Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A_mlAZgAOqKzYYOPIypeeYVjoD8.roa
File: A_mlAZgAOqKzYYOPIypeeYVjoD8.roa (raw, json)
Hash identifier: XvVzQfbzzEXbc8dl889VLxenNZNRMgBXwW+jrJBgVWI=
Subject key identifier: 03:F9:A5:01:98:00:3A:A2:B3:61:83:8F:23:2A:5E:79:85:63:A0:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8598CA8C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A_mlAZgAOqKzYYOPIypeeYVjoD8.roa
Signing time: Fri 20 May 2022 01:08:29 +0000
ROA not before: Fri 20 May 2022 01:08:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2241383052 (0x8598ca8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 20 01:08:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03f9a50198003aa2b361838f232a5e798563a03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:3f:2e:a8:8f:6d:e8:86:d4:c3:5e:a5:be:
69:f6:ed:70:f1:76:0d:3a:25:76:11:8d:db:e6:2e:
b2:7f:b1:86:ac:1f:92:3f:30:24:64:56:d9:c1:46:
0a:83:97:86:94:23:08:a7:53:c2:8e:cc:de:f7:f2:
7b:21:7f:56:6b:00:76:7b:ee:1f:5d:5e:4b:2c:8e:
cc:ec:ce:5b:e5:4f:35:35:11:de:cd:60:04:81:37:
e9:eb:4e:bd:c7:d2:dd:57:82:ee:aa:42:00:32:5e:
12:d3:df:29:c4:3a:c7:44:0e:30:4e:98:31:69:41:
d7:b4:b1:14:15:20:9b:1e:09:ff:b4:f0:de:f1:a9:
90:ee:a4:ba:a0:c7:fd:4e:22:1a:90:0d:2c:19:fd:
61:88:bb:e0:96:8d:45:62:19:ed:f4:83:b2:3b:ba:
db:ee:f2:d9:08:36:c5:48:89:96:8b:89:56:77:77:
97:3b:d8:c0:78:bf:0d:1d:e0:35:b2:6b:db:73:76:
54:bd:74:11:a3:4c:a4:0e:4d:e6:0a:81:10:e6:24:
6f:3e:9a:a7:23:02:a0:38:15:a0:5e:da:ee:53:b0:
76:cd:ac:41:d4:53:f2:82:35:07:2e:8d:6f:00:97:
a4:73:57:22:ac:f6:a5:ed:46:f8:e1:9a:5f:72:3a:
b3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F9:A5:01:98:00:3A:A2:B3:61:83:8F:23:2A:5E:79:85:63:A0:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A_mlAZgAOqKzYYOPIypeeYVjoD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:53:57:fc:02:0f:ad:80:23:36:49:63:e7:d5:ad:e8:6d:79:
cd:ab:6a:84:5c:26:71:27:5a:e4:ee:92:d6:00:1a:fa:08:f5:
1d:da:8a:d1:81:67:b0:06:f1:49:1f:cb:5f:2c:20:8a:9f:9a:
e2:9e:e8:e1:c0:bc:44:10:f8:58:4c:08:bb:25:bc:3e:d1:22:
f2:48:d1:f0:ad:0d:41:0c:ec:a5:5b:41:39:21:74:44:76:97:
ef:e9:54:9e:ba:47:da:22:49:5e:0b:00:86:ac:e4:5b:f5:64:
2d:d7:d8:0f:45:1c:c9:81:16:b7:9c:22:e6:6e:a6:37:ea:88:
09:0d:54:a1:31:d1:82:71:17:45:c4:86:50:15:9f:11:86:8c:
5f:46:53:3e:a7:e2:f9:01:fc:2a:eb:e6:e1:de:df:90:98:e7:
f4:92:f8:4f:1e:9a:b9:13:f1:4f:39:ba:c6:28:05:e9:01:6e:
fa:6f:06:8f:65:d2:1a:fa:30:b6:e9:1d:e8:eb:d8:54:98:16:
1e:f1:13:51:15:b3:cf:c5:1a:df:5c:ef:e0:51:68:a0:fe:33:
a6:2f:93:dc:71:b4:00:be:21:e6:93:4b:f3:e9:8a:7d:7d:cc:
c4:98:03:8d:33:a5:6e:6b:d9:1f:4c:f3:70:5a:85:9a:d8:02:
f7:f2:46:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:20:46 2025 by rpki-client