Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/arusjHpb20kgUY0I8OksJNqh_CM.roa
File: arusjHpb20kgUY0I8OksJNqh_CM.roa (raw, json)
Hash identifier: Co+LT1dHBr5pwJmyylFyf4vEPb851Y8LzohwEZTU7kY=
Subject key identifier: 6A:BB:AC:8C:7A:5B:DB:49:20:51:8D:08:F0:E9:2C:24:DA:A1:FC:23
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C97ACEA935062E5B73D89C08C719B1E6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/arusjHpb20kgUY0I8OksJNqh_CM.roa
Signing time: Fri 10 Mar 2023 03:05:13 +0000
ROA not before: Fri 10 Mar 2023 03:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:c979:f5ea/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c9:7a:ce:a9:35:06:2e:5b:73:d8:9c:08:c7:19:b1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 03:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6abbac8c7a5bdb4920518d08f0e92c24daa1fc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d1:7f:92:79:66:95:ef:91:64:3d:82:a4:7c:
70:9d:9b:f1:1e:ba:67:bb:31:5c:ee:16:ce:a4:da:
ce:6d:c6:2c:e3:88:95:64:6a:12:40:1b:90:3b:9f:
99:5f:c6:45:9b:a6:5e:fd:c4:15:ea:76:27:80:b2:
7c:ed:2e:99:53:c7:22:60:30:7d:8e:a2:76:86:b0:
28:58:20:58:39:22:3b:a3:0b:6e:8f:7a:17:7f:f6:
c8:21:aa:01:88:4d:1c:23:50:31:b0:36:55:51:f5:
4d:89:cd:c8:66:93:f6:28:38:63:37:c7:9d:3d:57:
3f:c5:a1:70:79:41:dc:d0:d4:97:92:a3:a7:e5:06:
b0:56:a4:a3:d7:fc:ef:f5:bd:86:2a:79:5b:ca:7c:
d7:3f:52:76:41:3c:0f:f2:5e:4a:31:3e:56:42:45:
e1:b0:12:5d:17:d1:bc:cb:66:bb:bf:68:cd:c6:06:
8a:4f:54:76:f0:3c:1c:a8:12:be:dc:8e:fe:b5:99:
53:77:e9:90:dd:40:33:cf:78:2c:a2:2a:f1:46:0f:
ca:0b:e1:e0:87:5f:65:32:39:dc:c0:0f:e1:5e:29:
74:01:3b:56:87:16:0f:d0:15:7c:58:6e:59:0f:59:
26:cd:d8:83:f2:6c:3b:b9:82:4c:cd:61:90:fa:f8:
f0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BB:AC:8C:7A:5B:DB:49:20:51:8D:08:F0:E9:2C:24:DA:A1:FC:23
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/arusjHpb20kgUY0I8OksJNqh_CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:92:12:a9:07:03:6f:70:cf:6d:2b:e5:e8:86:78:df:88:da:
1f:46:02:49:8f:e0:2e:61:b7:9b:c9:03:d9:24:b6:df:56:f6:
00:25:18:24:29:70:10:ca:56:67:2f:48:cb:a3:20:fd:83:72:
42:95:eb:8b:a6:33:64:5c:73:57:33:8d:39:b0:57:9e:c4:42:
da:11:e7:8c:36:cd:57:10:05:ea:c3:b5:dd:93:58:e8:b4:cd:
81:8e:b0:83:f5:56:07:f2:a9:c5:f3:97:c3:92:cc:df:a2:11:
55:2f:49:8f:0c:84:f5:46:5b:d6:0f:c2:64:74:ec:f4:5e:62:
f9:6d:4f:7b:a0:25:16:fc:95:86:b4:06:e1:e0:a6:f1:b9:56:
b3:fe:7e:92:a7:e5:bf:80:bc:9d:b3:57:5b:68:8a:c1:61:61:
48:94:32:03:42:fd:17:ff:15:70:0d:2d:02:6a:d2:fd:d5:b2:
6c:39:8f:26:60:96:15:43:54:f9:12:3e:98:f3:c5:34:8a:dd:
d9:1c:76:09:94:15:e2:0a:1d:0f:1c:a7:45:ff:e7:f2:cd:bb:
b1:80:7c:17:22:bd:08:b7:5f:f2:87:1e:13:11:2a:a9:1b:13:
8a:59:12:14:14:38:bf:37:14:f3:f8:f2:4e:96:be:97:09:8a:
a3:2f:c1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:24:59 2025 by rpki-client