Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pn-r-AqsT8DPlxCTRqRfb3Bhe5U.roa
File: pn-r-AqsT8DPlxCTRqRfb3Bhe5U.roa (raw, json)
Hash identifier: dYgUkWb4CxgauVbLXrM+UTrZd4xR3fBKvsoKsAzFggY=
Subject key identifier: A6:7F:AB:F8:0A:AC:4F:C0:CF:97:10:93:46:A4:5F:6F:70:61:7B:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865FEDFC12DA54C73BE205BEF400B91F0F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pn-r-AqsT8DPlxCTRqRfb3Bhe5U.roa
Signing time: Fri 17 Feb 2023 15:11:17 +0000
ROA not before: Fri 17 Feb 2023 15:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5f:ed:fc:12:da:54:c7:3b:e2:05:be:f4:00:b9:1f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 15:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a67fabf80aac4fc0cf97109346a45f6f70617b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:a4:9a:c7:3e:4e:6e:b9:ac:8d:3d:90:8c:
a3:24:c2:64:af:33:60:6b:a3:1e:d1:0f:bb:27:b6:
27:e4:d1:b1:64:fc:9d:f7:f9:01:c2:f2:ce:05:b5:
4b:75:db:12:7b:bb:34:28:5a:a5:0f:60:9d:b4:2e:
27:ab:e2:91:3f:32:ce:ec:09:4f:da:56:12:30:1b:
59:01:7b:a9:bb:e1:5c:56:57:b7:a8:66:a4:66:39:
aa:ab:80:9c:16:05:fc:50:6e:12:e8:73:f0:b6:0e:
8a:b1:7c:83:7b:0e:91:f5:48:81:90:13:66:5e:82:
ae:2e:be:5d:ee:28:74:29:3c:06:a5:24:fd:a6:42:
09:79:2c:ed:df:0c:04:14:4f:f9:dc:95:89:e3:e5:
b0:09:f5:82:9c:f1:82:cf:98:0c:71:73:5c:82:00:
e9:23:e2:4f:16:e0:b9:68:dc:cd:70:87:80:41:aa:
40:25:77:f1:21:05:21:30:5f:8d:a5:b9:60:7b:58:
7c:86:13:78:8c:b2:fe:1a:61:9d:c6:f7:e2:3f:7d:
0e:59:70:63:63:3e:f1:04:8b:31:44:1d:4f:71:8a:
06:36:d5:96:24:32:8e:90:d6:b9:0f:9c:22:86:38:
fe:de:fe:15:d7:e4:92:70:23:d2:4c:23:d9:ef:7b:
2d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7F:AB:F8:0A:AC:4F:C0:CF:97:10:93:46:A4:5F:6F:70:61:7B:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pn-r-AqsT8DPlxCTRqRfb3Bhe5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:89:d0:9b:72:b1:b5:39:bd:e1:bb:c5:49:01:13:e0:5b:83:
8a:c2:a3:60:3a:3a:dd:cb:60:f4:0e:14:d7:55:76:64:25:4c:
0b:72:8e:72:3a:32:89:75:2e:76:82:09:e2:cd:46:42:72:a6:
8d:e0:ab:99:8c:a9:73:62:9f:fa:87:1c:9b:3d:7b:20:78:3b:
e0:a0:28:00:1e:c1:79:8d:d1:be:0f:04:c2:de:10:1a:9e:7a:
fe:fc:20:fa:2e:cd:e3:8c:21:3c:db:18:d8:87:cd:8a:db:53:
1c:a2:23:68:7f:50:10:29:f8:43:36:49:f6:af:0f:e7:df:ed:
38:c0:d5:1f:13:b4:0d:01:c1:31:9c:47:75:b1:4b:80:ff:eb:
ad:4c:97:11:f0:87:cf:3f:ba:d7:c9:d2:1a:c5:a2:17:7b:f5:
bc:f9:33:02:63:44:77:33:62:77:7f:e2:a8:b4:40:3e:8b:0c:
64:18:4f:15:34:d4:0f:88:45:a4:be:64:bd:aa:06:a2:22:6b:
64:95:ce:ba:14:99:6a:58:ff:bb:e2:bc:c5:e2:d6:de:7f:b1:
c7:50:17:31:f1:f2:13:d4:08:40:a0:8e:94:52:08:f6:85:ab:
e4:ec:d5:4e:59:d4:11:fe:bc:6c:c2:79:9b:18:00:b8:2b:f4:
80:3e:95:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:24 2025 by rpki-client