13:67:a9:25:19:
09:5f:96:97:7b:4c:c3:1f:07:42:c4:1e:04:e9:35:ac:11:26:
b3:67:24:5f:26:3f:85:bc:ec:bc:f7:41:d1:14:48:fd:cf:f8:
5e:3a:2e:05:0f:4e:00:b9:64:6f:dd:53:db:17:38:30:14:c4:
ed:b8:7d:1b:3f:10:e9:6d:1c:59:a2:35:9e:f6:0a:45:56:aa:
38:a0:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:19:05 2025 by rpki-client