Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ay9a5biWs7Ig9Cb75c0BF3mcV_A.roa
File: Ay9a5biWs7Ig9Cb75c0BF3mcV_A.roa (raw, json)
Hash identifier: Kh4XZVOMY5XsUYEj/rvaJLQAekjqCu+ia9orAHOgqZY=
Subject key identifier: 03:2F:5A:E5:B8:96:B3:B2:20:F4:26:FB:E5:CD:01:17:79:9C:57:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018754C38E31BF40AFAE5A04B0979C543E97
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ay9a5biWs7Ig9Cb75c0BF3mcV_A.roa
Signing time: Thu 06 Apr 2023 04:11:54 +0000
ROA not before: Thu 06 Apr 2023 04:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:54:c3:8e:31:bf:40:af:ae:5a:04:b0:97:9c:54:3e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 6 04:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=032f5ae5b896b3b220f426fbe5cd0117799c57f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a7:36:2a:fa:e1:01:d7:37:ea:e5:22:95:e7:
1b:8b:08:59:de:fe:fc:36:df:e3:22:75:b1:1d:bb:
2e:1e:0e:c2:d3:a2:3e:41:13:45:a5:98:d6:b7:04:
c5:ac:f1:16:ed:dd:10:7e:69:1a:90:0e:4d:06:18:
e1:41:95:2c:12:1a:fa:c2:da:e1:e1:36:1a:1b:bd:
72:72:4a:1d:ca:90:3f:36:1d:8f:f3:30:8c:01:10:
d5:ef:9c:fe:2f:f4:07:d4:a8:bd:38:8c:72:83:df:
01:25:36:4c:23:18:c9:d0:74:82:ef:48:0a:79:f7:
3e:bd:5e:77:0e:68:de:5a:4b:1a:25:df:16:fb:fc:
bd:74:ad:99:88:60:9c:87:8c:db:6b:3a:29:87:71:
cf:81:3e:ec:a9:79:3a:1d:23:e4:1f:2e:44:23:6c:
fe:b1:a1:d9:2a:2a:0a:3a:2d:3b:7d:7b:7a:67:ff:
f6:e4:18:6e:7b:18:1f:c4:d6:26:3b:f0:d4:56:de:
d9:90:d6:32:8d:13:74:de:28:b7:58:ae:3b:21:be:
2b:2d:b8:c8:4b:64:35:81:ef:87:97:e2:9b:0c:31:
97:82:6f:2b:fd:cd:b9:a5:78:20:3e:25:63:01:05:
7a:45:2f:43:91:ae:cc:a7:53:c7:4e:af:ca:4b:4f:
28:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2F:5A:E5:B8:96:B3:B2:20:F4:26:FB:E5:CD:01:17:79:9C:57:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ay9a5biWs7Ig9Cb75c0BF3mcV_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:2c:71:3f:ab:57:20:f0:18:12:14:3b:d2:2f:9d:d2:fe:5e:
cf:e0:03:14:20:eb:ec:f0:98:36:a2:ec:18:98:87:29:b6:a6:
94:a6:7b:9e:c9:e1:b0:87:ca:51:c0:3e:f6:94:87:d4:0b:32:
cc:b0:70:97:0b:cb:8a:68:cb:1a:21:b6:8f:4e:f5:78:c0:5b:
fa:6c:d2:aa:5e:ce:6f:fd:4c:28:a7:1b:3a:c9:2f:bf:63:48:
f7:54:91:ad:0c:ad:00:d5:15:99:19:84:d0:7a:47:9f:80:d4:
2d:8d:32:bf:f3:37:8d:5f:e0:8e:b4:04:36:c2:8d:00:d5:ee:
f7:f5:b2:ef:c1:02:2e:bb:63:2b:60:6d:1b:c3:51:63:b2:af:
e6:3d:27:c0:5d:09:79:00:95:e6:30:7c:fa:c2:ef:d0:9d:5d:
10:2d:1e:af:5c:81:40:b8:67:c9:8b:6c:64:9a:ef:90:fa:e7:
fb:4d:f1:9f:0f:df:8a:10:99:9d:77:95:07:0c:6a:a1:5a:0f:
a6:5f:87:b9:af:12:28:d1:ff:aa:05:7a:98:59:02:93:c1:ae:
19:3d:15:90:3c:e7:ae:0c:c0:95:8e:e9:2d:14:bc:b0:ae:07:
fc:35:b3:88:72:23:3a:e7:30:fa:4a:4b:fd:bf:a9:6c:e8:c8:
e8:b8:bc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:21 2025 by rpki-client