Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q659DrHRAW-jyOWnkBZ891Vpk8s.roa
File: Q659DrHRAW-jyOWnkBZ891Vpk8s.roa (raw, json)
Hash identifier: Zv51n0I+7fXht/CUqpDMbuI+ap5ip2m4aUuapGHUlDA=
Subject key identifier: 43:AE:7D:0E:B1:D1:01:6F:A3:C8:E5:A7:90:16:7C:F7:55:69:93:CB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2828264576EA1769D967C8F5AADFCADA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q659DrHRAW-jyOWnkBZ891Vpk8s.roa
Signing time: Thu 24 Aug 2023 15:27:14 +0000
ROA not before: Thu 24 Aug 2023 15:27:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:2827:387e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:28:28:26:45:76:ea:17:69:d9:67:c8:f5:aa:df:ca:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 15:27:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43ae7d0eb1d1016fa3c8e5a790167cf7556993cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:67:ed:fa:32:2b:6a:9b:f6:1a:2a:b5:5a:66:
1d:c1:4a:a5:16:67:00:1f:a1:2f:8f:84:a4:a7:c3:
13:3f:85:49:5f:02:c5:89:3d:d6:b4:c3:34:1f:6b:
32:a9:ba:9e:6d:2d:49:7e:2b:88:e4:c4:fd:65:e8:
7f:2e:43:21:9b:0f:88:09:e0:58:c0:85:38:a4:a4:
c3:b4:b9:d9:60:81:2f:e4:c7:b1:9b:14:29:33:ce:
e5:e3:21:69:4e:e7:dd:5d:a2:88:31:23:61:ac:44:
db:64:af:c2:e1:b2:39:2c:83:2c:a0:4a:2b:b4:13:
7a:d7:37:97:90:c4:e2:84:dd:a8:bb:a8:73:78:3b:
d0:75:9e:95:b3:63:09:41:1b:d8:e9:49:bd:24:b5:
71:07:42:ca:c2:e8:c2:7d:f9:ac:a0:63:77:f3:8e:
aa:f1:56:aa:81:ee:1d:e0:df:82:25:74:da:40:be:
36:12:35:0a:ad:03:9c:9b:b0:01:b8:73:22:3d:87:
85:10:e5:8e:b3:49:d4:45:36:d4:f0:cf:d0:04:b6:
35:68:5f:10:f9:0c:2a:31:1a:1a:eb:b9:a2:7a:27:
51:e9:0b:48:08:45:9e:15:86:e4:d2:ed:08:bc:84:
46:db:d3:4a:7a:b0:5b:8c:26:f9:cd:12:d2:58:33:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AE:7D:0E:B1:D1:01:6F:A3:C8:E5:A7:90:16:7C:F7:55:69:93:CB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q659DrHRAW-jyOWnkBZ891Vpk8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:28:11:6c:c1:b0:c4:f4:4f:45:d7:f2:70:36:71:12:86:16:
36:a7:d6:32:0f:32:69:6e:1a:ed:62:17:92:3a:9e:08:ed:89:
e5:90:4d:94:28:f0:6c:03:c7:aa:56:2f:8a:71:ba:e9:48:39:
3b:dd:ae:d0:3c:c8:fc:a4:e1:c1:fa:b5:1a:d1:70:dd:19:b4:
5b:7c:6e:5d:80:ea:bd:92:87:ff:ef:7f:90:0c:77:dd:7f:f0:
6a:25:e5:1e:84:e2:17:e3:15:36:e4:f7:4f:e2:f7:8a:81:af:
2a:57:b6:de:a6:ef:1a:36:ce:77:b7:4a:d4:82:6b:6f:c3:90:
ad:c4:3f:c7:be:78:99:e6:e4:a6:10:1d:3a:88:57:de:cc:03:
77:e5:c9:bd:2c:b6:a5:16:24:33:5f:cc:a4:01:97:95:20:d0:
4e:23:0c:e9:65:1d:a7:04:7c:20:f3:7c:10:f2:6a:25:be:64:
fa:bc:0f:a2:fe:97:93:dd:9f:ea:46:f2:62:86:55:e4:23:92:
9e:87:80:b4:a1:26:35:07:99:a7:c1:39:b4:a4:5a:c1:69:94:
b6:b2:ba:ba:43:c0:d3:ff:11:ab:cc:9b:7e:8f:86:b4:e9:be:
43:d6:92:ba:af:76:17:d1:09:f5:a0:bc:64:fb:fe:02:26:02:
4b:26:f5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:58:17 2025 by rpki-client