Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-qTvvpBRNLT_JO-abq6Jpzdh6dA.roa
File: 1-qTvvpBRNLT_JO-abq6Jpzdh6dA.roa (raw, json)
Hash identifier: Id8qzfD5T9Jg8otTQg5VX3jFzbrjtK80t9DONZ2TLgM=
Subject key identifier: FA:A4:EF:BE:90:51:34:B4:FF:24:EF:9A:6E:AE:89:A7:37:61:E9:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A87B07EBFF9B4C5D5AD73FAC74CDD13B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-qTvvpBRNLT_JO-abq6Jpzdh6dA.roa
Signing time: Fri 03 Mar 2023 17:18:00 +0000
ROA not before: Fri 03 Mar 2023 17:18:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a8:7b:07:eb:ff:9b:4c:5d:5a:d7:3f:ac:74:cd:d1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 17:18:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faa4efbe905134b4ff24ef9a6eae89a73761e9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:dd:60:b2:5e:d1:5d:81:fd:c6:9b:fb:97:
57:b1:66:ac:99:e2:e0:4e:82:76:71:d7:13:e8:5c:
49:df:1c:6d:30:c7:39:ae:ff:4b:06:23:58:02:f4:
cf:9e:89:05:61:99:8d:6b:be:44:87:b5:53:a3:91:
1f:0f:ad:38:e7:76:ae:34:48:10:af:3b:bf:12:ab:
5c:6b:f5:87:6d:fe:f7:9f:00:3a:51:24:71:d2:28:
67:7f:36:07:2f:7b:e8:bb:c3:b5:03:87:1f:8e:c9:
f6:7f:25:00:fe:c4:bf:e0:45:70:c2:20:bf:ac:fe:
79:34:a2:51:1a:e5:0a:1b:2e:b8:ea:97:c8:ce:93:
97:22:d1:e6:c1:8b:c4:fe:b0:4e:9b:71:c7:20:61:
02:4f:6a:d9:62:74:54:8f:6d:34:02:c0:59:e0:6f:
2e:85:6b:ca:3c:fb:b2:bf:ef:51:68:a1:24:92:4c:
68:ee:29:6f:9c:6a:59:28:d8:ec:47:e0:76:22:82:
80:6b:86:f9:86:ae:2d:57:a7:38:b9:e6:29:c1:68:
4b:62:62:fc:1c:bf:fe:a3:e9:30:32:ac:12:4b:af:
72:73:11:29:c8:78:fe:49:cf:23:32:74:63:b7:5f:
f8:3c:d1:2d:44:cd:8a:5b:d0:2e:07:14:2d:40:29:
63:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A4:EF:BE:90:51:34:B4:FF:24:EF:9A:6E:AE:89:A7:37:61:E9:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-qTvvpBRNLT_JO-abq6Jpzdh6dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:bb:97:18:3b:ac:1c:2f:90:a1:13:2f:0c:34:b2:22:b6:88:
f5:a0:5a:a4:05:6a:cc:a2:b1:02:02:75:6d:dc:e6:93:de:32:
52:3e:84:68:07:92:c6:fc:b8:33:aa:cb:27:f1:55:1e:a1:16:
d0:e3:b1:e1:da:a8:04:6b:4a:48:9f:3a:b7:0c:fb:85:c1:89:
52:95:8c:3d:27:99:86:51:65:34:eb:17:d2:ef:5c:dd:11:69:
d3:90:41:9f:87:be:8b:a3:3b:a6:67:1b:15:48:e5:80:11:8e:
55:b1:ad:9b:ca:b2:7a:6f:a3:b5:8c:ef:c7:c7:15:25:f0:0d:
3f:ca:51:80:aa:0c:48:c2:78:1f:45:64:8f:ba:40:ca:33:ae:
25:37:4e:60:2b:ba:37:c5:82:0a:44:3a:8f:fb:c8:e4:d7:11:
d7:d7:37:57:6e:5e:b7:31:2e:4e:b7:05:c1:8a:50:21:04:d3:
4f:51:df:41:e4:c1:76:ba:f2:db:7b:fb:b6:3c:9a:be:83:65:
d0:d9:f3:6c:33:7a:45:6c:25:fa:c4:12:78:f8:12:04:46:b2:
ba:54:cf:a0:61:1d:d3:c3:13:9d:5d:36:23:9c:10:22:98:6e:
4d:70:d4:07:00:0a:f2:f7:f4:00:30:9e:f3:b1:c3:d7:93:a9:
45:4c:41:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:11:17 2025 by rpki-client