Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0QUJQ81yh98vJnCBrZ0YKVHY0mM.roa
File: 0QUJQ81yh98vJnCBrZ0YKVHY0mM.roa (raw, json)
Hash identifier: 67+AGxhs4tGVpmJqENJSMc7075tgd563LgSiuxpvSXQ=
Subject key identifier: D1:05:09:43:CD:72:87:DF:2F:26:70:81:AD:9D:18:29:51:D8:D2:63
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018993D3EFCB1DEA31A47F74BC1063930699
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0QUJQ81yh98vJnCBrZ0YKVHY0mM.roa
Signing time: Wed 26 Jul 2023 20:11:27 +0000
ROA not before: Wed 26 Jul 2023 20:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:93:d3:ef:cb:1d:ea:31:a4:7f:74:bc:10:63:93:06:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 20:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1050943cd7287df2f267081ad9d182951d8d263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:65:a4:33:48:7b:58:d8:90:bf:96:c1:ec:e1:
ac:af:ed:88:fc:cd:d9:a4:ca:d4:f6:4e:17:2c:f8:
7b:a2:c8:3c:d2:6c:f2:8e:9a:68:ab:9b:be:fa:e3:
15:86:60:03:9c:5c:a1:6f:2f:cf:68:d0:37:aa:ee:
57:e1:b1:fd:11:1f:46:c8:47:1b:7f:e4:6a:a4:b7:
2f:8d:81:b9:79:34:c5:bb:b1:3a:aa:dd:42:5b:ef:
5f:03:a0:50:f9:b0:cd:1f:68:cc:50:c7:21:b8:2c:
a6:a6:8c:b2:06:8f:a0:b1:95:d0:60:f1:2b:bc:db:
23:7b:74:4b:97:17:db:ea:31:1b:a1:b0:3f:d4:e8:
61:8e:0e:62:56:c5:42:49:7d:8b:8c:bb:14:01:ec:
b9:a1:b0:d8:34:98:74:fd:e1:5d:6a:25:fb:99:98:
63:9e:ac:9b:bf:c2:94:6b:1c:1b:b2:1a:d9:24:e4:
a2:34:2a:2c:a7:30:9e:dc:78:f0:c5:eb:d8:2a:38:
2f:2f:82:f9:eb:b8:03:3c:51:23:29:4b:fd:ab:fc:
5d:09:13:3e:65:78:de:42:41:3b:ff:c3:cb:48:1c:
04:29:f4:8f:af:1e:29:25:3e:ae:6c:49:00:13:5b:
b7:68:ae:5e:6e:f0:01:fb:9e:3e:94:9f:ee:8f:6c:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:05:09:43:CD:72:87:DF:2F:26:70:81:AD:9D:18:29:51:D8:D2:63
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0QUJQ81yh98vJnCBrZ0YKVHY0mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:d2:10:53:fa:fe:9c:f0:ff:54:e7:4b:11:12:67:53:63:2a:
91:dc:e8:5b:b0:c5:5e:f5:86:49:08:24:d8:66:e7:9b:37:0d:
99:e1:d3:4b:ac:bb:38:b4:37:9c:8f:39:c7:e7:9a:e3:2b:52:
7d:78:1e:9f:fc:2d:11:5c:00:50:9d:b8:8b:85:9a:38:1b:41:
1e:7e:68:0a:ed:ff:07:d1:69:02:d1:ab:c5:ff:db:2a:6c:40:
02:4b:ac:bb:99:e4:a8:04:39:ab:0c:89:ee:f3:60:57:7d:fa:
eb:e5:f6:30:ec:70:89:68:50:79:99:9c:58:20:b5:39:fe:ae:
8e:8c:01:27:41:6c:da:74:d9:02:a4:b2:96:92:f4:76:64:c2:
c7:df:29:15:5a:19:c9:3b:bd:da:94:0e:00:4e:b8:fd:8a:58:
d8:e1:f5:9d:f5:5c:3d:f5:34:41:dc:54:ae:c5:c8:ed:8f:de:
28:34:bf:3f:24:57:6b:4f:1d:6f:f2:58:57:f7:43:f6:fd:8e:
7c:0f:e3:85:b8:be:98:ef:c9:8e:7f:ea:c3:db:08:df:00:d4:
3c:f4:b3:5f:c5:8b:73:dd:bd:80:80:ec:49:57:26:2c:f4:95:
1c:0a:2a:8e:ed:16:f2:fc:f7:3d:db:e8:69:3d:db:1d:00:d5:
57:76:18:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:06:04 2025 by rpki-client