Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/avcnqADKvIOLGxjQm7xUYlmnxng.roa
File: avcnqADKvIOLGxjQm7xUYlmnxng.roa (raw, json)
Hash identifier: A7eXQsXi0kFt6gArUqIhZs1w5HX8ylPGc6rPtBI8yX8=
Subject key identifier: 6A:F7:27:A8:00:CA:BC:83:8B:1B:18:D0:9B:BC:54:62:59:A7:C6:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187FCFD44BFA95ACB7056A16D8C319B0A4E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/avcnqADKvIOLGxjQm7xUYlmnxng.roa
Signing time: Mon 08 May 2023 20:11:09 +0000
ROA not before: Mon 08 May 2023 20:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fc:fd:44:bf:a9:5a:cb:70:56:a1:6d:8c:31:9b:0a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 8 20:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6af727a800cabc838b1b18d09bbc546259a7c678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:e5:59:96:7b:7b:32:fb:9d:02:a4:7a:de:
69:33:c3:c4:9d:1c:b6:3d:64:11:44:80:82:e8:6a:
af:bd:bf:8b:3d:3d:b3:78:70:38:46:75:45:5b:f2:
79:7e:0b:b7:f4:10:ca:ab:67:81:82:8b:50:85:b6:
68:4c:e9:b8:9e:cb:44:f4:f9:68:77:3a:a6:c8:5a:
7a:b0:8a:2a:df:45:1d:3d:45:0b:3d:c9:63:f7:2f:
ca:be:a4:dd:6e:c3:b0:4c:fe:d3:30:52:0d:99:3b:
b4:89:a6:15:e4:a4:cc:a0:92:1a:af:10:84:85:ef:
61:02:a9:80:8c:94:9d:7a:74:6c:be:2a:1d:9d:22:
96:03:84:e2:7a:53:c0:f2:fa:a8:8b:1d:7c:1a:fc:
4e:87:b6:77:61:09:ed:d2:cd:4d:91:3a:70:e0:0a:
75:99:20:be:fc:b0:77:f8:43:03:af:51:77:b1:41:
ff:0c:84:81:dc:fc:ec:00:6a:ca:bf:0b:33:61:e8:
c0:ad:17:ce:36:94:64:2a:48:35:20:9e:54:29:4e:
22:13:b7:e6:c2:62:ec:3d:d2:69:be:ff:61:af:77:
9c:07:ce:e3:a2:f2:88:a6:f1:fd:fb:fd:a2:4b:58:
80:9e:33:19:0e:07:b0:c4:c9:ac:d1:34:63:93:75:
fa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F7:27:A8:00:CA:BC:83:8B:1B:18:D0:9B:BC:54:62:59:A7:C6:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/avcnqADKvIOLGxjQm7xUYlmnxng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:e6:36:6c:b4:4a:41:f7:91:a7:27:36:1e:f2:b3:7f:c2:b8:
24:7c:11:2c:83:2a:a6:d1:a6:01:d0:0f:8a:9b:77:6b:6a:6e:
f0:b0:2a:2b:e9:5f:a3:83:2e:59:6a:48:c9:96:7c:db:d2:c7:
bf:09:df:48:f0:32:9a:d0:39:7b:ea:d4:0d:5d:bd:ce:37:4e:
40:5b:49:b3:a5:7c:8a:92:84:8f:c1:4e:45:b4:0b:fa:16:98:
ee:70:17:38:03:a3:71:ee:15:2e:f2:6d:73:89:af:63:df:9a:
6a:ba:fc:b5:63:d2:9f:56:99:5b:eb:8a:a2:f4:ab:bb:47:1d:
70:ff:fe:a1:ea:6a:04:f6:1b:3c:68:bf:69:f9:f2:b4:34:e5:
1d:4a:13:44:e1:62:28:c9:e8:87:28:09:fb:77:59:9d:22:ef:
b0:9d:83:ac:50:4a:a8:48:6d:79:fa:5c:ec:5b:1d:30:d0:26:
f5:5b:f9:6f:ee:08:57:b9:31:8d:8d:4a:ed:d8:5e:61:7c:c0:
33:69:37:42:82:bf:f2:cf:d7:64:2d:20:6c:d1:fe:22:8f:0e:
0e:71:a5:65:8a:da:9c:ff:85:db:fc:68:8e:1a:74:7a:d6:03:
00:d2:11:2c:7c:97:f6:e4:7a:36:09:d6:43:cd:40:8e:43:8a:
51:7c:66:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:14:14 2025 by rpki-client