Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AoWIEl_ABQf_URovbunymnFFPho.roa
File: AoWIEl_ABQf_URovbunymnFFPho.roa (raw, json)
Hash identifier: MgGJzH/GwKN4y5nsC+DJTHrYCo3oFL/kFS7xeY/DDwk=
Subject key identifier: 02:85:88:12:5F:C0:05:07:FF:51:1A:2F:6E:E9:F2:9A:71:45:3E:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185681850DC5F93E0D7BDDE6FAB146BDFDB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AoWIEl_ABQf_URovbunymnFFPho.roa
Signing time: Sat 31 Dec 2022 12:11:42 +0000
ROA not before: Sat 31 Dec 2022 12:11:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:68:18:50:dc:5f:93:e0:d7:bd:de:6f:ab:14:6b:df:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 12:11:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=028588125fc00507ff511a2f6ee9f29a71453e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:1b:4b:5b:53:54:18:6b:1f:8e:4b:38:3b:
34:f2:38:4d:87:59:41:4f:d7:21:7a:d0:0e:5d:3b:
4e:b6:fe:dc:06:fb:e5:99:80:2d:02:2f:a7:b7:c9:
d5:10:47:7a:19:39:ae:02:15:b7:3c:2e:78:53:cd:
16:3f:97:ec:19:05:06:a7:f8:d1:02:4e:9f:1c:32:
9f:43:19:5c:a4:08:0c:8c:62:61:f1:b9:96:b9:fc:
17:ed:2d:0f:aa:8e:b4:29:0a:56:a2:e9:cf:29:e5:
9d:eb:60:23:ef:ba:9f:02:b8:f2:64:50:29:39:93:
2d:37:ff:b6:53:fe:ec:5b:ba:26:eb:f8:8d:db:af:
96:65:97:f9:55:10:7e:07:66:78:ea:00:93:16:9b:
2f:f6:d9:0e:24:ec:2c:25:45:2e:82:ee:5e:31:bd:
51:0b:6d:40:e0:a6:98:02:ca:7d:74:fe:fc:3c:c8:
b3:6b:4d:7a:1c:10:ff:5f:b6:27:16:e3:ba:ab:7c:
c8:bd:44:59:e5:9b:99:d7:64:38:bd:fd:16:3d:c7:
76:31:37:8f:2c:45:74:74:75:42:d4:3b:55:bb:8f:
c8:67:71:24:42:0c:35:4d:79:36:80:c9:78:37:d3:
f7:a7:da:50:76:b4:43:d6:77:14:e6:96:1b:7d:87:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:85:88:12:5F:C0:05:07:FF:51:1A:2F:6E:E9:F2:9A:71:45:3E:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AoWIEl_ABQf_URovbunymnFFPho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:e7:ae:32:a2:ee:e7:40:00:a9:c7:eb:91:90:b5:00:ea:01:
c5:b4:d8:e2:09:3e:a6:4a:3f:86:dc:c1:18:ef:b4:4a:bc:c7:
b9:f0:12:64:9e:ab:b8:d0:89:41:06:6d:b8:a5:6d:83:cd:26:
5e:21:59:d9:f4:12:40:52:2e:3c:4f:a7:f5:22:9a:c2:c9:21:
07:63:58:6b:be:76:9f:e9:b7:5f:89:d0:b3:88:5e:de:35:d2:
f0:c8:44:ad:e3:e9:59:87:e0:8d:94:fa:ac:78:43:1b:d6:d6:
f5:21:d6:5a:63:0f:42:5f:c0:10:eb:78:a6:b7:ae:90:e1:2f:
99:f6:f4:2a:ff:03:f3:c6:4c:76:51:6e:09:64:0f:2d:0a:e7:
e5:66:84:23:47:60:2e:41:d4:41:c3:a1:8d:e0:cc:04:33:89:
49:aa:fc:e9:95:69:b6:34:83:23:e3:20:2e:3b:27:4e:7e:da:
86:19:e9:a5:3b:00:b8:12:a5:78:96:4c:90:7b:57:f3:06:76:
d8:5f:56:68:18:29:71:f6:2d:35:62:10:3a:bf:f8:4a:f6:34:
4d:6f:4c:9c:b5:9d:68:fe:46:90:6b:12:00:08:b1:1f:78:9e:
c6:71:cf:bb:ec:a6:31:94:0a:57:76:c6:02:7f:8d:8a:cf:3f:
a7:ec:4e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:41:25 2025 by rpki-client