Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QXc6hR_cV_iSFWa-pNLL-Kr49S8.roa
File: QXc6hR_cV_iSFWa-pNLL-Kr49S8.roa (raw, json)
Hash identifier: dfaWWeEN/INfB/BNhrbhlgO2f8vJXEmvnXQmGxfoLUI=
Subject key identifier: 41:77:3A:85:1F:DC:57:F8:92:15:66:BE:A4:D2:CB:F8:AA:F8:F5:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A31F2F103F7E213B2808B92A588F5154D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QXc6hR_cV_iSFWa-pNLL-Kr49S8.roa
Signing time: Sat 26 Aug 2023 13:05:19 +0000
ROA not before: Sat 26 Aug 2023 13:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:31f2:1409/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:31:f2:f1:03:f7:e2:13:b2:80:8b:92:a5:88:f5:15:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 13:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41773a851fdc57f8921566bea4d2cbf8aaf8f52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:37:7b:3f:18:cb:5e:0b:d8:9d:ff:63:88:51:
8f:66:e8:97:0d:3f:df:10:d3:b5:bb:29:bb:4d:0b:
e3:0e:6d:e5:95:c9:94:ca:2d:ba:cf:42:ab:af:3a:
df:74:b3:96:3c:09:60:c9:fa:d3:14:48:de:ba:3f:
ab:f7:af:59:b8:2c:29:d1:34:aa:f3:a3:c8:ef:25:
78:f0:4c:3e:3a:5e:2d:65:b9:a4:3e:45:9b:a6:52:
82:3b:8f:6f:e6:89:74:3c:1e:24:4d:68:0f:e2:ec:
11:16:06:d3:68:52:a5:d6:d3:c3:2d:cb:d1:31:67:
29:38:a3:28:55:96:ec:7e:0a:64:68:1f:71:0e:57:
c9:f1:1f:e2:fd:6c:7f:54:1e:59:d1:71:07:38:d8:
9f:4e:2b:43:9a:25:bb:95:94:9b:86:54:36:6f:6f:
e8:00:99:85:e6:01:b7:54:fe:a2:af:69:00:59:45:
55:2e:b1:93:f0:95:6d:13:a6:a2:08:bc:6d:af:ed:
f8:a5:f9:9b:79:e5:0d:39:77:bc:f3:35:02:b6:ed:
6f:e4:99:01:fe:58:50:2c:3d:5c:d3:25:7d:9d:9b:
12:94:53:e9:7c:d1:f5:6f:7f:00:78:27:25:c5:f8:
15:80:4e:de:70:f9:33:3c:f1:27:64:7b:75:7b:5c:
6f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:77:3A:85:1F:DC:57:F8:92:15:66:BE:A4:D2:CB:F8:AA:F8:F5:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QXc6hR_cV_iSFWa-pNLL-Kr49S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:b7:ed:98:6c:1d:ce:f4:9f:c6:dd:ac:64:f1:20:58:8e:a8:
f3:3a:55:cd:33:60:56:5d:b5:20:01:2a:71:2b:95:06:93:f6:
2f:20:97:3d:cc:d5:26:57:58:4a:ae:f3:63:88:8a:2c:e6:38:
f1:55:8a:87:a8:a5:44:8a:df:45:37:0d:68:44:e7:cd:5a:a5:
fd:e1:25:71:a6:95:64:d0:67:ca:65:66:5d:45:20:24:25:d5:
7f:dd:e8:f5:42:c2:4f:63:2f:e2:e3:a2:8c:14:29:18:e8:8c:
98:91:46:e9:ab:99:f8:e7:5c:34:40:58:8a:69:02:30:41:2e:
1b:3b:d3:2b:24:8b:d3:64:03:12:97:4a:c0:ad:0b:4b:13:0b:
23:7a:dc:f7:ea:51:aa:83:a9:ba:14:7c:a7:41:10:06:df:7f:
fd:64:b5:26:58:b1:96:82:bd:60:0b:68:03:72:3c:ec:92:63:
95:07:2e:cc:82:5f:46:15:eb:f3:83:2f:85:a6:02:ae:e1:d5:
2b:5d:f2:9a:2e:80:50:66:18:44:39:26:c4:d9:eb:73:71:ce:
81:c7:f0:77:06:ac:97:b6:c4:0d:c3:e7:fd:c3:d4:ef:f4:1a:
81:66:96:cb:86:d8:65:a5:9b:82:1c:47:16:25:a1:85:52:42:
be:67:3a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:27 2025 by rpki-client