Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4QBApwwR52ek7LuovdgJeHMdRVo.roa
File: 4QBApwwR52ek7LuovdgJeHMdRVo.roa (raw, json)
Hash identifier: vWQqlkmyuKgwfIHFoWI+8ImKBBijBkKQByPgcyFvLp8=
Subject key identifier: E1:00:40:A7:0C:11:E7:67:A4:EC:BB:A8:BD:D8:09:78:73:1D:45:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D35A0508056FC34C37C9CD1DCB0F2E38
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4QBApwwR52ek7LuovdgJeHMdRVo.roa
Signing time: Tue 08 Aug 2023 04:13:59 +0000
ROA not before: Tue 08 Aug 2023 04:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:5a:05:08:05:6f:c3:4c:37:c9:cd:1d:cb:0f:2e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 04:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e10040a70c11e767a4ecbba8bdd80978731d455a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:80:14:8e:f5:ac:e2:0e:1e:e5:28:8c:40:95:
b2:e3:c9:b0:0d:55:4b:9d:d5:96:e0:77:1d:b2:39:
88:dd:9e:bb:57:2c:09:f1:c9:f2:61:df:bd:5e:ad:
71:7a:2c:f1:62:cd:f5:b6:17:7f:eb:d6:41:ac:94:
61:3a:64:43:fc:21:1b:6c:22:e5:cf:ee:1b:c1:21:
2f:03:91:03:e7:e4:47:70:86:0a:0f:1f:c9:79:2e:
a4:f1:e3:91:26:ab:eb:7d:f5:06:24:0f:23:2f:3e:
d9:7b:07:09:cb:be:02:66:8f:1d:99:d2:af:a4:9c:
fe:b0:16:f2:4f:0a:01:33:f9:ce:18:e8:38:ca:51:
b8:94:8c:3d:4f:fb:45:8a:40:90:0a:cf:de:10:5e:
4b:c3:1b:a8:83:70:cc:fc:fc:2a:5e:f6:23:bb:27:
2d:80:b2:a0:9b:ec:c7:6f:d4:6a:1d:7b:63:70:ea:
70:aa:b3:34:92:57:44:1a:ef:d9:8e:d1:69:aa:51:
83:7f:90:a5:17:30:7a:aa:8f:22:16:fc:c9:48:72:
be:1d:42:dc:cf:80:ae:ab:06:b7:e7:e1:82:8e:66:
c0:c1:f1:bb:81:6b:35:3f:7f:ff:d3:b1:b2:3b:d2:
7a:76:16:79:fc:13:65:9f:b6:53:d7:df:6d:5e:8c:
bd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:00:40:A7:0C:11:E7:67:A4:EC:BB:A8:BD:D8:09:78:73:1D:45:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4QBApwwR52ek7LuovdgJeHMdRVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:d5:72:ca:f0:d0:26:2c:ab:3d:58:3d:4b:d5:4c:42:72:ce:
bd:0f:1c:7f:a6:0b:89:e5:81:c4:c6:b4:60:12:ec:a6:8c:bf:
ac:1f:a4:a4:4b:76:2b:a5:06:50:c2:86:61:44:36:13:90:6f:
ea:17:a5:49:23:bd:77:6d:b7:fc:ef:bd:43:04:05:1a:13:1d:
d3:5d:75:e3:b8:d9:d9:32:7f:44:b1:fe:6a:4b:55:e2:a1:9f:
ce:6b:4c:d1:ef:65:d6:8b:bd:f5:ac:e9:76:7d:b5:73:f0:cb:
b3:46:94:f2:aa:0e:cf:26:91:29:34:29:2a:df:23:3e:35:e3:
34:24:87:fc:b4:58:5f:59:bf:a3:f5:21:0d:a1:02:ad:ac:1f:
ea:a3:31:d7:e2:15:20:10:1c:47:73:18:c9:42:07:8d:b9:a0:
00:a6:35:6a:18:53:2b:d5:a2:ab:58:3a:37:b0:b4:52:bc:b4:
b8:2a:02:fb:28:45:83:4a:11:e3:a2:27:9c:2d:72:9e:5f:34:
d3:2c:9a:89:a5:13:60:7b:ed:8b:97:45:e2:fa:58:83:44:aa:
39:c7:08:5e:8e:a1:5b:20:01:e4:05:3f:75:2b:7f:6b:07:c4:
64:5b:9e:48:13:0b:ba:4a:97:ac:aa:ea:e1:08:ec:86:b9:b9:
ec:77:af:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:05 2025 by rpki-client