Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0qWXcdYYVGu3llT3GvsB2z7yb9I.roa
File: 0qWXcdYYVGu3llT3GvsB2z7yb9I.roa (raw, json)
Hash identifier: /CUiPIkl1fFOabut/960dlKBMOAtzWfl3XT4QjJAXTU=
Subject key identifier: D2:A5:97:71:D6:18:54:6B:B7:96:54:F7:1A:FB:01:DB:3E:F2:6F:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187853B7F16B9CED0497F20E6BCAEBEC2EE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0qWXcdYYVGu3llT3GvsB2z7yb9I.roa
Signing time: Sat 15 Apr 2023 14:04:41 +0000
ROA not before: Sat 15 Apr 2023 14:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:853b:6d40/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:85:3b:7f:16:b9:ce:d0:49:7f:20:e6:bc:ae:be:c2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 15 14:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2a59771d618546bb79654f71afb01db3ef26fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:e3:0f:dc:c9:17:a6:e2:1e:ef:1d:4f:60:
35:a2:6a:72:4b:b1:4e:3a:a1:be:5f:7c:df:85:b1:
c9:61:e7:53:1c:30:55:f7:b5:98:f8:38:f7:6a:9f:
77:36:4d:d1:87:d2:c0:91:59:a7:96:e9:17:96:64:
9b:b6:05:8b:cd:66:3a:70:39:9a:c6:f6:e8:53:9e:
3c:19:02:bc:b0:d8:f3:22:ed:8d:d2:31:5c:26:11:
8c:34:be:ec:d1:01:a2:2f:66:5c:cd:5b:0e:6b:2e:
e6:09:41:ac:da:14:bb:4e:a6:a0:e7:e9:27:3f:00:
6a:3a:2f:a6:0b:c4:e3:aa:d5:77:cf:a5:c7:1b:e6:
b5:70:3d:50:1b:0b:ee:2c:70:4d:74:13:97:37:ed:
26:52:b2:31:7c:c5:57:dc:a3:9d:7c:ff:8c:c9:7a:
fe:53:dd:54:04:0a:6b:41:fa:71:af:49:e3:10:f0:
93:72:85:a0:b9:20:a0:54:22:0e:94:6d:72:a4:a1:
68:c4:be:14:f5:01:6d:16:62:ce:aa:a4:eb:b5:f9:
e1:ca:ca:b3:d4:75:b7:81:7b:65:ed:d7:f3:3e:c9:
bc:5e:e8:b1:41:ea:41:b3:96:ca:45:26:83:75:36:
ab:fa:86:b6:d8:67:b3:2c:d3:33:4c:79:06:da:67:
61:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A5:97:71:D6:18:54:6B:B7:96:54:F7:1A:FB:01:DB:3E:F2:6F:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0qWXcdYYVGu3llT3GvsB2z7yb9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:27:8d:2d:d5:72:93:6c:23:d3:a6:30:27:f2:1f:d6:da:33:
3a:42:79:39:3d:8b:4d:16:bb:36:1d:e9:90:83:9a:04:45:b5:
c5:39:ce:ae:ea:50:03:9e:22:62:d1:96:d7:3a:11:04:c1:eb:
ba:0b:73:74:6f:be:19:8d:7e:6f:3b:20:b6:14:8a:ce:6e:11:
af:25:cc:a2:6a:49:90:d5:0e:4a:11:95:7a:3e:ca:85:d8:a3:
ea:3f:39:2b:db:cf:6f:b5:b7:2c:6f:f9:8e:b6:a3:ac:23:19:
fe:bd:c6:6d:14:7e:5c:7e:7d:89:5a:03:6a:81:4e:a6:44:67:
2c:a2:c7:d1:7c:63:e9:b0:fa:27:88:3a:5f:d4:59:fc:20:55:
d2:84:0b:f8:6a:f5:f7:d4:fe:3b:8b:63:f0:13:bf:6a:68:f7:
c7:ad:62:aa:9f:ce:9e:b0:ef:3f:c3:12:ea:11:e4:8f:46:d3:
ed:2f:e2:ee:f0:4f:2c:26:5e:54:ac:4b:a5:0b:4d:67:b7:56:
98:10:6a:42:70:07:f2:08:b3:c2:0b:5d:4e:22:d8:9f:b8:8e:
19:e1:9d:71:a8:db:18:2c:36:5b:d0:5f:b9:5b:7d:12:f5:33:
ee:d2:e7:c2:25:b0:c0:fa:ad:9f:8f:1e:11:fd:53:66:92:67:
1a:12:33:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:05 2025 by rpki-client