Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A-nQFrj73cq4YtW1i9dBVjYXbOo.roa
File: A-nQFrj73cq4YtW1i9dBVjYXbOo.roa (raw, json)
Hash identifier: fI1jT6fSLKAoH+NAW5FP2d4DC9sxBrO5S4bo275cRa4=
Subject key identifier: 03:E9:D0:16:B8:FB:DD:CA:B8:62:D5:B5:8B:D7:41:56:36:17:6C:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863F194D81E34DED19B92B5C3CC8DB63B1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A-nQFrj73cq4YtW1i9dBVjYXbOo.roa
Signing time: Sat 11 Feb 2023 06:11:08 +0000
ROA not before: Sat 11 Feb 2023 06:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3f:19:4d:81:e3:4d:ed:19:b9:2b:5c:3c:c8:db:63:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 06:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03e9d016b8fbddcab862d5b58bd7415636176cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:02:df:c5:99:31:2c:88:b5:78:77:81:01:
40:1e:af:03:86:87:5b:0b:9e:59:ef:49:56:c2:d8:
fb:4f:a5:8f:4c:ea:27:4e:4b:41:b9:5e:46:19:e1:
af:89:64:6a:81:b4:66:56:47:c6:d4:c3:51:93:62:
6e:5f:2b:42:0c:1e:83:52:99:c9:d9:43:4b:b1:21:
dc:8b:f0:fb:ec:da:3a:ba:69:64:00:6c:a2:33:a1:
f1:1a:8a:d6:db:04:c8:50:2e:59:2f:99:4c:04:b1:
76:83:9e:bf:6c:bb:f4:91:2a:11:6a:bc:c6:f2:3a:
61:d9:ad:00:37:65:a2:e3:a7:19:c1:d5:38:d0:a6:
f6:27:4f:fb:1c:36:b7:68:2a:35:83:ea:d7:6a:60:
47:bb:ee:c8:58:98:ea:ab:76:82:83:b7:61:38:e5:
75:62:87:4e:32:14:be:5b:1c:ee:94:dc:c4:6c:2c:
15:f9:07:8a:7d:d9:c9:4d:38:0f:35:64:84:bd:b9:
ca:96:65:fd:40:f3:5f:5b:47:29:21:53:2a:32:0b:
37:1e:73:07:81:6f:d3:89:23:cf:af:44:fe:83:4d:
29:0a:81:65:fa:d2:9b:d4:33:24:de:e6:18:a1:cb:
63:e8:e1:a9:dc:bc:0e:74:1d:f0:8d:8d:59:53:4e:
43:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E9:D0:16:B8:FB:DD:CA:B8:62:D5:B5:8B:D7:41:56:36:17:6C:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A-nQFrj73cq4YtW1i9dBVjYXbOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:d7:86:ab:c7:6c:c1:54:b1:6c:4f:e7:8e:72:57:58:36:30:
34:48:8f:09:ce:3e:8c:bb:f9:e8:30:56:7b:82:68:e0:c4:9c:
ba:6c:a5:98:97:f8:91:3a:8f:f1:2c:51:e2:fd:15:9b:e6:19:
99:1a:c5:ad:85:bd:37:ec:be:7c:16:06:ca:5f:6a:14:bd:94:
26:d5:8a:0b:c3:95:93:23:02:3e:d7:d6:d9:40:b6:90:41:f1:
ef:af:d6:75:cc:6f:47:90:42:7f:9b:be:0e:c5:3d:68:6a:8c:
2e:36:78:fc:15:af:c6:cf:8c:c7:5f:99:c2:17:2b:3d:af:0b:
13:60:82:5f:4e:3f:7b:f5:55:34:8a:b5:5c:df:65:16:c4:70:
57:cb:c2:60:b2:5c:d2:e3:b0:18:5f:e0:0b:94:7f:e5:2c:dc:
29:c6:29:7a:a3:1b:23:67:a1:16:f5:b1:d3:da:5e:f1:f4:f1:
4d:11:7d:6a:28:55:0b:88:05:10:a3:a5:15:95:fd:31:af:e0:
1c:59:89:a8:fb:e8:7f:e0:0d:f9:26:b4:19:59:d3:10:bf:2f:
2a:5f:45:d0:54:46:5d:34:64:a9:f3:de:88:a4:b1:7f:94:2c:
cd:0a:08:a5:fa:e2:49:fe:af:db:d0:e3:cf:a1:a4:4b:f2:2b:
05:85:d3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:23:25 2025 by rpki-client