Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2QQ70rjBMmIIyUwGKqHffz7kqv8.roa
File: 2QQ70rjBMmIIyUwGKqHffz7kqv8.roa (raw, json)
Hash identifier: LwRzalVHbswTMXq8HgRcauBVbdEno6B2h+Zx5BGTfyY=
Subject key identifier: D9:04:3B:D2:B8:C1:32:62:08:C9:4C:06:2A:A1:DF:7F:3E:E4:AA:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018996671BE070039FC03606C0653FA9BD94
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2QQ70rjBMmIIyUwGKqHffz7kqv8.roa
Signing time: Thu 27 Jul 2023 08:11:26 +0000
ROA not before: Thu 27 Jul 2023 08:11:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:96:67:1b:e0:70:03:9f:c0:36:06:c0:65:3f:a9:bd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 08:11:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9043bd2b8c1326208c94c062aa1df7f3ee4aaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:a1:2a:e8:62:4b:30:06:98:70:a1:3e:d8:
26:16:60:cd:28:ea:8f:66:07:c1:01:d3:80:3e:f6:
23:98:86:5c:aa:b1:93:4a:ea:db:5d:e6:2b:c9:ce:
d4:55:98:2e:38:fc:37:f8:81:d6:36:10:36:6b:80:
9c:f4:ff:a7:42:28:e2:7a:1c:f9:f5:4a:c2:a0:c2:
12:6d:e6:2e:bf:ad:8a:d6:bb:b7:df:a6:df:25:97:
b6:2a:14:3b:04:23:52:0a:58:a8:e0:f2:a6:d6:d3:
81:0d:dc:0a:5f:3d:d1:4a:0b:31:02:cb:7e:f5:80:
95:09:4a:4c:eb:ea:c3:5d:28:7c:80:f8:86:36:3e:
da:1a:25:6e:d4:93:24:eb:77:2d:38:68:3c:d2:87:
b4:41:04:d7:52:c7:ec:1f:f1:12:b4:c5:15:4a:5e:
68:48:7e:c2:a3:7b:5f:d1:9d:ef:08:43:8b:da:02:
dc:bc:23:1d:19:4e:e7:6c:86:6e:f5:f9:89:fe:8d:
f8:e1:16:e7:83:c6:c9:19:10:46:86:06:23:7f:7a:
2b:c5:14:20:13:fd:0e:6d:4c:14:82:b5:c9:36:9f:
b0:a8:e3:16:38:1f:48:42:c9:f6:ef:4e:1d:61:4f:
fe:0d:3f:8c:03:09:26:9a:b2:c6:b2:b6:02:8f:bc:
8f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:04:3B:D2:B8:C1:32:62:08:C9:4C:06:2A:A1:DF:7F:3E:E4:AA:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2QQ70rjBMmIIyUwGKqHffz7kqv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:ea:77:58:ef:67:68:8a:c3:c3:89:7f:4a:bf:e5:b3:16:d1:
01:14:d1:8e:ab:74:a9:a3:cb:05:6c:41:82:15:3e:4e:99:3b:
e8:b7:d4:3a:82:48:f9:bb:dc:0c:92:47:5f:b4:93:8c:52:72:
4b:5a:e6:7c:58:1c:95:7c:26:f5:b5:70:c5:10:c4:1c:5f:83:
76:ac:80:e6:6f:18:59:1d:35:ea:c2:46:ed:45:c4:cf:24:eb:
2b:70:a2:df:f6:6a:06:53:ef:aa:65:6d:e8:73:b9:0a:6c:99:
9e:f8:a2:1f:03:fd:cc:c9:bf:a3:4d:a1:8e:42:cd:f2:08:62:
23:3b:b6:d3:2c:3f:f0:c7:d9:f8:3e:32:e8:52:dc:80:2d:5d:
6e:12:27:50:2d:09:19:0e:06:ba:6f:a5:bb:dd:a3:79:fe:ee:
86:76:09:f7:37:20:61:29:5b:5e:8d:b4:a4:c0:6d:66:c6:5c:
6b:2f:66:61:ad:59:f9:b9:c1:7d:22:ab:14:ab:a5:b7:43:fc:
66:7a:1d:52:26:f7:4e:75:a8:12:d5:49:e5:e2:62:73:37:68:
59:1c:65:97:5c:17:f1:fc:19:b9:0a:28:f6:52:f6:ed:5c:49:
af:66:96:88:72:65:3f:23:f6:24:61:ca:3c:a3:16:4b:d2:1d:
f5:5b:5a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 20:07:43 2025 by rpki-client