Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AG5Pl_M2ZdKwjxESLflN4Ljufc8.roa
File: AG5Pl_M2ZdKwjxESLflN4Ljufc8.roa (raw, json)
Hash identifier: 9wO1WVy/2otYCGQEjkcxg7dct0tTBp/0bzq0BNy4NoA=
Subject key identifier: 00:6E:4F:97:F3:36:65:D2:B0:8F:11:12:2D:F9:4D:E0:B8:EE:7D:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D433CD1DECBBE09737825ED64EEA03CA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AG5Pl_M2ZdKwjxESLflN4Ljufc8.roa
Signing time: Mon 19 Jun 2023 15:09:04 +0000
ROA not before: Mon 19 Jun 2023 15:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d4:33:cd:1d:ec:bb:e0:97:37:82:5e:d6:4e:ea:03:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 15:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=006e4f97f33665d2b08f11122df94de0b8ee7dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:93:ca:b0:bf:a3:01:49:22:5d:25:71:42:
30:68:45:fd:e1:16:d6:c2:bb:89:f0:26:fe:ac:1d:
db:c7:fc:84:70:e2:34:a8:55:94:87:19:6e:2e:78:
64:2c:4c:18:53:04:52:ca:66:59:53:e0:41:a5:13:
9f:ff:79:f4:3c:75:74:3d:7e:74:ad:d0:bd:fb:6c:
5f:2a:8b:01:63:34:34:2d:95:55:9d:c7:2d:b0:70:
3b:90:0f:b7:0a:a1:b9:09:8b:46:fe:a5:e0:03:45:
bb:c6:43:a6:3c:d9:b0:6c:49:31:7b:6d:e4:d6:11:
29:bd:92:4f:89:c2:75:ca:36:e5:a9:a4:01:61:cc:
2b:25:0b:73:c7:8d:7e:ad:98:2c:23:aa:98:03:55:
dd:76:62:1f:6b:9a:74:f6:82:8a:a2:43:8e:c4:f6:
12:82:97:0a:98:8a:6b:0e:35:9f:7c:ee:38:6b:31:
9b:02:f3:14:aa:d8:c1:d8:23:fe:67:4a:91:bb:f7:
43:a4:9b:4c:92:b7:cb:d9:ae:73:4b:60:ef:3e:bc:
73:0d:a1:d0:5f:2e:1b:dd:70:30:2c:aa:4b:0e:a5:
b5:e8:d1:9f:ed:1a:c1:24:2d:e1:30:ad:8d:5a:26:
b9:0e:9d:a7:50:3e:53:c1:5f:4d:34:c5:84:5e:41:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6E:4F:97:F3:36:65:D2:B0:8F:11:12:2D:F9:4D:E0:B8:EE:7D:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AG5Pl_M2ZdKwjxESLflN4Ljufc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:57:20:c9:5e:51:4f:40:7a:90:c9:c6:6c:44:76:a4:e1:a9:
7a:af:ea:0f:1b:44:a7:c3:ab:78:e6:02:e7:27:e8:c2:ab:4f:
d1:99:f3:33:bc:2e:b2:f1:eb:5e:42:f2:05:fa:8b:ca:36:2f:
b8:0b:cc:c5:1a:4a:e4:6c:7c:7c:75:be:a6:1e:30:87:e1:5a:
f0:cd:b3:ea:6c:fe:95:51:95:d5:d2:bf:d9:27:b3:77:49:53:
3b:50:1f:d7:68:36:1b:f0:54:27:93:1c:50:3a:cd:37:0d:2d:
90:a5:bd:d5:3f:6c:01:d6:6c:05:84:5a:39:7a:48:f9:ac:b3:
31:46:80:17:62:4d:18:83:8c:e7:b1:64:fa:2e:7b:6e:6e:a7:
e3:3c:58:26:b2:6c:3b:78:e6:80:48:7b:48:e7:c0:89:c4:3e:
d8:ef:18:1f:a0:8a:ba:8e:58:d9:4c:da:fe:71:ce:f0:42:c4:
71:c1:0a:4a:11:7c:54:77:5f:0b:31:c3:d3:97:b2:8d:5c:c0:
6a:d8:6a:3a:7b:ca:55:b9:53:d2:a3:38:36:bd:15:11:89:09:
8d:0b:02:e8:53:09:e2:c6:53:55:a1:3b:99:dc:8c:57:b4:61:
9a:22:dd:cf:34:96:20:e7:b6:1f:27:11:92:f5:e1:09:3e:a4:
04:3c:9e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:24:22 2025 by rpki-client