Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aXhfBZF-Q8qH9VKljtl_CTDEqgs.roa
File: aXhfBZF-Q8qH9VKljtl_CTDEqgs.roa (raw, json)
Hash identifier: uTkG9BGVzfldZgJnzHmABGj67EP824tsf7ktqqTUaPk=
Subject key identifier: 69:78:5F:05:91:7E:43:CA:87:F5:52:A5:8E:D9:7F:09:30:C4:AA:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018556429416E22780ECB3099DB3CE25FDD9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aXhfBZF-Q8qH9VKljtl_CTDEqgs.roa
Signing time: Wed 28 Dec 2022 01:04:41 +0000
ROA not before: Wed 28 Dec 2022 01:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:5642:2a07/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:56:42:94:16:e2:27:80:ec:b3:09:9d:b3:ce:25:fd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 01:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69785f05917e43ca87f552a58ed97f0930c4aa0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:81:05:24:61:6e:9b:e9:90:82:df:cd:b2:
07:a9:72:ea:f5:66:7f:50:54:75:43:a4:9e:f7:44:
3f:a4:11:20:42:75:98:82:3e:df:24:b9:8f:82:26:
5b:52:4d:9c:74:96:7c:39:a2:75:02:fa:6c:0b:08:
99:ca:b6:68:d1:09:85:62:93:d6:f9:7d:ad:0a:f2:
ef:dc:92:41:31:58:35:0a:c4:30:7d:78:a9:8d:c7:
c4:39:c8:93:07:ff:38:d1:db:92:cc:37:b9:39:b9:
1a:d2:4a:04:bd:27:25:ec:40:d6:39:3e:87:b8:10:
55:6b:8c:1b:5d:17:78:17:0b:5c:aa:6c:22:46:b4:
50:46:8d:37:ad:46:d1:f2:d1:bb:8f:d6:29:5f:ce:
c6:23:b1:d6:10:11:0e:bd:31:a5:9a:4a:85:a5:27:
bc:43:7c:0e:72:98:9c:7d:c0:61:d8:2e:78:55:78:
f4:dd:28:d3:62:54:57:a8:c3:b2:5d:12:e1:de:25:
e8:83:5f:24:77:10:d6:8e:ac:ca:f7:4d:dd:a7:2c:
85:54:37:45:68:49:f7:aa:c5:7f:a3:33:43:be:73:
f6:3c:6f:fa:be:97:fa:a3:74:5c:aa:61:a9:29:7c:
85:db:fc:be:16:92:70:70:22:b7:f4:c9:03:e7:31:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:78:5F:05:91:7E:43:CA:87:F5:52:A5:8E:D9:7F:09:30:C4:AA:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aXhfBZF-Q8qH9VKljtl_CTDEqgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:74:f1:c2:93:79:8c:53:a1:49:35:ce:06:a1:03:6f:f4:48:
08:d3:5a:1b:27:68:3c:ab:3b:86:09:bf:bc:e0:66:d5:4a:c9:
c9:a7:83:10:c1:7a:da:7a:4a:36:96:58:63:a6:bc:11:67:a1:
45:45:7a:89:69:ed:7b:89:20:a6:d7:9c:36:6e:e5:bb:09:28:
ce:f9:85:48:1d:a4:6b:47:ff:db:80:3d:94:7b:b4:ce:93:42:
20:ad:7c:43:ca:08:32:e9:7f:b7:5c:65:08:3b:d8:79:42:de:
00:97:b4:cd:5c:d5:16:a8:4b:e9:5b:50:d3:42:25:ca:55:bf:
91:1c:59:c6:21:7e:cc:93:69:54:86:4c:d8:48:6c:29:56:43:
00:a8:45:9e:4d:e8:51:0b:9e:34:db:01:a0:d4:f7:8f:53:04:
04:ba:1b:cf:b4:0f:49:68:a4:f6:7a:3e:94:fc:4d:1c:77:78:
98:68:46:15:a8:b9:db:1e:2e:51:43:56:02:81:82:58:15:c1:
9f:48:48:96:9e:77:8a:89:e1:f5:06:13:89:7c:99:f9:f1:d3:
3d:b1:f4:84:27:76:6b:08:df:b0:2e:59:16:1c:32:7a:90:d0:
ed:3d:78:42:7c:5f:f5:1b:49:b1:d4:d9:d8:70:ba:f2:ec:c9:
29:dc:ff:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:23:15 2025 by rpki-client