Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q75P7Wqrjt0zV7QouP-AjWxE-fI.roa
File: Q75P7Wqrjt0zV7QouP-AjWxE-fI.roa (raw, json)
Hash identifier: ncLzFQoBwDBYBiTpSqsr2Zq6CvXp44Zh7OrJ15mccE4=
Subject key identifier: 43:BE:4F:ED:6A:AB:8E:DD:33:57:B4:28:B8:FF:80:8D:6C:44:F9:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BF9A75E4EA5A1FED2E7CFBAF0B84FB20
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q75P7Wqrjt0zV7QouP-AjWxE-fI.roa
Signing time: Fri 04 Aug 2023 08:11:58 +0000
ROA not before: Fri 04 Aug 2023 08:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bf:9a:75:e4:ea:5a:1f:ed:2e:7c:fb:af:0b:84:fb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 08:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43be4fed6aab8edd3357b428b8ff808d6c44f9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fa:7b:21:c9:99:27:31:d8:c8:ef:8a:8f:22:
f7:6e:b6:7d:fd:55:bf:f2:c3:78:f9:b5:8c:36:cb:
27:46:1d:27:e2:8a:7a:ac:df:50:f5:39:73:22:a3:
32:64:60:bd:80:a5:b3:77:68:69:a3:ba:e5:b3:24:
c0:4c:df:67:d3:05:db:1d:87:62:6f:72:f0:99:12:
c9:17:fc:11:83:ec:d6:47:ba:38:1e:74:e3:24:b0:
44:e8:91:d9:0f:1f:78:9f:0b:9c:f5:89:49:98:b0:
c7:dc:bb:98:ac:f8:a2:cc:d3:2c:b5:40:36:73:3c:
8c:32:83:c8:e1:58:36:8c:12:32:a1:38:c1:72:49:
c3:48:2e:e8:73:27:3a:63:40:34:0c:51:c2:dc:1b:
d5:ce:65:71:9b:ba:07:1a:79:0e:f5:78:85:1f:28:
76:7f:84:56:2c:07:bc:d8:5a:77:87:b7:93:d9:30:
7f:3a:7a:7d:7b:16:b2:54:a2:d7:7e:6f:22:a3:cf:
1f:e9:ff:6b:f0:63:e5:48:88:e4:0a:c6:99:8b:9c:
59:50:ee:c9:f7:a5:a8:74:57:15:fb:b3:ae:d4:7c:
45:1d:ab:6b:03:d5:fd:24:2c:3d:d3:e4:ef:6a:0f:
bf:10:8a:07:99:ba:93:34:72:20:02:0c:7b:48:26:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BE:4F:ED:6A:AB:8E:DD:33:57:B4:28:B8:FF:80:8D:6C:44:F9:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q75P7Wqrjt0zV7QouP-AjWxE-fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:08:6c:be:d7:8f:78:00:08:c0:ca:dd:63:fe:df:cb:0c:6e:
ad:a7:de:8a:0f:18:e1:99:9f:82:5d:1b:5e:d4:61:8a:f5:95:
ff:0c:00:a9:cf:bd:ba:fd:84:ed:8e:be:a4:d6:d6:8e:de:ac:
b3:7d:be:84:b8:3f:46:ec:1f:2e:32:a1:bc:b6:d5:e2:a7:95:
de:22:95:18:71:3e:75:82:2b:e9:8e:b6:3e:73:2c:fd:e3:12:
bc:97:41:76:5a:d4:a1:5c:89:d6:cd:6e:71:9e:4e:8b:61:d6:
2e:5a:6c:70:55:5d:5a:4d:7c:86:e8:e7:93:96:32:18:43:0b:
c1:08:c1:ca:20:af:ae:d5:93:ed:c3:91:b4:31:9b:5f:af:12:
32:11:61:9d:43:7a:55:53:9c:18:55:ae:d7:63:0d:50:63:1d:
71:2d:02:54:2e:78:62:27:9d:db:41:2a:11:37:9d:23:c0:a2:
e6:ce:00:b2:40:d7:e5:7c:89:90:3f:c2:85:d7:71:93:c3:8f:
1c:a7:8e:f5:0e:c7:00:6a:b2:5d:05:20:3c:11:66:e3:fa:65:
2b:39:1b:f2:8a:eb:fc:d7:31:2d:ea:4f:9d:b8:5e:26:99:ad:
3e:69:ad:31:da:d2:f7:54:3a:ee:41:b8:6f:08:38:24:05:8f:
ae:75:14:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:15:52 2025 by rpki-client