Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q1XYIxjM5tMS-QZD4AhiGmHk3k0.roa
File: Q1XYIxjM5tMS-QZD4AhiGmHk3k0.roa (raw, json)
Hash identifier: 2rEtWD+31KxPBilIpsg3xg856LXxv0TeoFMe4L8Hpi8=
Subject key identifier: 43:55:D8:23:18:CC:E6:D3:12:F9:06:43:E0:08:62:1A:61:E4:DE:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F809F0B38C47ADC88674D4228EE5D7B9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q1XYIxjM5tMS-QZD4AhiGmHk3k0.roa
Signing time: Tue 15 Aug 2023 07:12:28 +0000
ROA not before: Tue 15 Aug 2023 07:12:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:09:f0:b3:8c:47:ad:c8:86:74:d4:22:8e:e5:d7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 07:12:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4355d82318cce6d312f90643e008621a61e4de4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:84:81:85:7b:f4:38:97:99:95:95:08:6a:
1a:a0:7b:4e:22:a2:d4:44:1a:98:03:b7:a7:f9:71:
b3:d3:47:6b:80:df:bb:a7:1e:f5:cb:6c:e6:bf:74:
ea:03:2e:f0:60:18:1a:9d:46:87:d9:06:a4:d4:4e:
89:ff:25:a6:e6:46:9d:c9:ab:f6:f5:8b:ff:ba:b0:
9e:ac:46:5d:2f:3b:86:24:2a:fc:2a:2a:b4:28:3c:
45:15:ca:5a:f8:34:92:43:1f:4a:ce:d1:75:ea:b5:
b8:08:58:26:d3:52:a5:e4:55:3a:e1:8d:8d:7a:e4:
61:6a:43:cc:3e:25:a6:11:83:37:da:69:25:53:b7:
88:6f:23:e5:3f:c8:63:c8:1b:7f:6e:6c:f6:82:62:
9f:45:1a:0c:df:46:92:59:a4:77:bc:86:51:b1:f2:
0a:6e:00:f1:1e:6b:8d:d1:5d:90:d6:53:39:1c:52:
5b:e2:45:da:81:37:57:48:24:09:4f:a8:2b:1d:18:
0d:bc:dc:86:c5:9d:43:a9:8d:ad:f8:dc:ea:2d:48:
58:57:e8:eb:4f:13:c7:e1:20:f3:6a:66:f9:66:e9:
31:72:53:ee:ff:c1:17:98:95:80:90:53:b6:3b:6a:
64:61:fe:57:d6:37:7d:1a:6a:39:07:68:99:5d:be:
fc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:55:D8:23:18:CC:E6:D3:12:F9:06:43:E0:08:62:1A:61:E4:DE:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q1XYIxjM5tMS-QZD4AhiGmHk3k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:5a:cd:79:23:2a:8f:f5:19:4f:1a:39:ea:9b:5e:68:eb:0a:
1c:18:14:80:db:10:eb:d8:0e:29:39:20:c6:7d:3a:38:91:8a:
cc:fa:3e:a2:e6:12:77:78:60:bc:c1:f8:cd:14:04:77:df:e4:
30:cb:6e:75:04:a1:33:34:18:32:67:20:f9:3e:f9:f1:9e:47:
11:65:2e:df:77:61:d2:fa:4e:9b:dd:12:a4:19:09:90:a1:27:
e8:63:57:8b:8b:7b:7e:87:d7:5c:f1:52:1c:a0:9c:91:8a:d7:
cf:85:bb:30:44:f7:dd:8e:1f:5d:ed:f1:16:01:40:ed:e3:f8:
fb:30:3a:92:52:e3:a6:f3:dc:4a:dc:4a:40:20:6f:0c:eb:6c:
30:c8:e2:03:df:0f:8b:4b:c9:c0:ff:99:fd:f8:f3:06:0e:9b:
89:9b:71:71:e4:05:03:c8:39:ac:9d:55:eb:a5:85:85:6b:99:
b3:8d:43:8d:3f:2d:c8:0d:51:cc:37:2c:ba:30:86:18:b0:64:
64:53:49:94:08:c4:21:cf:34:67:27:03:cc:ca:70:8d:a5:c1:
29:96:f0:62:c0:7d:75:e4:94:1a:d6:d3:c9:b6:8e:bd:ac:9b:
21:fe:a3:a0:23:db:d7:d9:3f:f6:a3:05:63:5b:b6:84:38:01:
a2:fa:ba:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:18:32 2025 by rpki-client