Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/atAU2CCOd6ePtmBJxUYU-d45EMk.roa
File: atAU2CCOd6ePtmBJxUYU-d45EMk.roa (raw, json)
Hash identifier: VGJUoZp7eS8EaUmQWvXV2njNPc4xOs8y8na1QlmhXKw=
Subject key identifier: 6A:D0:14:D8:20:8E:77:A7:8F:B6:60:49:C5:46:14:F9:DE:39:10:C9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182549C917AE0F97F16DC627071A1E3C73A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/atAU2CCOd6ePtmBJxUYU-d45EMk.roa
Signing time: Sun 31 Jul 2022 14:15:23 +0000
ROA not before: Sun 31 Jul 2022 14:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:54:9c:91:7a:e0:f9:7f:16:dc:62:70:71:a1:e3:c7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 14:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ad014d8208e77a78fb66049c54614f9de3910c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7e:d7:55:78:7b:53:9d:ea:68:69:47:56:34:
68:e6:b3:48:be:65:11:35:f6:c0:a4:49:7d:26:5e:
da:bb:ad:12:c8:c9:82:ff:72:db:63:16:a8:ad:f7:
a8:de:30:c2:7c:34:a9:02:75:d0:64:2f:c9:ab:79:
26:31:e2:89:2c:2d:15:61:b2:54:75:03:c6:36:e0:
52:b3:90:63:60:9f:9d:79:51:98:0b:10:52:17:bf:
c4:b0:d1:82:24:c0:f7:11:c0:5a:ce:ff:df:91:1d:
12:85:3c:25:67:d2:cf:a5:56:89:02:43:c3:9a:4e:
1d:b1:99:8d:af:7c:58:6c:f4:f4:df:02:40:d8:7f:
c3:d7:06:2b:4f:d7:4c:08:05:79:9b:89:da:48:a8:
f2:3f:21:d0:50:92:34:42:21:db:a0:cd:5c:68:26:
88:e9:d8:8a:30:7d:ab:6e:69:8c:4d:d9:dc:c4:b7:
ee:d8:ff:50:b4:ca:41:8e:50:c8:93:cf:bc:64:76:
cc:7d:04:ad:73:e9:9d:98:38:02:4c:e0:2f:83:07:
03:9e:16:07:a4:31:93:a2:9b:d8:92:ed:99:bc:7b:
cb:ef:91:70:cf:79:cd:42:b7:03:48:09:99:a8:f0:
37:61:a9:93:24:81:06:d5:c6:a9:2e:84:3a:6b:e6:
2d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D0:14:D8:20:8E:77:A7:8F:B6:60:49:C5:46:14:F9:DE:39:10:C9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/atAU2CCOd6ePtmBJxUYU-d45EMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:75:81:0f:6f:a4:ad:78:78:b3:13:e1:81:61:a1:27:91:44:
be:91:32:38:07:c3:9e:d1:96:4d:af:9a:af:e4:bb:a0:5a:0b:
42:5c:b1:9e:5b:24:98:16:09:0f:52:06:93:af:6f:72:a2:52:
d9:d7:16:a7:a0:b8:00:b1:32:a3:49:95:ea:48:37:8c:fa:5b:
35:4a:43:2b:92:5e:2f:4b:17:10:b4:08:5e:be:68:cb:8f:11:
8f:d8:47:0b:1a:d9:8c:0a:6b:a5:a2:38:eb:65:0f:0c:35:ec:
6e:91:eb:21:14:09:ed:0d:6b:92:34:d7:d8:4a:ee:d8:a6:34:
c6:38:c4:3c:37:8f:3b:81:06:00:6b:70:29:8e:b6:5e:c2:b7:
b9:4f:65:28:77:20:a1:f9:db:ea:1c:f2:aa:0c:a1:01:c8:b2:
d6:62:25:63:67:5d:41:07:b2:40:4d:79:ba:13:2f:47:10:f8:
89:c2:1d:d0:3f:0d:a0:51:f2:bc:a4:92:e8:a9:b8:22:4c:11:
42:93:64:b6:50:68:15:7b:48:28:03:75:7d:76:2a:4a:5e:3f:
c9:15:83:a6:44:78:fa:f6:bf:7f:90:f7:5e:70:08:bf:a5:ce:
f1:d0:44:4f:59:af:c7:c0:4f:f5:6c:6b:59:7f:65:d5:5c:98:
34:ae:3e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:38:26 2025 by rpki-client