Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AfZrj99Xsj55sFSwvNQf3Oc_w-I.roa
File: AfZrj99Xsj55sFSwvNQf3Oc_w-I.roa (raw, json)
Hash identifier: EPArrbHRaXFtoZpaA7mKonobkIFANKBtaZcchOgkYD8=
Subject key identifier: 01:F6:6B:8F:DF:57:B2:3E:79:B0:54:B0:BC:D4:1F:DC:E7:3F:C3:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018768B5444BC66993BD78F3D2234BB50FB9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AfZrj99Xsj55sFSwvNQf3Oc_w-I.roa
Signing time: Mon 10 Apr 2023 01:08:42 +0000
ROA not before: Mon 10 Apr 2023 01:08:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:68:b5:44:4b:c6:69:93:bd:78:f3:d2:23:4b:b5:0f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 10 01:08:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01f66b8fdf57b23e79b054b0bcd41fdce73fc3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:32:b9:85:55:07:1c:ce:b5:0d:0e:de:ba:
99:e7:70:b3:d9:e0:8a:a2:9d:ca:8d:6a:2e:f7:8e:
2e:1e:66:be:2c:d7:db:eb:28:32:dc:da:18:6e:54:
79:50:d0:ef:d5:0e:fa:20:9e:7f:2a:9d:9e:1e:c3:
49:29:6c:3c:b4:e3:84:9b:5f:28:a4:ec:e0:85:ee:
bc:cb:52:cb:79:08:e3:55:4f:e0:99:1e:75:c8:76:
a1:d7:50:a3:ad:30:6a:21:1e:0c:91:37:a3:82:32:
e4:47:68:0b:87:15:9d:8b:e3:96:ed:ac:e2:74:73:
41:32:a2:ae:43:14:87:d7:5b:89:a5:db:1a:e0:62:
87:0c:e9:6e:78:b8:d3:c0:9e:be:6e:64:fc:a3:b0:
f0:b2:f4:85:aa:1e:df:43:fc:2b:fe:16:97:75:a3:
a5:8f:05:2d:cb:af:a1:4c:3c:5e:6a:66:f4:8b:e9:
8f:7c:9a:e0:e9:09:2b:ef:d4:6e:13:e7:96:4f:90:
21:fb:31:a9:09:a5:ba:64:c0:37:38:9b:c6:86:72:
d1:97:ad:6e:74:b6:22:e1:12:d0:cb:18:5d:df:6e:
d5:27:66:c1:4d:32:fa:8f:98:e1:22:44:f8:36:d4:
61:0e:4b:43:c5:bc:26:a5:09:03:d9:c9:d4:62:de:
26:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F6:6B:8F:DF:57:B2:3E:79:B0:54:B0:BC:D4:1F:DC:E7:3F:C3:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AfZrj99Xsj55sFSwvNQf3Oc_w-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:69:6d:fe:97:8e:03:4b:e8:77:43:78:5f:b4:bc:9d:8d:4c:
f8:a0:d7:44:a8:af:ba:83:56:20:93:35:b2:cb:e8:17:af:15:
7a:7a:f7:7a:57:36:c4:e4:73:37:1d:2b:e3:1e:20:c7:db:1e:
fa:8f:27:c9:ba:ec:f4:af:10:6d:93:33:38:0c:df:88:24:59:
bf:e2:e2:e6:99:19:7e:03:e6:1a:b9:a2:68:ac:ee:a9:35:59:
e6:51:d2:ae:b9:9c:ff:56:c3:79:62:9e:8a:b4:9f:b3:13:b0:
3c:6d:97:8d:4a:3f:6d:cc:36:4e:48:56:41:0e:21:1f:c1:17:
a2:55:3f:12:d8:fb:57:00:5b:01:53:97:5c:7a:4a:a9:68:60:
e2:9b:67:05:ae:6c:49:0a:b3:c3:a8:b0:2c:fd:39:7e:2a:c1:
a5:24:1d:d8:b5:60:69:51:3a:4f:49:f2:e3:9f:cd:3d:97:dd:
60:88:54:22:5e:2a:55:56:23:84:c7:72:ee:c0:1e:98:6d:de:
bf:15:44:52:5d:af:b0:2c:bf:f2:cc:35:8c:da:79:61:f0:0b:
16:05:5d:24:26:62:c9:70:f2:ba:1e:be:96:16:36:e1:1c:ae:
2c:63:88:74:85:43:73:35:e3:a0:8e:0d:5f:35:ce:4a:06:96:
d4:79:06:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:41:25 2025 by rpki-client