Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aCxW854VtxI4g0L2rKrczoJBoAk.roa
File: aCxW854VtxI4g0L2rKrczoJBoAk.roa (raw, json)
Hash identifier: tKzAnlf++UvJLqUchDC5Y18wtSBRz4lnBSKC2IRHjH8=
Subject key identifier: 68:2C:56:F3:9E:15:B7:12:38:83:42:F6:AC:AA:DC:CE:82:41:A0:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871983E4A3464899223D84E3BFBA4C739F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aCxW854VtxI4g0L2rKrczoJBoAk.roa
Signing time: Sat 25 Mar 2023 16:04:46 +0000
ROA not before: Sat 25 Mar 2023 16:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:1983:613a/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:19:83:e4:a3:46:48:99:22:3d:84:e3:bf:ba:4c:73:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 25 16:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=682c56f39e15b712388342f6acaadcce8241a009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:b7:04:fa:4d:87:a9:71:93:9a:dd:30:6b:
d5:07:20:0f:ef:00:79:60:70:be:3f:00:2a:cb:1d:
ba:25:7a:c8:ec:f4:b4:71:a6:09:67:cc:43:dc:48:
6a:ac:ec:88:69:9f:0e:cc:00:a7:c5:27:19:e8:59:
02:6f:7d:b1:5a:9f:de:7a:49:5b:dd:02:14:86:43:
3f:68:22:f6:57:e7:bf:96:49:3f:2f:2d:b5:c0:c8:
99:94:8c:f2:cb:39:5d:51:03:98:05:2a:99:2a:89:
3f:f3:4b:56:76:1c:7e:81:6c:ae:0e:d2:e2:6b:e4:
3a:b8:92:9f:aa:ec:fe:83:e7:eb:43:77:8e:fb:ab:
81:2d:6c:6b:28:21:47:3c:c0:9e:10:85:24:d4:5d:
ed:40:39:ab:d3:77:c9:d8:5f:5e:44:9e:e9:b5:37:
1e:20:96:70:1f:60:1a:17:dd:30:f3:01:51:fb:3a:
16:4e:c0:a0:9f:af:5e:30:65:05:a9:62:fa:4e:08:
39:4b:cc:3b:98:dd:37:cc:d9:1f:7c:17:35:1e:d3:
1b:0e:8b:ed:3a:e0:0a:0d:b5:70:ba:67:07:ab:a5:
16:8d:b1:e2:89:40:62:2c:45:1d:12:87:83:50:98:
a2:c1:09:83:08:3b:bc:9c:ea:66:0e:1c:32:a7:b2:
fe:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2C:56:F3:9E:15:B7:12:38:83:42:F6:AC:AA:DC:CE:82:41:A0:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aCxW854VtxI4g0L2rKrczoJBoAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:2d:6f:36:46:30:f9:a3:83:15:92:35:87:d0:6c:bc:98:8f:
ed:67:79:ba:df:38:34:6b:d0:cf:d1:fe:c9:2e:b1:d9:09:c3:
41:67:06:6c:de:9f:0f:04:4d:ef:18:fd:5a:75:3e:2c:cf:58:
62:70:64:8f:ff:5f:46:2e:41:a3:08:60:77:f7:8f:3f:1d:0b:
8f:08:f9:c9:19:a5:60:67:cf:ee:10:d1:97:59:ed:29:d5:f0:
6d:90:e1:ce:ab:c0:2e:33:4a:74:28:7d:6a:1a:cc:35:e9:80:
fd:28:34:04:b3:bd:07:fb:ab:10:78:58:5b:63:b3:7b:82:55:
32:eb:fc:ca:55:26:f6:49:01:79:7d:14:5c:d9:3d:63:b8:c8:
81:d8:1f:c6:27:63:c4:b0:99:bd:78:dc:34:4e:1b:e9:07:84:
26:21:e5:25:b6:dc:04:cb:24:37:18:ef:98:e9:6e:37:47:cf:
df:66:e5:c1:a3:6d:a3:ce:45:8a:73:a3:70:c1:56:01:1d:ca:
98:b7:fa:d2:1c:d8:e7:33:44:2d:08:21:39:7c:c0:b6:27:93:
9f:cd:69:a9:53:8c:b6:88:b0:48:75:70:32:3d:02:b7:d1:d5:
a8:80:2c:e7:2c:af:d1:87:ab:2f:3b:53:20:f7:26:b3:9e:ed:
39:b3:f3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:02 2025 by rpki-client