Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QH9et4J2F9KUtC92gixe7zZzJ3g.roa
File: QH9et4J2F9KUtC92gixe7zZzJ3g.roa (raw, json)
Hash identifier: Wz3vEp/89n3srH6F9FnjxISXoZTACdftEiK1Xx8pGcY=
Subject key identifier: 40:7F:5E:B7:82:76:17:D2:94:B4:2F:76:82:2C:5E:EF:36:73:27:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186ED57014C81F8F2DBDB12C5132D37C3AC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QH9et4J2F9KUtC92gixe7zZzJ3g.roa
Signing time: Fri 17 Mar 2023 02:12:27 +0000
ROA not before: Fri 17 Mar 2023 02:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ed:57:01:4c:81:f8:f2:db:db:12:c5:13:2d:37:c3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 02:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=407f5eb7827617d294b42f76822c5eef36732778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:46:38:f6:61:9b:0b:1e:81:87:38:27:e1:e6:
7e:c4:9d:5d:b1:be:bd:93:82:d3:9f:8c:8e:97:d2:
28:af:1f:3a:b5:3d:ed:a4:5d:c5:30:32:8f:d3:af:
41:aa:90:8d:bb:1a:b8:65:ba:cc:03:b1:88:ba:fc:
14:03:c8:bb:00:66:78:46:e5:cb:a7:e8:0b:f9:fc:
83:7d:6f:0e:09:3b:c8:74:41:27:96:b2:f7:46:1a:
23:5c:4e:be:27:58:e2:91:d3:97:a4:f9:07:7e:b5:
57:99:e1:53:6f:18:45:e0:0e:e7:4a:a0:58:91:e5:
0b:6d:ee:0b:a7:2a:75:de:6d:30:e9:6b:12:d4:05:
9a:de:08:a6:f5:54:eb:e0:7d:fe:76:1d:6d:37:b9:
7e:13:03:82:d0:75:2f:dc:c0:5c:d5:a8:0a:98:96:
b7:12:cd:a6:5b:80:15:c5:0d:ad:76:68:b5:d8:7a:
24:80:55:97:5c:12:02:c7:26:1f:ca:ce:13:18:a2:
5b:a7:39:c8:29:b7:d9:0a:ee:e3:cf:d5:5b:b8:84:
66:b7:0f:3b:6c:21:28:91:89:e8:36:01:3c:77:48:
21:b2:a8:eb:72:f8:03:76:bb:13:db:ac:ce:ed:6a:
7d:e3:37:67:d9:0f:0a:1d:c6:22:97:03:62:be:cc:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7F:5E:B7:82:76:17:D2:94:B4:2F:76:82:2C:5E:EF:36:73:27:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QH9et4J2F9KUtC92gixe7zZzJ3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:e4:fd:b5:fb:e0:1a:75:96:94:04:26:6b:3d:84:0a:38:a3:
97:df:34:f1:46:71:f2:61:5c:49:0b:6a:9e:cb:6a:47:7d:7f:
f3:0e:2b:90:25:2a:9a:fa:92:76:09:16:c5:79:3c:fd:08:cb:
e8:53:d7:25:0e:ba:8c:07:57:67:59:16:94:05:48:c6:6d:17:
a6:4f:e8:a4:27:1d:50:e7:80:09:f6:55:49:b2:48:ee:83:2f:
0d:8d:d1:94:34:a7:9f:87:bb:95:2d:4e:01:4b:12:2e:21:54:
e9:10:e3:60:b5:f4:82:23:2c:87:22:73:88:ef:80:1c:9a:80:
82:34:05:ff:e0:f1:96:53:2f:37:be:fd:91:ec:74:d0:6f:3e:
a1:25:4a:46:f0:e5:b9:e2:36:63:64:12:3b:9b:d4:ea:96:85:
73:2a:ee:35:59:c4:5a:a4:98:88:63:e5:cd:34:de:bd:fc:a7:
42:be:21:d3:6d:80:a0:03:6d:2e:02:2a:f4:f8:5d:98:6c:3a:
d1:39:7f:3d:b0:66:f1:90:bb:9f:b3:62:0f:cf:00:5e:5d:43:
9b:d2:bb:c4:00:0f:11:d0:d2:14:2a:08:9e:fc:90:c5:8d:23:
ff:7e:8a:f3:0f:04:a0:7c:81:fe:5d:4c:dd:90:7d:30:65:66:
15:e6:b6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:12:10 2025 by rpki-client