Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aa_7Ijirf3dXH0P4FaiY9P8Mf4k.roa
File: aa_7Ijirf3dXH0P4FaiY9P8Mf4k.roa (raw, json)
Hash identifier: 8h/OEHY8ewzUhABaUYHXk690hVNsnoykI2CP5vS1mmg=
Subject key identifier: 69:AF:FB:22:38:AB:7F:77:57:1F:43:F8:15:A8:98:F4:FF:0C:7F:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 87E54F71
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aa_7Ijirf3dXH0P4FaiY9P8Mf4k.roa
Signing time: Sat 28 May 2022 11:10:13 +0000
ROA not before: Sat 28 May 2022 11:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2279952241 (0x87e54f71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 28 11:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69affb2238ab7f77571f43f815a898f4ff0c7f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:27:26:56:c1:24:77:c7:13:90:6d:fb:1b:0c:
74:94:1b:05:a4:f4:91:2b:4d:72:e4:cf:95:42:15:
b3:66:34:78:7d:94:b5:21:a4:3f:17:4a:56:cd:3e:
3d:36:60:5f:5f:06:65:a9:57:77:9a:1a:f9:88:cb:
09:bb:37:94:e1:42:b2:67:d1:21:d5:b6:2a:4c:3a:
07:b9:57:b8:5c:69:bd:4e:11:22:de:9b:5e:ec:79:
c6:92:33:6d:56:6f:5d:d6:64:23:cb:0f:d3:c4:02:
73:95:b5:aa:cb:e7:3b:94:c7:bf:7e:70:d4:9b:fc:
5b:3a:1c:4f:9c:66:94:55:bf:6a:77:dd:6a:32:8a:
1b:ba:27:ef:8f:88:6e:4b:15:37:c2:17:6d:99:7a:
52:d2:a5:01:13:0b:fc:ab:7a:e1:89:00:d1:3e:30:
b1:cc:86:96:11:64:fd:0b:48:c4:a5:61:e5:39:63:
74:1b:68:59:a0:24:57:28:91:ff:a2:10:e9:bf:c7:
51:6b:0b:39:96:60:4b:ac:52:d5:9d:a9:ca:fa:83:
18:1b:0e:c9:57:4c:af:c3:6d:61:e2:44:a1:f2:5e:
51:59:28:df:da:54:32:44:8f:c9:1d:1c:e2:52:09:
87:e3:4c:55:97:24:71:b7:c5:48:2e:8b:06:0d:77:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AF:FB:22:38:AB:7F:77:57:1F:43:F8:15:A8:98:F4:FF:0C:7F:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aa_7Ijirf3dXH0P4FaiY9P8Mf4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:b9:9f:ce:75:6e:48:bd:d1:d0:1b:93:40:bb:56:9b:0b:89:
13:00:6e:8a:4e:d6:2a:c7:38:dd:4f:1c:64:d5:69:6e:c3:1f:
ba:75:16:05:d1:0e:f4:ce:5f:d5:fa:7a:54:e5:a8:57:a6:00:
2c:3d:60:94:a5:f1:dd:fd:45:30:c5:ce:57:8e:e5:2d:ec:4f:
9b:2d:0a:33:bb:a4:c0:bf:bc:c4:d2:dc:67:10:85:c4:04:22:
60:06:84:7a:ae:ae:f6:aa:f0:d3:55:c6:f2:87:7a:1d:92:8e:
4c:c8:13:bf:7f:3a:49:01:8b:3c:c2:5f:85:b0:0f:a0:74:43:
55:0d:de:a5:c9:b5:ee:05:eb:d8:32:f4:ae:de:70:fd:3b:52:
3e:79:95:c0:a3:95:57:a0:7a:62:72:d0:33:3f:7a:60:da:9c:
1a:ec:d2:85:ee:d1:df:28:50:e0:b2:7e:ca:fc:37:f0:8e:44:
06:42:e1:98:c6:28:e1:2b:fe:a5:ff:0c:43:ff:c8:2b:ac:0b:
58:8e:ed:ab:f6:b7:de:d8:9f:27:c9:56:db:15:24:b7:fb:15:
3e:14:1c:63:b8:3d:ff:e6:9d:9a:a6:3e:71:1b:d9:a4:c5:86:
ce:33:60:9c:e0:b1:87:0d:00:bc:f4:b3:06:20:d1:dc:39:33:
d2:7f:85:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:48:44 2025 by rpki-client