Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aoc7U8Yn3YZy6PIEa3Ybjv86TZ0.roa
File: aoc7U8Yn3YZy6PIEa3Ybjv86TZ0.roa (raw, json)
Hash identifier: Xhcyi0z/Moh002hspfZMyrn9KycpdIXR79N3QvoFoqM=
Subject key identifier: 6A:87:3B:53:C6:27:DD:86:72:E8:F2:04:6B:76:1B:8E:FF:3A:4D:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183D8CADC1DD6477056005DBCD894210A8E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aoc7U8Yn3YZy6PIEa3Ybjv86TZ0.roa
Signing time: Fri 14 Oct 2022 23:18:36 +0000
ROA not before: Fri 14 Oct 2022 23:18:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d8:ca:dc:1d:d6:47:70:56:00:5d:bc:d8:94:21:0a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 14 23:18:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a873b53c627dd8672e8f2046b761b8eff3a4d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a1:88:c2:89:2d:95:6d:01:1b:94:8b:9b:d2:
e2:a5:e7:77:3c:1b:bd:f7:4b:33:75:b0:96:5d:2b:
15:5a:5b:b4:b0:97:81:d3:30:fa:6c:99:9f:df:a7:
36:8a:59:bc:81:96:aa:55:9c:6b:6c:eb:83:d1:18:
3a:3b:9b:43:f5:b6:32:cb:29:c2:bf:07:63:9c:9f:
08:95:85:a6:c0:bc:9c:c2:cd:d7:ff:fa:fa:e0:f6:
30:33:48:98:61:fd:8d:27:c8:d4:43:8e:6d:5a:64:
7d:20:c9:17:5f:e4:c7:80:5d:3e:75:1a:a1:48:96:
35:85:78:e6:60:1f:58:fb:b6:29:2f:90:bb:f3:cb:
af:1b:75:83:ea:78:ed:4d:25:c6:e0:ea:57:38:74:
ff:54:4a:9e:43:a7:0c:aa:af:56:f7:0b:91:54:59:
5e:bc:ce:e2:55:88:ed:68:1b:e2:24:95:42:07:69:
61:c2:56:34:3e:75:07:af:e1:86:a0:00:60:ef:27:
43:55:0f:c7:27:4d:87:66:d2:3c:b5:2b:98:9a:a9:
41:96:c4:2c:99:4d:ef:f6:28:6e:bc:ff:d6:0d:35:
7f:ab:5b:b0:29:6b:b6:85:5f:a0:3d:4b:d4:2b:77:
63:dd:42:98:0c:5d:c3:3a:74:39:08:5b:26:05:85:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:87:3B:53:C6:27:DD:86:72:E8:F2:04:6B:76:1B:8E:FF:3A:4D:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aoc7U8Yn3YZy6PIEa3Ybjv86TZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:a7:20:c6:65:3e:7c:65:d0:23:88:8e:ab:e7:a0:9f:e3:86:
00:c9:c6:fc:3e:e3:02:b2:42:a4:2f:c5:20:e9:26:c8:d0:fc:
99:80:68:c7:3f:94:e0:f3:19:d3:89:f0:11:90:e6:c0:8e:60:
2f:66:02:80:95:ec:20:0b:4b:4e:e4:d7:be:6d:97:c5:52:67:
3a:a1:1d:32:c1:d4:3b:60:00:3c:04:ce:63:2b:1c:13:e8:6b:
6d:f6:74:3e:25:a8:23:51:27:83:d7:f9:1a:53:57:c1:99:1c:
ce:01:3e:4d:00:6a:df:f1:47:33:ed:b4:8a:c5:a7:3f:fd:77:
7b:c2:a7:80:d8:90:23:b1:d6:ad:e9:5e:aa:a5:72:40:25:7d:
7c:44:e7:fc:be:5f:8a:ec:a9:f8:98:4b:b1:45:8b:8c:e1:66:
42:76:b6:96:41:63:44:a0:62:c4:e4:35:44:08:32:55:3d:ec:
75:2c:77:fd:18:0e:f3:e9:1a:62:14:30:f9:b8:84:eb:2d:b2:
96:bb:29:d2:3f:71:61:ba:f5:45:b9:28:62:6c:00:fd:6e:57:
c2:fe:7d:99:c5:dc:e1:ce:61:8c:c8:46:6f:9d:e9:ae:c7:80:
3a:f6:6d:7b:db:e5:e2:c9:71:51:41:e3:74:a8:fd:fe:93:76:
43:1a:0d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:00 2025 by rpki-client