Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QJbhJlEtEGAmebwPpoCXKpa1iRo.roa
File: QJbhJlEtEGAmebwPpoCXKpa1iRo.roa (raw, json)
Hash identifier: Hm4wKEKBPButoFsLouXjS+HdC6jloKW2SdT6CX/ojjc=
Subject key identifier: 40:96:E1:26:51:2D:10:60:26:79:BC:0F:A6:80:97:2A:96:B5:89:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185B4ED4B68D1000FF7AA89256F216164E7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QJbhJlEtEGAmebwPpoCXKpa1iRo.roa
Signing time: Sun 15 Jan 2023 10:15:28 +0000
ROA not before: Sun 15 Jan 2023 10:15:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b4:ed:4b:68:d1:00:0f:f7:aa:89:25:6f:21:61:64:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 15 10:15:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4096e126512d10602679bc0fa680972a96b5891a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1c:b3:be:cf:db:a5:c7:f6:79:74:02:9b:ee:
0e:43:77:a4:ce:b5:b5:8c:62:1f:14:d2:92:e2:99:
fb:5c:69:b6:21:03:7f:2f:f9:e9:8f:d1:fe:d0:99:
82:64:62:f0:b1:83:13:d6:1d:c1:54:97:13:67:0d:
8c:79:c5:2e:55:5b:f2:0b:9d:57:5a:9c:6a:19:9f:
b0:29:4b:09:2f:5d:fe:2b:bc:28:ef:e6:01:ce:77:
41:8d:11:69:1c:c6:c2:cb:43:34:41:a8:c2:5f:af:
f7:96:01:a3:64:c9:51:36:48:95:03:e6:3d:9b:8b:
7f:a8:78:55:3f:35:b3:5c:01:20:ca:89:0d:3c:fd:
49:70:70:67:8e:02:67:34:81:c3:73:87:1d:af:72:
d2:00:f3:45:1c:87:dc:75:56:63:d6:06:2f:40:cb:
64:a7:aa:cc:4a:cd:9c:82:e6:f1:12:85:81:1e:a7:
a4:36:c0:2b:c3:e9:e9:64:07:57:90:d7:f3:bb:95:
20:86:57:75:15:64:88:2c:fd:73:da:10:f2:70:90:
e8:a4:f8:94:ea:3b:c8:de:49:f9:b8:6a:d5:1b:fa:
ac:79:c4:e0:e8:63:ff:fd:bb:d3:d1:d8:18:c1:9b:
62:5a:02:9d:1e:8c:0d:c4:72:e3:0d:28:43:8f:cd:
f3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:96:E1:26:51:2D:10:60:26:79:BC:0F:A6:80:97:2A:96:B5:89:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QJbhJlEtEGAmebwPpoCXKpa1iRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:4e:db:2c:db:50:21:a1:8c:dc:6f:84:f9:d8:8d:08:18:a7:
0e:5a:82:e6:7a:03:3f:76:55:da:28:b2:79:f7:ac:f8:50:b4:
27:6b:49:9b:66:ce:81:ba:ba:93:dd:55:82:7e:e3:29:82:e4:
8b:36:fc:d1:62:30:6e:63:b0:a3:4d:74:fe:92:b4:44:3e:4c:
87:43:63:45:8c:30:1c:9c:f0:55:ab:e3:80:05:15:00:02:2c:
d2:05:23:96:c2:50:bc:86:38:21:25:43:a2:1d:19:ca:02:61:
d4:34:f9:76:2d:66:0b:a5:b7:7a:42:b9:9e:bf:44:7a:a3:a5:
fa:32:c7:c6:dd:2d:b3:65:b1:16:2c:c7:31:45:06:28:f4:0c:
fa:35:08:c7:87:c8:99:73:c1:aa:d5:ab:3d:4b:d6:3d:c2:74:
90:77:a7:60:7a:ef:05:e2:ef:01:33:61:93:ae:42:d4:4c:1f:
ed:b6:14:6b:53:1c:8c:df:75:0d:b5:11:cf:a2:37:e9:17:5b:
d3:d0:e1:80:0f:f4:fc:9e:5e:cc:1f:e4:f3:69:b9:6a:f0:58:
0a:68:35:3a:6e:75:ed:e0:b7:5c:3c:ab:d6:63:5b:e0:a1:e6:
d5:eb:d0:ab:b0:9b:b9:d4:a8:ca:3e:f6:19:83:af:88:87:44:
2f:e5:fa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:27:11 2025 by rpki-client