Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AGYa-7D07LtwnC_OgB4wp3K4bNs.roa
File: AGYa-7D07LtwnC_OgB4wp3K4bNs.roa (raw, json)
Hash identifier: uFAuyKLTsVdGbls2zXegrSSWXH5t/oxhZ12dQvBWyMk=
Subject key identifier: 00:66:1A:FB:B0:F4:EC:BB:70:9C:2F:CE:80:1E:30:A7:72:B8:6C:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 87A0238E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AGYa-7D07LtwnC_OgB4wp3K4bNs.roa
Signing time: Fri 27 May 2022 11:11:14 +0000
ROA not before: Fri 27 May 2022 11:11:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2275419022 (0x87a0238e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 11:11:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00661afbb0f4ecbb709c2fce801e30a772b86cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:f5:5c:fe:e6:28:c3:4c:2d:67:fe:80:03:
ae:02:18:b7:2d:21:45:63:91:73:ff:60:11:32:55:
aa:11:05:21:ed:fb:7d:e4:10:2d:f4:36:d1:16:6b:
2c:87:d4:dd:b8:b1:d8:e5:33:7a:90:7e:42:7b:f3:
b7:a2:01:1e:c4:33:6e:2e:4c:a7:48:74:17:66:8c:
c1:84:7b:5c:38:cd:b1:db:fc:e5:07:e4:a5:cf:a3:
3c:79:93:eb:be:2f:16:d7:f4:10:b9:a0:18:63:c1:
47:2f:3b:f6:b5:3f:ae:23:17:e3:5f:7e:3b:40:cf:
de:52:22:fa:c0:a0:7e:c2:71:37:40:92:9e:6d:de:
1b:1c:1c:fe:f2:5f:63:51:35:04:ce:da:ec:6d:71:
4c:52:b4:4d:1f:af:1f:47:ea:77:31:8b:2e:90:a0:
36:26:f1:4a:c2:7c:e1:eb:56:a1:a1:37:1a:e9:27:
e4:37:72:ab:fc:9c:50:41:73:2e:f9:0b:05:34:b3:
d0:c2:a5:0f:5f:ad:1b:3f:0a:9e:a7:e3:39:9b:67:
74:7b:d9:a3:d6:37:70:23:11:f0:94:ef:a5:50:9f:
75:fc:b9:32:07:09:3f:07:8f:e5:b3:47:5b:8f:59:
3e:87:ac:24:21:6f:cd:d9:6f:69:51:ff:ee:4f:bf:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:66:1A:FB:B0:F4:EC:BB:70:9C:2F:CE:80:1E:30:A7:72:B8:6C:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AGYa-7D07LtwnC_OgB4wp3K4bNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:6c:db:8b:02:21:d7:8d:4c:5b:b3:c1:da:f0:1c:d6:2b:2f:
e2:8e:27:9a:47:2c:a6:61:26:20:37:fc:a7:f4:11:ab:d9:82:
f9:ba:ea:04:2b:7f:09:fc:0f:b1:2b:6a:fd:40:35:a7:15:03:
0d:8c:f3:cd:7f:ef:af:bc:0d:7d:ed:84:58:25:68:10:c9:32:
0f:22:cc:63:f1:a5:db:80:50:c5:e0:26:aa:3d:c3:93:c6:09:
4e:85:31:66:f2:70:f0:4a:ad:b9:68:5d:ba:ae:e1:f9:a3:0f:
69:00:fb:90:85:17:df:1a:e4:41:a1:49:a6:cc:71:20:9f:e6:
32:5b:57:0f:46:a4:6b:28:92:c6:98:1c:19:3c:5d:00:8b:4e:
5a:29:24:e9:c1:e8:c2:a1:4a:69:81:fa:12:f4:e8:e2:76:54:
77:bc:33:2a:62:22:52:30:c7:65:55:7f:e4:ec:b4:3d:6f:73:
be:ce:e8:dd:65:a5:23:13:e1:ba:4e:f5:b9:1a:c5:4b:f2:95:
62:e2:cf:18:bc:8b:e3:69:e8:86:1b:69:f9:31:41:d5:84:0b:
60:df:1b:6c:9e:65:aa:c8:62:38:d1:8b:24:1c:bd:e1:31:c3:
97:1c:a6:17:37:87:01:28:30:b5:a1:67:d7:24:e1:a6:32:1f:
d3:48:ad:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:43:36 2025 by rpki-client