Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AX_sZew_JJnywsWoJroWr4lX--Y.roa
File: AX_sZew_JJnywsWoJroWr4lX--Y.roa (raw, json)
Hash identifier: pSoRyCp2kGPleD3LYRMmpCkPU/JbMxxx+aoRpR+6fD8=
Subject key identifier: 01:7F:EC:65:EC:3F:24:99:F2:C2:C5:A8:26:BA:16:AF:89:57:FB:E6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 925A3D1E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AX_sZew_JJnywsWoJroWr4lX--Y.roa
Signing time: Mon 04 Jul 2022 16:10:25 +0000
ROA not before: Mon 04 Jul 2022 16:10:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2455387422 (0x925a3d1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 4 16:10:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=017fec65ec3f2499f2c2c5a826ba16af8957fbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:04:50:5a:03:22:4b:c1:82:28:c0:db:54:
83:08:0c:24:60:c7:43:08:31:d8:db:3f:a4:88:9a:
00:41:d3:3a:10:2a:f6:82:2a:e0:e8:f4:c1:de:66:
03:24:ca:48:c4:fb:3e:45:72:e8:eb:53:e3:57:b7:
81:39:64:e9:bb:3c:67:83:6d:9c:04:14:34:89:34:
37:32:d0:59:26:67:57:0d:d5:1c:41:64:64:d4:1e:
ab:0b:36:3a:a2:95:5e:cb:0c:80:c3:58:a2:09:93:
73:4d:b8:7c:b9:9a:ed:f3:b9:34:ba:75:d4:c0:20:
49:61:cd:00:e0:66:ac:75:91:1e:d1:f9:b5:f4:b4:
d2:af:c0:90:08:af:a4:5e:64:8c:c5:66:82:d3:ac:
59:79:d5:8b:2a:87:02:3c:54:33:c5:ce:29:5f:53:
86:dd:ab:e5:cb:c7:fd:79:a1:97:da:1a:07:50:00:
99:47:b9:cb:07:2d:3a:e7:b0:c5:35:77:19:74:c4:
4a:3e:cb:45:ab:2d:9d:e8:18:74:13:58:0f:63:36:
ea:06:99:4a:f2:b6:9a:58:32:9c:48:92:61:97:8f:
8f:12:98:17:40:7b:54:8b:a9:11:40:a2:08:5e:72:
ae:b5:1b:ce:ee:54:9b:b6:52:31:cf:c9:4a:5e:89:
5b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7F:EC:65:EC:3F:24:99:F2:C2:C5:A8:26:BA:16:AF:89:57:FB:E6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AX_sZew_JJnywsWoJroWr4lX--Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:b1:05:24:53:c4:41:33:e4:1f:21:9d:88:e3:3d:3c:74:e2:
81:12:bf:b9:a9:3b:bd:07:e3:64:20:47:b9:fc:1a:0c:3f:13:
b4:56:5a:57:fb:e3:8b:00:7a:5b:aa:04:a1:e2:e3:8f:f4:2c:
6c:f8:85:04:0a:01:d5:43:75:74:88:5b:2a:ca:c0:6a:95:a2:
44:3c:e7:66:e1:b0:a3:07:8d:61:2f:87:f2:37:e9:2b:03:05:
a8:99:72:a1:08:a5:f9:5c:41:a7:02:5e:15:b9:ea:77:8e:de:
67:8d:15:7f:58:d8:5e:35:80:24:2f:9c:bc:9f:ef:fa:97:e8:
9f:70:fb:ff:7e:18:4a:a5:4a:34:d2:86:60:1e:11:c4:22:a6:
02:c3:9d:c1:68:55:d7:19:35:be:10:2d:b3:47:25:d9:33:a7:
24:47:d1:fc:24:6a:b4:da:ce:f1:8b:64:15:26:4b:f4:0b:21:
41:83:1d:74:c3:cd:0c:d9:cf:a4:c1:db:92:8e:5d:d6:56:71:
65:3c:a5:0f:6a:03:4f:e0:02:85:21:88:0e:88:19:8f:8a:3e:
0a:9b:a7:45:7b:d7:c3:27:af:b6:d8:f6:64:5e:45:2d:3b:1d:
50:47:24:95:fb:fd:35:af:ac:b1:12:93:07:92:93:a6:01:e3:
33:aa:8f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:03:18 2025 by rpki-client