Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/auhYmCt1vi_1-ZYl1bEublZimzg.roa
File: auhYmCt1vi_1-ZYl1bEublZimzg.roa (raw, json)
Hash identifier: lgaGsHkwXextMmiDgaK1On+7JCSKxzKLAdHIbUEafko=
Subject key identifier: 6A:E8:58:98:2B:75:BE:2F:F5:F9:96:25:D5:B1:2E:6E:56:62:9B:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188462846D3D88D69D28A3F0CD2CE1BB1C5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/auhYmCt1vi_1-ZYl1bEublZimzg.roa
Signing time: Tue 23 May 2023 01:10:24 +0000
ROA not before: Tue 23 May 2023 01:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:46:28:46:d3:d8:8d:69:d2:8a:3f:0c:d2:ce:1b:b1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 23 01:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ae858982b75be2ff5f99625d5b12e6e56629b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:35:66:82:f3:0c:4c:3d:03:f1:6b:81:b5:c3:
6b:31:b4:57:4b:79:5d:c0:e2:de:23:4b:7a:20:54:
0f:e1:ee:2a:e7:87:fc:f8:22:89:6f:ee:b5:9a:12:
09:97:e3:f6:87:ba:c1:d8:93:20:35:2e:2b:3a:b8:
98:28:1c:fa:8b:b3:5a:c5:a2:8d:d9:4e:11:11:5f:
6f:11:54:1d:51:12:e7:e6:a4:3e:7a:2b:80:42:db:
4b:62:9f:d3:9c:a8:08:0b:07:66:61:f8:a3:aa:14:
57:03:36:a3:dd:63:63:76:39:fc:91:89:dc:01:36:
39:01:cc:f1:6c:e7:33:ce:3d:e5:52:2a:21:34:22:
f8:b1:31:cb:10:bb:33:e4:d4:d6:7f:cb:37:e7:9c:
08:87:7c:95:62:11:12:f1:3a:e9:75:9b:c2:1a:77:
9a:2b:1d:25:73:31:68:df:9c:93:54:fd:79:b1:7e:
2e:48:cb:86:6f:39:a4:a5:69:c4:38:97:63:64:e5:
97:c2:07:4a:fd:72:87:75:a9:e8:ca:39:d3:78:36:
cf:be:a9:8e:63:93:18:cc:80:11:ec:11:d4:db:aa:
ac:7d:7c:ee:d1:fc:41:2f:63:f2:00:7a:70:11:a2:
04:48:11:6e:2f:09:cf:41:11:ae:ce:74:d2:b9:73:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E8:58:98:2B:75:BE:2F:F5:F9:96:25:D5:B1:2E:6E:56:62:9B:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/auhYmCt1vi_1-ZYl1bEublZimzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:87:22:f8:e4:c8:4f:14:3c:c7:0a:f8:61:df:18:3b:80:eb:
e9:e1:a3:46:19:fe:dc:d1:f3:cc:bd:af:48:d8:00:28:54:1e:
67:4d:83:6a:e5:fe:50:00:43:78:0e:e0:80:18:4a:37:d3:d9:
ba:c3:3d:e2:50:27:e1:96:67:44:b2:45:90:06:a4:e1:60:4e:
45:29:7f:b6:b6:4c:88:a1:e0:b2:ee:bc:af:07:13:79:a7:89:
6b:5a:9d:9a:60:8d:c8:71:d9:09:b2:ae:84:65:dc:18:a5:ee:
f9:16:d9:63:d9:cf:dc:6c:0d:4b:12:3f:76:11:f9:08:e0:43:
b5:86:b9:d8:19:ed:b9:ce:0a:c3:a3:4b:e2:53:0c:48:20:e5:
7e:56:28:96:b5:08:2a:5c:e6:9b:e1:c6:3a:63:04:98:af:df:
b9:ec:0e:3c:73:23:28:50:88:16:ca:24:2d:b5:25:88:38:ea:
96:42:87:1a:99:e2:26:b3:2e:37:53:b1:aa:6e:fa:d2:e8:ae:
c8:05:f4:de:b1:9c:21:75:8e:3a:0a:c0:22:26:a1:bc:32:4a:
23:2a:56:3a:9e:70:48:01:4e:fc:15:76:a1:48:e0:50:b6:1c:
d6:b3:ab:fd:fa:ce:9a:9e:96:6c:dd:f2:b5:a9:cd:f6:93:06:
ea:cf:19:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:29:19 2025 by rpki-client