Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/auWXFGjj48XN4NXI5PC6oo60JPM.roa
File: auWXFGjj48XN4NXI5PC6oo60JPM.roa (raw, json)
Hash identifier: HTg6z33atXHZVSAH5GH46s2exsu3gmHrcbIsxA24cog=
Subject key identifier: 6A:E5:97:14:68:E3:E3:C5:CD:E0:D5:C8:E4:F0:BA:A2:8E:B4:24:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018941E0132973474E440C0DCB781C9E42D8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/auWXFGjj48XN4NXI5PC6oo60JPM.roa
Signing time: Mon 10 Jul 2023 22:15:51 +0000
ROA not before: Mon 10 Jul 2023 22:15:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:41:e0:13:29:73:47:4e:44:0c:0d:cb:78:1c:9e:42:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 22:15:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ae5971468e3e3c5cde0d5c8e4f0baa28eb424f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2e:48:36:8d:24:05:bf:f9:9d:08:f5:7e:e1:
65:f4:0b:84:a9:c7:98:c2:a6:28:f3:69:c1:f7:12:
6f:71:1a:38:d2:5d:c6:cb:1e:cb:41:80:73:0b:4b:
df:1f:6a:53:f8:ae:32:1b:ac:aa:0e:1a:35:50:bd:
f4:58:51:40:aa:a9:a1:4f:3c:d7:db:41:08:62:bb:
d7:8e:22:86:4f:e8:c7:25:22:a5:a6:66:a9:5d:14:
39:13:51:37:7e:6e:66:f2:74:da:a6:85:80:6f:b9:
f9:15:8e:18:ed:67:f2:9a:62:ba:ef:a3:35:ce:30:
cd:03:f1:e3:99:ae:9f:20:b1:aa:31:22:97:85:53:
da:71:16:15:43:3a:49:11:bf:fa:26:dc:43:4f:69:
73:94:20:8c:7b:d5:e8:89:e8:1e:53:7c:f6:30:a6:
c9:dd:f4:64:e7:2a:65:d4:e1:3f:86:57:d1:93:c2:
be:30:ef:b7:56:f7:f5:34:e4:a5:3c:ef:46:cb:bb:
82:5e:fd:d8:20:a8:7b:61:6f:af:46:23:f5:97:c1:
15:d6:5f:83:71:0e:6e:b9:94:7c:10:52:02:b2:51:
e7:26:68:bf:6a:25:27:a8:6a:70:79:9e:f6:d7:6c:
00:a2:e4:24:b8:d2:dc:79:24:c7:1a:b0:78:86:2a:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E5:97:14:68:E3:E3:C5:CD:E0:D5:C8:E4:F0:BA:A2:8E:B4:24:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/auWXFGjj48XN4NXI5PC6oo60JPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:21:00:a1:a0:a0:f3:d0:87:6d:53:ef:7d:42:42:f7:9b:1d:
bb:c3:b2:eb:2a:e6:2b:ff:72:a6:da:48:9c:a3:f3:c4:a3:32:
d8:49:3b:85:21:d4:81:5f:47:cb:ed:e4:4c:d5:9e:8f:03:1d:
af:5e:d1:f8:0f:64:20:3b:66:0b:7d:ae:bd:81:3d:33:1b:22:
9d:68:d7:e6:7f:8b:e4:77:db:cd:cc:ec:f8:1c:6d:a2:5b:4d:
24:fb:d8:81:6f:78:b4:b2:c1:11:54:3c:8b:bd:c4:6c:52:5e:
4e:a5:61:f6:e8:46:3a:57:f7:e6:12:42:00:99:50:69:eb:5b:
76:1b:48:97:8a:86:79:da:c5:5b:77:79:db:d5:2e:cd:62:ef:
c7:dc:27:47:c4:73:a2:89:4a:d1:41:59:80:ad:50:ad:3d:2a:
cd:ce:af:30:6a:9b:8f:db:09:fe:8f:89:5e:e7:55:0d:28:d8:
c8:8d:1a:ea:52:2f:4e:d8:d6:42:43:68:43:14:df:f6:b6:8d:
75:d7:c8:90:18:72:59:76:a1:31:4d:ea:a1:a6:c5:3b:6f:06:
9d:28:f0:b1:fe:cc:9c:fd:7a:04:1b:3c:33:b6:ce:c0:58:da:
04:92:1a:28:7d:94:44:fa:26:f1:6b:66:20:58:dd:f2:da:44:
ea:fa:24:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:04:52 2025 by rpki-client