Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r0-AsQSfaB1P02j1YgdPrPLPsAA.roa
File: r0-AsQSfaB1P02j1YgdPrPLPsAA.roa (raw, json)
Hash identifier: xHZsiOtuAkkKbq15mV4iLuGSb2TeuuK6oCJr75GAlLo=
Subject key identifier: AF:4F:80:B1:04:9F:68:1D:4F:D3:68:F5:62:07:4F:AC:F2:CF:B0:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864EF519DF1CFC18F3D4AA8FDCF7FC839F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r0-AsQSfaB1P02j1YgdPrPLPsAA.roa
Signing time: Tue 14 Feb 2023 08:05:31 +0000
ROA not before: Tue 14 Feb 2023 08:05:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:4ef4:3220/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4e:f5:19:df:1c:fc:18:f3:d4:aa:8f:dc:f7:fc:83:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 08:05:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af4f80b1049f681d4fd368f562074facf2cfb000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:68:ad:92:fc:7f:e0:1b:e7:2e:72:a6:43:
f2:4f:87:8b:c0:4f:b2:81:f7:11:21:e9:bb:d2:ae:
6c:0b:90:b2:63:77:2a:87:07:c2:a0:e8:5a:46:6b:
13:05:8d:f0:fc:df:33:fc:d1:28:35:98:fc:7b:53:
17:95:48:2f:aa:37:cc:73:d3:54:07:4e:2c:74:3b:
42:8c:12:d4:89:b2:86:8d:22:98:4a:0a:56:df:5c:
23:35:61:78:2a:18:2f:83:2e:4c:f8:bf:da:5d:2d:
29:88:35:75:ae:52:7a:12:14:df:08:98:66:af:d2:
82:cb:52:60:9e:4e:ef:8b:18:2e:07:1c:f3:ef:b0:
81:3e:7c:91:6b:a5:a8:6d:4b:a9:53:99:25:8a:66:
fd:7f:f9:26:ee:71:b5:e5:36:56:f6:ea:f4:3e:e7:
fd:b3:71:f3:5f:f4:fe:13:27:5a:fe:5e:18:1f:48:
ce:1f:4c:8c:0e:81:dc:54:24:e5:e3:a5:9d:e1:bb:
0d:44:a2:c6:92:76:b3:29:b1:4c:6b:b5:c4:55:36:
32:13:8b:a5:a0:4f:bb:93:33:f0:c6:be:22:e0:e5:
43:3a:03:4b:10:b6:46:3b:49:30:93:f9:13:b1:f9:
7d:a1:86:91:2e:1c:fd:b5:b1:c2:e9:d5:5f:d5:75:
36:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4F:80:B1:04:9F:68:1D:4F:D3:68:F5:62:07:4F:AC:F2:CF:B0:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r0-AsQSfaB1P02j1YgdPrPLPsAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:89:c6:dc:43:8d:8b:61:a0:bd:0a:3a:4a:d9:90:30:01:e5:
90:76:79:bb:23:85:d8:fe:98:a0:ca:71:0a:9e:36:32:5f:41:
e7:17:e1:a6:8d:df:dd:3e:3f:9a:c0:f9:3b:8d:18:2d:cf:82:
36:2a:63:b2:5b:0c:02:50:ac:0a:5d:8e:8b:41:6f:ca:b4:c2:
80:ca:25:a3:1a:09:05:1e:fb:8c:e6:25:1d:37:dd:3f:af:1b:
3c:e4:90:8e:31:65:f6:15:e6:8a:61:4c:f4:3e:bc:80:43:2d:
bf:55:10:bc:a4:fe:79:08:aa:c3:71:b3:4c:61:f8:cb:91:62:
cb:38:82:12:75:82:4f:80:6f:54:d8:1e:76:df:d7:df:14:c3:
b9:86:66:e0:b9:69:f9:81:e5:c7:8c:1c:40:08:8a:b7:0e:95:
3c:b4:f0:65:e9:f6:54:14:04:fb:48:43:57:e9:2d:14:cd:b4:
7b:33:0f:9a:97:31:0b:ca:3e:70:3e:4e:f7:82:a1:06:b1:f0:
e8:4a:66:a9:7f:d5:b6:6f:d0:fc:48:e4:68:34:0b:32:d3:37:
e6:73:7a:30:8f:cf:7c:7e:ce:fa:7b:80:8f:7c:da:c9:5a:25:
0f:8d:ad:34:f4:1a:54:63:5a:74:ea:62:40:2f:2f:4d:bb:0d:
bb:ef:2f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:11:51 2025 by rpki-client