Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AUN8M1iqUDAT_M8dkH5prj_XxD4.roa
File: AUN8M1iqUDAT_M8dkH5prj_XxD4.roa (raw, json)
Hash identifier: zsiMCJeAPCkfyjLfNXAAQ1uiumUQx187EnTsXkaEFJ8=
Subject key identifier: 01:43:7C:33:58:AA:50:30:13:FC:CF:1D:90:7E:69:AE:3F:D7:C4:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01857C781288CE5E2D58F2265AE90ED03D2D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AUN8M1iqUDAT_M8dkH5prj_XxD4.roa
Signing time: Wed 04 Jan 2023 11:08:41 +0000
ROA not before: Wed 04 Jan 2023 11:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7c:78:12:88:ce:5e:2d:58:f2:26:5a:e9:0e:d0:3d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 4 11:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01437c3358aa503013fccf1d907e69ae3fd7c43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c6:fd:32:5b:d4:89:66:ac:a3:92:70:a2:9d:
3b:99:f6:c2:eb:85:ff:e4:e7:40:97:c3:2d:16:84:
4f:24:b8:c3:7e:84:26:19:f3:39:df:63:b4:99:c7:
42:02:62:62:65:f6:bf:a4:2d:82:34:46:4e:91:e7:
51:12:0b:0f:6a:e0:f0:5f:2f:44:ae:0c:a0:c0:fc:
67:63:0a:a6:04:fe:69:86:9e:36:25:09:b5:ed:8c:
73:24:e1:f5:38:6c:a6:f9:86:fb:ab:18:a5:53:c3:
1a:06:ce:bd:a4:2b:5b:73:54:2d:f6:db:b4:f6:88:
2d:4c:db:85:7e:6e:12:ad:63:8c:77:0a:f2:7d:95:
58:9b:58:a0:9e:b7:d9:b2:49:bf:e6:26:a3:2a:53:
0a:10:6e:fb:74:ba:93:fb:64:9c:c7:d8:75:65:b3:
07:de:af:3d:0d:00:79:06:ca:be:ce:0a:ae:d6:30:
ee:45:ad:c4:7c:37:9a:28:d3:da:fc:92:20:4e:bb:
bd:08:6c:c0:d7:aa:4f:30:ff:df:f7:13:a9:99:79:
35:c1:cb:9e:4c:af:23:65:4e:af:01:37:ba:e4:59:
35:38:ea:62:eb:1c:01:e5:9b:a5:6a:18:22:9b:d6:
77:e1:5e:c6:55:6f:8d:8d:cd:de:49:aa:6e:32:b1:
67:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:43:7C:33:58:AA:50:30:13:FC:CF:1D:90:7E:69:AE:3F:D7:C4:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AUN8M1iqUDAT_M8dkH5prj_XxD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:6e:01:55:c8:b8:56:00:18:a6:ac:72:18:d2:da:16:92:b4:
5f:59:3f:02:48:b8:ea:42:5e:11:eb:cf:07:17:e0:72:40:07:
fc:cd:4e:c4:3b:7a:22:31:bd:1a:a1:be:39:34:4d:25:b0:64:
bb:3c:3a:d4:1c:7d:8f:d9:7a:7c:ad:d6:6d:2a:81:33:58:c5:
0e:a1:50:41:cb:e9:d9:f9:5e:73:98:aa:fb:4c:a7:89:85:10:
f5:af:61:19:56:b6:cb:a4:63:1f:3c:29:48:a9:50:ef:55:e7:
3a:91:43:5d:91:40:0c:96:a8:54:65:e5:00:e5:5e:0b:06:cf:
10:f4:0a:0a:c7:6d:e4:77:56:c4:73:0e:9e:d8:cf:1f:fe:45:
e7:fd:5d:73:cf:ce:07:b3:3d:86:1c:8a:f5:4f:2b:ce:2b:b9:
10:5d:9d:c7:b1:0c:f9:0b:55:77:c0:7f:bb:e8:51:03:81:16:
0f:8e:0a:0c:1a:48:2d:d1:bb:c7:6a:d4:16:70:2c:bd:a7:e5:
6f:19:e6:f8:b5:f1:9e:9d:76:70:af:c9:3c:55:8e:38:ed:b4:
f0:54:40:bf:07:67:fd:8d:47:5b:9a:95:0e:0b:a6:fe:9d:d7:
34:0c:82:91:15:75:99:af:01:b0:b5:9e:80:78:92:a3:1d:86:
02:3e:5c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:24:42 2025 by rpki-client