Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/amwi2u5dz0N7j6gEvjreY5dbqeY.roa
File: amwi2u5dz0N7j6gEvjreY5dbqeY.roa (raw, json)
Hash identifier: SHYO2VqAV1VBa8VUdtIGwfzUFnbBWNplG+1beFFetx8=
Subject key identifier: 6A:6C:22:DA:EE:5D:CF:43:7B:8F:A8:04:BE:3A:DE:63:97:5B:A9:E6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D4A48204DA50FD7567E357DB5227C6A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/amwi2u5dz0N7j6gEvjreY5dbqeY.roa
Signing time: Tue 08 Aug 2023 10:14:58 +0000
ROA not before: Tue 08 Aug 2023 10:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:a4:82:04:da:50:fd:75:67:e3:57:db:52:27:c6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 10:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a6c22daee5dcf437b8fa804be3ade63975ba9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:f0:a1:a4:95:e8:54:a5:ce:9d:5a:91:42:
8c:36:e5:cc:45:05:33:95:e6:76:09:ec:c3:66:00:
e7:9d:af:3f:65:7f:e8:69:b1:7b:83:e5:a7:48:f9:
4d:23:f5:0d:58:3e:d3:64:30:c0:ee:3e:49:0f:dc:
0d:95:0f:36:4c:d4:32:51:71:73:51:b9:f6:5e:5f:
ff:6d:fb:eb:d8:3c:b9:cc:82:5f:8c:54:b0:94:94:
c1:0c:19:99:71:79:5f:b1:97:d0:d4:c3:1a:26:52:
55:35:7a:72:32:08:35:03:0d:e0:40:6e:3b:82:4a:
4a:6a:d4:29:0a:2d:ba:ec:47:1c:e8:43:e0:8c:34:
62:f3:04:4a:2f:57:28:eb:5d:ad:95:a9:59:0b:35:
c1:47:a7:ca:e7:b5:8f:9a:1c:b4:95:7b:68:89:eb:
74:61:f7:57:88:fa:44:4b:e4:a9:dd:6a:9a:cd:ee:
10:6a:47:1b:e5:07:6a:e7:98:81:a0:05:5d:bf:a3:
13:a0:c2:b7:2d:18:c2:6a:89:de:b7:93:34:9e:2f:
59:82:6f:1d:e9:ac:ef:39:01:4b:ea:e9:79:82:5e:
11:eb:cd:50:89:03:23:b1:b8:a0:92:9d:c5:c6:2c:
69:0d:78:58:4a:71:85:99:ca:f9:7b:f9:d3:dd:98:
cf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6C:22:DA:EE:5D:CF:43:7B:8F:A8:04:BE:3A:DE:63:97:5B:A9:E6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/amwi2u5dz0N7j6gEvjreY5dbqeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:6b:31:62:ed:f4:26:55:86:dc:cc:e8:48:6d:e8:64:66:58:
50:50:27:9d:f2:2a:e7:8b:f1:9c:c0:2d:a6:31:01:ee:9a:b3:
36:10:1c:85:18:4c:e6:5a:f5:03:da:b9:f9:84:9a:71:11:7e:
c7:a5:14:40:e1:c4:4f:d9:a6:35:da:03:26:f4:d8:38:cb:d2:
39:40:7f:ad:49:59:82:68:56:2a:b2:df:82:32:90:c2:28:f7:
1d:cc:14:44:f5:31:87:17:95:ee:c1:d5:e4:28:be:90:e8:bd:
ec:05:bf:c4:a4:e8:00:4e:f1:90:a5:be:ec:1f:27:71:e2:ee:
cb:22:f0:41:c3:17:46:93:c4:76:27:08:7c:34:df:3e:d7:46:
e9:42:4c:dc:e3:c8:d8:38:45:7b:44:43:8c:d7:4b:05:5a:a7:
e1:cb:07:a1:5f:14:ac:2a:bf:d5:7c:0c:f4:d5:8a:44:ce:4c:
e3:34:a9:3c:bb:3c:f2:a6:fb:ad:8c:45:10:8f:70:6d:4e:13:
74:34:2a:60:bd:2e:6b:e7:28:21:46:42:33:7d:22:93:34:da:
25:4d:05:84:1d:aa:1b:0f:0c:eb:51:45:3d:26:49:6a:92:41:
c7:35:b5:b1:a3:5b:2b:b8:00:27:4e:72:8b:ed:94:a1:4e:6a:
5b:0a:9e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 00:45:56 2025 by rpki-client