Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AO_qp0aSq6h_TgVf4eLyrY3R0YA.roa
File: AO_qp0aSq6h_TgVf4eLyrY3R0YA.roa (raw, json)
Hash identifier: 1ky/+wxRlraqzvTk24L6KThWbgvv4/oLCaIDto08bsg=
Subject key identifier: 00:EF:EA:A7:46:92:AB:A8:7F:4E:05:5F:E1:E2:F2:AD:8D:D1:D1:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018420737F43CEABDB1608A3D18A713A5C42
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AO_qp0aSq6h_TgVf4eLyrY3R0YA.roa
Signing time: Fri 28 Oct 2022 21:15:50 +0000
ROA not before: Fri 28 Oct 2022 21:15:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:20:73:7f:43:ce:ab:db:16:08:a3:d1:8a:71:3a:5c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 28 21:15:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00efeaa74692aba87f4e055fe1e2f2ad8dd1d180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:6d:44:96:b7:f6:8f:07:0b:e3:f5:81:01:
8b:2c:e6:40:86:ad:39:d9:e8:71:c7:3e:5b:5d:2f:
db:8c:98:2c:7f:f5:9b:fe:01:ce:4f:fb:32:40:80:
1c:f0:bd:3a:71:0d:76:93:4c:25:22:29:b3:36:03:
99:2a:33:3d:79:5e:d7:df:51:4f:cd:29:1d:64:77:
e4:cf:90:31:76:64:33:2a:c8:ac:2b:2d:c4:32:de:
1c:de:4b:c9:49:ea:4d:ea:08:35:cd:63:91:61:45:
3a:72:dc:05:89:50:3b:5d:29:4c:b5:87:52:12:8f:
23:c8:1a:4d:28:df:00:09:72:2c:7b:eb:57:a4:67:
d1:af:ea:b7:c0:cc:a7:57:a0:0c:d6:46:74:a8:d5:
8b:37:ba:e7:a7:c8:2e:91:87:8f:fc:21:38:33:34:
55:d5:0a:43:5e:34:ac:53:ae:e4:f3:02:72:f9:e5:
aa:26:06:35:45:c0:24:85:2b:54:4e:e1:62:ef:66:
e6:90:5b:12:be:05:bc:c5:4c:77:4a:de:17:3d:e8:
60:0e:88:0a:a6:61:6b:79:4b:9d:43:35:6b:51:f7:
f2:79:17:18:2f:a4:7e:18:e9:50:98:81:bc:b8:76:
d8:8c:65:3c:98:a5:e0:b3:7a:75:29:fb:ec:bd:d0:
a0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EF:EA:A7:46:92:AB:A8:7F:4E:05:5F:E1:E2:F2:AD:8D:D1:D1:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AO_qp0aSq6h_TgVf4eLyrY3R0YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:74:72:cd:87:96:32:00:02:ad:7f:65:f5:1b:23:41:cf:42:
f8:92:29:f6:6f:37:a3:17:f8:a6:b4:c8:01:dd:c9:b0:77:e8:
e8:af:e0:3f:f4:66:3b:68:11:34:d6:e5:d7:70:89:ac:c2:0e:
53:30:7b:6b:15:3f:18:fd:76:23:33:61:5c:1d:36:86:c6:cb:
80:a8:b1:19:ca:d0:ce:4c:20:fb:65:e0:10:c2:61:86:fa:58:
a5:c5:58:12:e5:ea:8d:18:30:8b:24:e6:22:b8:9b:bb:dc:9a:
e4:a8:b4:0b:d9:66:ff:1d:34:e7:4b:0f:53:ad:d3:ac:53:1e:
12:bd:94:db:98:62:6d:c8:72:1c:7e:36:3e:5d:6f:8c:e0:0c:
a6:ed:7a:6d:a6:65:c8:5a:aa:39:28:40:99:96:7f:d4:d5:f8:
a1:d4:72:04:19:c8:9f:79:e4:2c:4c:b9:d8:b5:cf:58:95:97:
9a:72:50:ae:9b:8b:1e:f2:86:d6:fa:7a:53:5d:7d:6c:c7:a8:
25:7f:72:c2:8b:ce:6e:1f:97:8f:37:44:72:da:41:a3:c5:b5:
c3:a6:54:51:88:39:55:ce:36:c3:5c:9f:f9:8f:9e:08:22:94:
bc:9c:41:e5:c9:0d:5d:0f:49:0a:ab:d6:5d:37:de:e9:52:d3:
10:14:c2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:03:42 2025 by rpki-client