Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AySeST6cJ6G-4uBiVTZeF1oqMpc.roa
File: AySeST6cJ6G-4uBiVTZeF1oqMpc.roa (raw, json)
Hash identifier: +XSa87qqptlcRTeJmIO+x1/3krJ5LHyaR/awkhOcQhU=
Subject key identifier: 03:24:9E:49:3E:9C:27:A1:BE:E2:E0:62:55:36:5E:17:5A:2A:32:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893864FF4B890B88100757131F5070E58A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AySeST6cJ6G-4uBiVTZeF1oqMpc.roa
Signing time: Sun 09 Jul 2023 02:04:50 +0000
ROA not before: Sun 09 Jul 2023 02:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:189:3864:91a5/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:38:64:ff:4b:89:0b:88:10:07:57:13:1f:50:70:e5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 02:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03249e493e9c27a1bee2e06255365e175a2a3297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:03:ae:d5:f1:b0:7b:fc:7d:07:2c:82:8f:
6b:d0:80:9d:b7:11:82:0b:b7:67:25:82:9a:f6:a4:
54:9b:7d:6d:f8:0d:c1:06:4d:23:41:b1:97:5f:3e:
3f:f3:75:c7:4b:7d:d4:6a:13:33:6a:24:f8:cf:36:
43:f4:cf:a4:56:de:8b:ad:3c:8e:99:3d:cb:4b:96:
94:26:91:de:35:14:cc:69:1b:8f:03:09:12:c8:fb:
85:b3:34:cc:d3:bf:bf:cf:2a:cf:5b:12:93:8f:74:
0d:21:da:24:94:e6:bc:f6:e6:3b:af:3d:45:ce:b3:
8b:a9:d0:95:9d:e2:1f:f8:cb:5d:3d:dc:4d:be:5c:
3d:32:df:97:41:d6:43:98:e2:dc:84:09:2b:5a:27:
12:3e:98:ae:0e:01:2f:c0:f1:5d:14:6a:b4:f3:b9:
dc:72:ce:49:15:d5:c1:e9:f2:02:4f:1e:4a:a5:81:
e8:ff:a7:f9:1c:1c:0a:89:87:8d:77:35:a2:1e:c1:
25:7e:92:2b:dc:a9:19:57:45:aa:1d:ba:56:0c:f0:
bf:e0:88:6b:57:7f:c1:09:79:93:73:98:c2:e6:28:
f3:9e:21:ac:2b:9d:07:a7:8d:40:39:f4:76:52:f9:
0c:26:46:df:ef:23:37:06:ab:c5:57:e6:a9:02:ba:
ce:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:24:9E:49:3E:9C:27:A1:BE:E2:E0:62:55:36:5E:17:5A:2A:32:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AySeST6cJ6G-4uBiVTZeF1oqMpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:ad:b7:ce:d2:a6:6a:43:ae:a6:31:8c:e9:80:39:ba:f0:be:
cf:6c:63:e6:77:42:8d:9e:fe:39:c0:20:ee:f4:cd:54:28:81:
9f:20:f1:f5:07:b7:02:14:76:01:15:e1:e1:11:07:8c:5d:2a:
b7:95:6b:72:44:bf:78:b9:3a:db:be:ec:35:75:90:bf:55:62:
03:3b:14:8b:ed:a2:f3:1a:c4:5e:55:06:d9:97:7e:80:78:9d:
56:ed:80:94:c1:6f:8b:94:86:f8:e2:ff:1a:ff:e3:a5:5b:fd:
d5:c4:7c:65:90:07:01:c6:c6:97:f4:38:ab:ed:3b:f7:5e:c8:
96:6e:6b:62:f4:aa:76:73:a5:05:66:10:4e:47:1f:30:38:57:
b3:d9:25:81:fd:54:4c:34:67:90:88:20:49:d3:34:26:89:fd:
2e:45:43:2f:f0:ab:7f:89:9a:9c:b6:dd:3c:54:fc:87:84:d4:
b4:cb:4d:35:54:ee:1a:6a:ce:72:57:40:af:79:cf:b7:fe:43:
4d:b7:1a:85:79:42:c6:c6:9f:72:f3:84:7c:30:70:36:7e:f3:
eb:67:69:27:b8:c6:90:fc:74:81:13:4a:40:4b:bd:f7:62:e4:
28:c1:0b:96:60:1f:ba:3a:7f:5d:93:90:7e:1a:52:38:97:40:
42:d2:f2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:24:54 2025 by rpki-client