Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q1YijdZ89f6GLBQ8q-3jZ_BF2Wo.roa
File: Q1YijdZ89f6GLBQ8q-3jZ_BF2Wo.roa (raw, json)
Hash identifier: c4XBxa1g3bt+fDryXl3OwTBMiKEoFGpMRaydrKuZ178=
Subject key identifier: 43:56:22:8D:D6:7C:F5:FE:86:2C:14:3C:AB:ED:E3:67:F0:45:D9:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868A9BDA6CDC63FF099A537C45C0DA1872
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q1YijdZ89f6GLBQ8q-3jZ_BF2Wo.roa
Signing time: Sat 25 Feb 2023 22:05:15 +0000
ROA not before: Sat 25 Feb 2023 22:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:8a9b:1d07/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8a:9b:da:6c:dc:63:ff:09:9a:53:7c:45:c0:da:18:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 22:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4356228dd67cf5fe862c143cabede367f045d96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:69:25:9b:ce:75:fa:4a:84:c9:36:8a:d0:
9a:c2:d0:c1:94:fa:61:34:2f:d5:74:e0:be:83:c7:
76:8f:30:02:e7:2a:b0:2c:84:cd:e4:56:a5:41:59:
d6:a3:5e:a5:53:b7:c1:1b:12:10:96:ee:ec:ee:84:
8a:7f:0c:e1:e2:26:88:a5:d8:06:b1:b9:1d:77:77:
21:fb:d6:c9:72:36:ba:c2:a9:2b:2a:86:9d:a2:38:
a7:e1:15:a2:99:09:4a:93:ea:c7:80:7b:35:6f:d2:
66:2f:31:fe:dd:76:98:6e:84:44:c8:a7:5d:23:23:
99:38:26:f9:86:f8:d6:c1:e8:0e:c6:d1:5b:c0:56:
94:07:33:a4:7d:a8:17:39:2a:bf:98:f9:7a:26:55:
cd:5d:24:c5:a9:24:39:8d:b2:53:db:e6:a9:e6:39:
7c:a2:90:53:60:5f:41:a9:bc:fd:30:e9:fe:04:d8:
c2:d0:13:12:47:62:6d:e1:2a:fe:b4:c2:37:ad:1e:
a1:c7:0d:e9:15:96:5c:65:9e:3b:5e:b3:30:89:24:
4d:61:9f:d7:36:1e:2d:bf:00:85:6d:8d:31:71:8c:
d1:b5:c0:e1:b8:42:92:b8:bf:c1:8a:d2:a4:38:dd:
99:9f:f9:3b:c1:18:fc:18:af:0a:b7:8c:29:5b:fb:
e2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:56:22:8D:D6:7C:F5:FE:86:2C:14:3C:AB:ED:E3:67:F0:45:D9:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q1YijdZ89f6GLBQ8q-3jZ_BF2Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:6b:47:01:bb:1e:21:60:8f:10:d4:74:32:82:60:cb:7a:1d:
d1:6e:9f:68:d3:7d:1e:00:6e:3b:ef:90:57:32:81:0e:ed:32:
2c:3a:e2:7d:c7:ec:e9:a6:a7:97:97:97:32:35:6d:65:27:ec:
fe:e6:86:76:58:e8:98:cb:fe:c8:0a:8a:e8:85:17:53:72:3d:
28:a9:46:b8:86:b7:77:9b:fd:ad:36:93:24:6b:b2:c1:32:c4:
32:1e:bc:56:f8:1d:58:31:6f:33:35:7e:84:f0:d7:1a:3c:9d:
d2:c0:0c:99:00:b6:35:61:0c:7a:a3:cc:e6:50:09:93:50:53:
d8:6e:b1:97:f2:44:f5:fa:c4:50:27:e1:a6:45:98:57:3a:60:
f5:4d:dc:8b:99:bb:74:92:e6:53:98:91:3f:eb:65:32:4b:ee:
c9:06:e9:fc:c4:10:ec:8c:9c:e0:cc:a6:a6:6e:b5:d8:a0:db:
40:74:89:53:51:22:57:4f:44:48:72:b6:da:d1:94:d6:2a:4d:
2d:f0:97:f1:3d:4a:4c:88:6e:10:6d:d8:84:23:61:bd:a0:f4:
eb:4e:0f:47:4c:7b:91:c5:c2:a5:98:ee:00:4f:f2:c1:62:6b:
61:b0:62:25:ce:bc:91:d1:c7:ba:91:d0:22:37:97:6b:73:47:
0c:1b:90:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:05:07 2025 by rpki-client