Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q9WezYVQA4CouVuOnGNoKUVF6tc.roa
File: Q9WezYVQA4CouVuOnGNoKUVF6tc.roa (raw, json)
Hash identifier: Qt8kFb37OlY0z92dPXHLa7zEG+q9EmlLI2VtiWDVnYk=
Subject key identifier: 43:D5:9E:CD:85:50:03:80:A8:B9:5B:8E:9C:63:68:29:45:45:EA:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FB3A970405AC19AD3B63A4F31D525FCD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q9WezYVQA4CouVuOnGNoKUVF6tc.roa
Signing time: Tue 15 Aug 2023 22:04:28 +0000
ROA not before: Tue 15 Aug 2023 22:04:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:fb3a:5d0c/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fb:3a:97:04:05:ac:19:ad:3b:63:a4:f3:1d:52:5f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 22:04:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43d59ecd85500380a8b95b8e9c6368294545ead7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f8:ff:73:37:f2:49:be:b8:0a:1c:d3:8e:b5:
f4:40:51:8f:c4:82:8d:25:de:ea:54:0f:db:51:15:
88:9c:58:2e:3c:17:4f:e9:67:1c:54:75:bb:53:b0:
f4:34:dd:df:4e:d5:db:18:97:00:62:4c:20:e3:13:
6b:e3:74:f6:5a:fb:3a:63:c9:ba:d6:94:69:0f:2d:
04:43:b4:29:49:0a:da:41:6f:2b:77:30:a2:a3:e7:
98:7e:0e:d3:32:f3:5a:fb:18:15:72:95:91:ff:28:
54:c8:b3:e8:7a:19:08:d3:16:1e:33:9c:c0:f5:fa:
37:17:3a:bc:e8:e3:a0:7e:77:7b:94:1c:cc:2c:f6:
bb:77:bf:0a:5d:b9:c8:fd:e0:3f:7a:72:f1:9f:19:
55:9f:8d:c5:58:1b:72:c1:cb:03:9c:30:56:9c:74:
0d:5b:c1:3d:48:e6:d6:5b:98:76:46:f8:47:e2:f7:
7f:1b:4c:56:ac:e5:69:e3:c2:ab:8a:36:7b:dd:94:
17:7a:c5:8b:2f:ec:4e:d1:9a:57:5b:68:f9:ca:11:
93:0c:a0:7f:51:15:de:4c:9a:d6:dc:6a:dd:9b:15:
46:a8:0f:13:bd:9f:14:ee:a0:87:2e:bc:eb:87:b2:
da:c3:4b:c5:ce:d9:41:fc:fc:ad:d2:e6:f0:2a:30:
9d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D5:9E:CD:85:50:03:80:A8:B9:5B:8E:9C:63:68:29:45:45:EA:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q9WezYVQA4CouVuOnGNoKUVF6tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:f4:a6:43:4e:3a:3a:3e:c3:76:13:68:c9:6a:8c:85:5c:e3:
4a:9a:f9:47:4d:2b:ca:7a:fa:64:9e:a3:71:40:71:10:1a:13:
38:7c:ad:f9:07:04:ee:fc:b1:13:d0:37:5d:97:84:b5:9c:e7:
fd:21:93:b2:30:15:ee:90:3c:d0:dd:bd:a8:25:44:56:49:52:
38:3a:a6:b7:4e:8b:05:c7:75:6b:d0:41:38:6b:dc:a3:cf:78:
c8:3d:2d:c9:9b:d1:de:3e:02:5e:8b:ec:69:ca:9f:be:62:ea:
f3:1f:1e:02:11:6b:7e:24:b9:4e:fc:79:2e:76:92:45:e9:c2:
a2:f9:de:47:e3:69:39:73:40:64:09:c5:49:36:b7:cf:d3:a4:
55:f7:56:84:2c:49:b7:cc:18:6f:3c:2d:17:36:6c:6a:de:10:
8c:10:69:3d:cd:c5:c9:4f:d3:d2:ad:59:ca:95:5d:43:62:b9:
21:ef:7a:3a:71:4d:b8:d2:b8:50:21:bc:14:cd:e7:9b:ef:81:
97:b0:e2:fd:b7:47:29:65:d7:6e:11:b1:a7:bc:34:11:93:1d:
9d:2d:85:0a:ea:d1:38:0b:0e:95:e2:fc:92:d0:37:f0:92:02:
bb:8a:a9:be:f5:7b:ec:cc:88:78:69:4d:90:9f:1d:98:37:2a:
19:0a:01:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:01:54 2025 by rpki-client