Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q93NQiafuqIuYiiUVT64MdusluY.roa
File: Q93NQiafuqIuYiiUVT64MdusluY.roa (raw, json)
Hash identifier: qbi8n7Ia2faYprOxkTdSaIrO0SFa+d7afsJNSv5dLAY=
Subject key identifier: 43:DD:CD:42:26:9F:BA:A2:2E:62:28:94:55:3E:B8:31:DB:AC:96:E6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E1FDAE3A68A838F6590AC4E8D3967917
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q93NQiafuqIuYiiUVT64MdusluY.roa
Signing time: Mon 05 Dec 2022 11:13:29 +0000
ROA not before: Mon 05 Dec 2022 11:13:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e1:fd:ae:3a:68:a8:38:f6:59:0a:c4:e8:d3:96:79:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 11:13:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43ddcd42269fbaa22e622894553eb831dbac96e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:e5:69:b2:6f:5e:a8:45:ce:c7:49:df:a0:
69:1c:77:90:94:0d:60:3e:e2:d3:23:60:18:3f:27:
d4:9a:4d:ee:3e:e7:67:1d:20:6a:d2:6e:74:50:ec:
fe:e3:fa:ac:28:22:48:ad:de:46:ea:33:2f:a1:e2:
0a:9e:1c:2b:b0:3b:da:ac:84:c9:7a:8e:f9:bc:b2:
ee:c2:d2:54:2a:a7:6c:22:65:a5:dd:2c:eb:99:e5:
bd:3f:2f:36:4c:ed:19:07:75:ac:27:3b:31:f8:04:
75:24:9a:93:d6:e2:5a:d1:b8:0b:8b:05:bb:41:3d:
24:b3:72:a1:8a:1f:3a:9d:76:e0:ec:fb:9c:06:4e:
48:c3:44:5c:d4:38:24:3a:e4:f3:f5:3a:ce:aa:fc:
a1:19:cf:8f:6d:ed:09:42:4a:74:cf:cb:65:10:0f:
dd:67:79:a8:12:57:c7:60:51:83:ae:74:a4:92:54:
52:5a:1a:c6:77:c2:7a:5b:14:83:b6:8f:f5:da:5d:
87:e7:38:48:f7:a7:47:ed:43:0e:29:b9:87:83:21:
bc:c9:26:66:ff:c4:57:79:6f:3a:c5:78:1d:0f:7a:
6d:db:9d:48:5f:40:b6:9a:8b:8e:41:b3:41:0a:5c:
08:fc:d4:07:4e:06:15:08:97:bc:39:91:bd:29:00:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DD:CD:42:26:9F:BA:A2:2E:62:28:94:55:3E:B8:31:DB:AC:96:E6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q93NQiafuqIuYiiUVT64MdusluY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:3c:c2:95:99:80:80:c1:df:6d:06:e9:0d:37:15:e1:49:73:
98:a8:59:70:e1:2a:c4:9c:ba:fb:96:d4:6a:12:fb:f5:4c:6a:
94:c8:fa:c9:37:b1:a1:e7:cd:5e:2b:b0:79:c7:d4:90:c9:7a:
8e:4e:f2:de:4c:09:de:66:24:1a:f8:85:e7:50:ea:68:45:fb:
52:07:64:eb:16:ac:df:ea:36:c6:2a:31:3a:88:01:1d:5a:8b:
59:85:2a:84:3a:a9:1c:89:c2:c4:bd:a5:fe:87:ea:f2:9d:ea:
d5:1d:74:c8:bd:35:50:ad:74:13:c8:5f:68:00:86:70:d0:54:
49:2c:77:41:16:60:02:31:42:a0:7f:4a:c6:66:50:06:c2:9a:
50:a6:5c:a9:fb:31:a2:10:0b:27:1c:d8:8c:07:e4:1b:67:27:
09:dc:bf:0d:9c:b6:de:53:07:52:7f:f6:ab:cd:17:24:2d:1b:
20:60:d3:78:e3:19:41:71:b0:40:df:d5:5b:9c:f2:19:ff:a3:
3d:93:73:9f:75:a5:d8:60:75:9e:84:c8:7b:ad:08:f5:3a:ab:
92:9f:56:4c:60:e3:9d:5a:82:2f:35:87:b8:7f:e2:29:56:44:
f7:4a:92:86:4b:d2:66:5e:26:40:89:23:c8:34:a5:43:34:67:
bb:62:1f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 06:10:03 2025 by rpki-client