Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AgoJBm1piwSEfQvkiux5cWbT654.roa
File: AgoJBm1piwSEfQvkiux5cWbT654.roa (raw, json)
Hash identifier: uiHC5KCJbkRHd8iMTHZF3nNrslpZt4EyLqVKTPv/1Cc=
Subject key identifier: 02:0A:09:06:6D:69:8B:04:84:7D:0B:E4:8A:EC:79:71:66:D3:EB:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874364D5A185E9792D1F84B2711593ACD2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AgoJBm1piwSEfQvkiux5cWbT654.roa
Signing time: Sun 02 Apr 2023 19:14:54 +0000
ROA not before: Sun 02 Apr 2023 19:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:43:64:d5:a1:85:e9:79:2d:1f:84:b2:71:15:93:ac:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 19:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=020a09066d698b04847d0be48aec797166d3eb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:62:0e:83:66:47:a3:49:71:00:30:07:ca:21:
d7:0d:8c:c2:ff:7b:b8:7b:94:c8:87:d9:0b:a4:58:
6c:8c:35:2d:66:4d:ed:71:ec:40:19:cd:52:19:87:
8c:bf:cf:2c:b7:40:39:fb:b4:7f:e8:9c:b2:27:57:
1b:51:30:cd:ef:ef:c6:af:78:59:d9:00:d6:86:51:
3f:35:4c:cc:89:5c:49:83:09:2a:ce:21:17:80:dc:
cc:96:39:af:62:fb:8c:1f:5a:67:d8:42:0b:94:7b:
2c:de:0e:9e:03:bd:43:28:ec:f1:51:1b:54:ed:cb:
c3:c1:10:19:fa:af:e6:bf:ac:06:81:d7:e6:57:04:
42:e8:c4:e6:18:09:72:ec:99:67:3b:83:ea:cd:39:
29:de:96:70:1c:b5:d3:a2:46:54:c0:f5:7e:b1:d4:
59:4d:5c:17:48:40:72:1a:00:95:f8:1f:2c:34:5f:
44:27:fa:17:93:9a:93:e8:36:cc:4d:39:39:d2:35:
27:44:46:8e:7b:4e:2e:fa:6b:db:8e:65:1c:a6:06:
91:48:d8:be:8f:c0:c2:3c:a3:33:84:77:a1:e2:39:
30:7f:88:89:aa:07:16:b7:96:43:27:c4:d4:09:73:
d9:07:c9:2d:82:4b:f4:f4:f2:59:7a:0e:cd:b5:b4:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0A:09:06:6D:69:8B:04:84:7D:0B:E4:8A:EC:79:71:66:D3:EB:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AgoJBm1piwSEfQvkiux5cWbT654.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:23:20:9a:81:bf:a5:14:53:4e:2f:7f:a1:cc:40:95:3c:d7:
f2:70:84:d4:48:ea:a2:c9:b1:ae:ba:5b:5f:82:57:45:ab:71:
99:e1:03:27:df:3a:e2:4f:fe:1c:ef:88:91:07:63:f0:ba:46:
52:05:b3:ec:4d:83:12:85:29:50:e2:d5:60:ee:49:f9:a2:5b:
37:c3:60:b8:dd:20:42:d7:14:1d:7f:ca:c2:1f:4e:14:ee:26:
ce:99:d3:dc:01:57:56:a4:88:b1:19:cb:7a:d6:d3:bf:aa:cd:
5f:ca:69:d7:c0:1d:2c:18:11:01:fb:8a:e9:40:b6:ad:90:40:
dc:63:f5:42:95:85:1b:42:0b:95:d1:66:d4:89:24:0b:63:01:
41:e5:23:f5:4c:43:08:de:a6:a8:3d:27:53:7b:d7:35:8c:e2:
d4:b3:90:50:c6:12:69:6c:7c:e1:71:42:f5:13:09:af:2e:a5:
41:58:3e:4b:e9:07:9c:20:34:f3:06:d9:96:fb:cb:3a:15:b9:
5a:d4:94:17:95:48:8c:f0:d9:16:97:6e:6b:aa:d8:04:62:bc:
d1:e8:ce:db:2a:c2:e9:e7:47:21:45:fe:17:5d:a8:76:23:d3:
fa:75:a8:8d:b4:c4:2c:e2:2d:ea:98:af:74:e1:b5:17:9a:50:
d2:23:59:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:18:19 2025 by rpki-client