Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AFqzGqxZoUd5r2pKnDeRMA0gvjM.roa
File: AFqzGqxZoUd5r2pKnDeRMA0gvjM.roa (raw, json)
Hash identifier: 36lchcXneWZP8n8h26sCzZHKU+Y7SzvVPVTtiH3O8gg=
Subject key identifier: 00:5A:B3:1A:AC:59:A1:47:79:AF:6A:4A:9C:37:91:30:0D:20:BE:33
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8EE52ACC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AFqzGqxZoUd5r2pKnDeRMA0gvjM.roa
Signing time: Wed 22 Jun 2022 07:10:44 +0000
ROA not before: Wed 22 Jun 2022 07:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2397383372 (0x8ee52acc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 22 07:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=005ab31aac59a14779af6a4a9c3791300d20be33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:29:20:c7:4e:9c:15:2d:00:fd:98:33:e3:
a9:fd:eb:8a:57:e6:25:5f:ef:69:e6:ab:04:85:18:
ef:b6:11:62:77:36:49:4b:8f:7d:e9:7e:ef:52:4e:
6a:30:95:8e:0a:24:ed:d4:bd:de:11:2c:8d:de:79:
03:a4:3f:61:fb:1c:3c:af:0a:a0:26:3d:23:1d:4c:
6a:87:d8:5c:4a:ef:ea:5c:7f:34:07:d1:4c:9a:51:
f2:6e:f7:71:66:d4:be:06:fb:fd:1e:5e:2f:39:e7:
ad:24:6d:98:c9:7e:7e:39:4e:c2:a8:80:8d:99:62:
27:25:82:9a:e8:e0:da:b9:3f:90:15:78:b3:73:fe:
5f:fe:98:74:81:36:2c:ae:6b:c8:0f:e5:08:25:90:
a4:6f:36:1c:72:d0:af:88:ad:2d:08:00:1d:aa:75:
d5:a1:ff:70:d9:3c:67:91:53:91:3d:f4:a5:81:9f:
0d:d9:e0:77:9e:ae:41:d0:9e:1d:aa:31:b6:1c:bb:
64:c8:9b:d2:2a:d3:76:1d:04:25:45:44:73:6f:71:
6b:ae:d4:b3:8b:b5:f4:61:25:db:ba:52:92:38:56:
38:23:ad:3a:02:d8:c9:a0:38:41:f4:1e:60:72:05:
80:fb:fa:0b:6f:39:0b:2e:08:20:fa:e8:f9:27:24:
fd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5A:B3:1A:AC:59:A1:47:79:AF:6A:4A:9C:37:91:30:0D:20:BE:33
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AFqzGqxZoUd5r2pKnDeRMA0gvjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:66:7c:a1:5e:5b:86:75:14:92:09:78:ca:fb:fe:6c:0f:a7:
f6:46:9c:40:22:0f:d5:70:fd:a3:30:ab:d1:61:70:d3:f0:2e:
b2:2b:9c:12:38:4f:57:7b:95:bf:9c:25:26:46:28:79:69:80:
71:43:c2:93:9b:33:8c:66:db:c2:9f:b5:80:d9:01:b0:47:29:
26:a2:35:c4:f5:fa:1d:64:6c:73:86:35:f4:dc:f1:a5:3e:77:
76:d4:31:eb:f0:e7:89:8d:77:db:34:df:3e:dc:a0:46:93:e7:
a1:01:51:ac:66:e3:f9:4a:0b:a8:fe:14:f0:87:7a:28:ab:e9:
8a:b3:d0:69:2f:22:0f:1d:16:e2:8b:2b:bd:ad:e5:5f:fe:ff:
37:fc:96:a2:a8:ba:26:6d:2a:b5:94:a9:76:6a:08:f3:b1:fb:
86:c3:34:18:30:b4:d7:0f:fd:d2:c5:f6:d3:b2:a3:66:35:7a:
35:ff:65:33:84:1b:23:c5:97:bd:18:a1:11:2a:72:61:5d:d8:
09:85:86:c2:1f:79:16:d8:02:1f:0e:80:f2:96:23:da:bd:d1:
b5:84:f4:fd:47:2e:18:23:e0:84:89:48:95:80:35:c9:23:12:
29:24:4d:2d:09:32:3b:6b:73:fc:cf:ce:0e:94:f6:3f:c9:f6:
c7:3c:92:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:46:30 2025 by rpki-client