Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q0TO4Obu_a7S8aQ5UQDWN3r9gsM.roa
File: Q0TO4Obu_a7S8aQ5UQDWN3r9gsM.roa (raw, json)
Hash identifier: ENUQdfYv+g2BJ7UR69UZKqdkLTQjvAKQLcNJjayZGyI=
Subject key identifier: 43:44:CE:E0:E6:EE:FD:AE:D2:F1:A4:39:51:00:D6:37:7A:FD:82:C3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F5E6A2F588F694E4D17D7EDD9194FFE4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q0TO4Obu_a7S8aQ5UQDWN3r9gsM.roa
Signing time: Sun 07 May 2023 11:09:05 +0000
ROA not before: Sun 07 May 2023 11:09:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f5:e6:a2:f5:88:f6:94:e4:d1:7d:7e:dd:91:94:ff:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 7 11:09:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4344cee0e6eefdaed2f1a4395100d6377afd82c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:c7:34:84:4c:7e:3b:dd:e9:81:da:f6:50:
e0:da:c2:b3:c3:b8:c8:5d:9d:f7:72:4e:3c:1a:80:
d0:79:24:8b:0f:3a:5d:2f:ba:e5:43:1b:40:9e:16:
d1:47:c3:68:19:83:53:0d:1f:27:ca:e6:e8:d3:12:
22:76:b9:04:cd:87:1b:9a:5e:f8:75:db:5e:e7:f0:
29:bd:90:e4:c4:6c:e3:b7:af:c6:fd:cb:62:88:31:
dc:10:46:37:b6:57:04:98:14:9a:df:72:6e:22:69:
c6:bb:ed:59:d9:c1:ee:80:9a:f2:9d:33:8f:6b:fd:
a6:40:6b:40:3c:d8:72:50:84:9c:3c:c8:6c:c0:9a:
a7:26:94:1b:df:75:1c:7e:50:8b:25:33:3e:83:88:
51:8e:aa:73:7e:c2:20:8f:4b:b6:25:b4:eb:5a:31:
5b:98:bd:de:b4:fa:8a:3f:97:43:ed:1c:ea:9c:dc:
99:91:c9:9b:19:45:32:cc:5a:ce:bd:db:59:ef:d8:
1f:30:a3:bc:e7:00:6d:af:84:fe:d0:60:99:82:c2:
49:49:55:38:9d:da:d5:2f:c5:7a:97:97:4c:38:13:
f1:0c:70:eb:d3:62:1b:0f:74:26:a2:ea:84:58:31:
e9:e8:75:6f:32:ed:83:95:74:ef:53:8a:e9:1a:40:
f8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:44:CE:E0:E6:EE:FD:AE:D2:F1:A4:39:51:00:D6:37:7A:FD:82:C3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q0TO4Obu_a7S8aQ5UQDWN3r9gsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:02:93:9a:3b:57:1c:f0:19:cc:b6:bd:c2:4d:f2:36:c3:d2:
fa:0e:0f:aa:c9:b8:c4:1e:56:0d:21:6f:19:7b:72:1b:d4:24:
78:2d:7b:bd:55:ab:91:b1:a2:ad:9a:fd:67:f0:64:ad:05:1a:
e7:6b:ca:09:46:b9:bd:6b:0b:df:10:65:53:f4:fa:91:bb:85:
09:1f:1e:4e:82:75:4e:7f:a4:95:dc:c1:57:d5:d1:8f:56:aa:
71:23:05:ae:2a:1a:d4:a3:56:58:72:3c:52:f7:ae:18:8c:92:
9c:2a:34:02:30:1f:c8:f9:df:70:9c:d6:7d:0b:a2:6c:72:5f:
68:e8:fe:fc:a9:11:ef:54:0d:00:c6:87:e8:f4:50:7a:4c:c3:
5d:0d:ee:f4:31:7a:cd:1d:8a:cb:b9:18:b3:7f:a0:d2:e0:fe:
ce:2d:38:6a:51:31:73:d7:e5:c4:26:bf:a1:00:93:cb:1e:6d:
ea:ba:e4:3b:45:16:d6:3f:3c:92:98:40:b2:d0:04:50:9b:7d:
37:ca:37:07:ca:52:e9:0a:f0:45:1e:55:a2:33:45:17:08:6e:
78:ff:b7:b6:e0:2b:49:df:d1:5c:cf:3d:3c:fa:69:19:8d:d8:
aa:dc:07:79:97:03:97:ea:93:aa:ef:59:ba:d7:df:7b:20:cc:
aa:37:3e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:08:53 2025 by rpki-client