Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/APNc3edW_HhxpMP-6TQTMjyfOkM.roa
File: APNc3edW_HhxpMP-6TQTMjyfOkM.roa (raw, json)
Hash identifier: R7wYzKNR2h4xHq7w1uSUMf5vRARU7912sdKv/t0mXVs=
Subject key identifier: 00:F3:5C:DD:E7:56:FC:78:71:A4:C3:FE:E9:34:13:32:3C:9F:3A:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A0F707E3A44B822ECE9A7B6DF7CEDA13
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/APNc3edW_HhxpMP-6TQTMjyfOkM.roa
Signing time: Thu 02 Mar 2023 06:16:29 +0000
ROA not before: Thu 02 Mar 2023 06:16:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a0:f7:07:e3:a4:4b:82:2e:ce:9a:7b:6d:f7:ce:da:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 06:16:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00f35cdde756fc7871a4c3fee93413323c9f3a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:e4:bb:7e:10:1d:80:0d:af:a9:af:21:20:
5e:59:db:1a:81:36:75:dd:7d:5a:d5:5b:d8:40:45:
c1:63:eb:8e:bc:cc:70:de:7a:c5:60:af:17:76:40:
ab:11:cc:c2:a0:ef:61:5f:55:74:cb:0c:f6:08:b4:
a7:7b:68:84:14:fd:3a:cb:ae:ff:fb:a3:08:d1:4d:
a5:bb:2b:2c:bf:2f:49:77:fa:a2:ed:4b:ca:ea:35:
3b:7c:34:d5:96:6a:1d:a3:fb:20:05:0a:1f:fd:61:
a9:11:26:9e:f5:e5:31:bd:ae:99:c4:62:6c:25:54:
ea:64:7b:17:2c:b8:5c:2d:f7:6b:0c:62:3b:9d:c7:
0d:e5:c2:c9:32:57:0d:8b:81:32:4b:1f:7d:da:e2:
f4:ba:c6:76:db:a2:9c:3e:d9:cd:76:2a:4c:10:7f:
d9:ee:1f:58:56:1b:64:27:6c:d4:98:41:10:ee:d0:
03:a9:ca:f1:df:ce:1e:d4:a9:b8:b6:a8:24:2e:24:
66:f4:61:de:a8:06:4b:96:63:47:15:4d:c1:bb:c2:
f5:cb:35:a1:5b:d2:1a:b2:3b:df:5c:fe:47:16:25:
01:64:34:40:01:17:b1:0f:a8:1e:0e:2f:c5:03:56:
55:89:7a:3e:fe:7b:0d:9e:49:4e:7e:0b:e2:41:43:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F3:5C:DD:E7:56:FC:78:71:A4:C3:FE:E9:34:13:32:3C:9F:3A:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/APNc3edW_HhxpMP-6TQTMjyfOkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:40:84:a2:5b:f0:61:a9:e0:41:90:c1:a3:e0:ae:95:2d:2f:
39:70:0c:3f:3b:8f:f4:73:3c:fd:62:be:f3:5e:43:fe:5c:f6:
4f:fc:44:18:e7:2f:f9:21:49:4a:fe:0e:c3:3a:9b:30:c1:69:
d6:d0:3e:5e:d5:59:4e:a2:cd:71:a2:42:22:65:93:43:1d:db:
8b:6b:51:cf:77:f8:5c:69:15:78:10:55:b9:3b:5c:3a:b7:e0:
54:a6:aa:29:11:2f:39:7b:22:49:50:e1:2e:45:8e:f3:42:2a:
6b:0d:fc:13:31:1f:60:ab:07:6d:5e:13:76:08:db:d9:e9:a8:
21:8e:cf:47:c6:aa:ad:ea:97:10:81:ca:44:6c:9b:37:0e:ed:
fe:a7:f1:58:f2:d0:ba:72:ed:cd:f5:40:96:29:df:25:ce:bf:
91:99:24:49:8d:44:52:49:dd:5c:b7:ff:ef:7e:12:ba:eb:f6:
95:62:94:05:0b:89:3f:65:37:76:fe:40:9a:de:77:38:7e:b0:
63:3d:dc:6e:60:0c:c5:3a:13:9c:20:53:24:75:29:e2:f1:b9:
e9:5f:28:a6:42:49:cb:0b:77:0e:b2:1f:1b:6a:4d:37:f8:18:
5b:2b:5b:db:c8:21:4b:78:6f:63:e1:54:72:23:52:b9:0c:e5:
21:a7:c4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:22:00 2025 by rpki-client