Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qfe4Oon6pseZWqYuXQEjasZIVg8.roa
File: Qfe4Oon6pseZWqYuXQEjasZIVg8.roa (raw, json)
Hash identifier: oldhbCq8o8RqQo9ltUCzAr8gTepoi27VH94OBuY7QCU=
Subject key identifier: 41:F7:B8:3A:89:FA:A6:C7:99:5A:A6:2E:5D:01:23:6A:C6:48:56:0F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018643CC4DA4BE7865DC235F573D8D1FE4BD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qfe4Oon6pseZWqYuXQEjasZIVg8.roa
Signing time: Sun 12 Feb 2023 04:05:08 +0000
ROA not before: Sun 12 Feb 2023 04:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:43cb:db22/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:43:cc:4d:a4:be:78:65:dc:23:5f:57:3d:8d:1f:e4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 04:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41f7b83a89faa6c7995aa62e5d01236ac648560f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a3:12:ca:9a:c6:6f:c0:57:eb:8a:3e:cf:e3:
5c:70:d8:58:61:ec:cd:b0:35:4f:ba:bd:5c:55:93:
fb:30:f6:18:6a:c3:ca:e2:df:35:2d:8e:98:8f:03:
62:93:8f:24:1b:8a:92:87:c2:ea:f5:1c:ee:ec:86:
48:bb:c8:bf:ae:e1:f4:43:56:44:2d:74:eb:b2:ce:
98:03:14:d3:a5:b2:d7:ec:e0:92:41:9c:92:72:3f:
cb:d2:6e:a5:9a:e4:bc:7b:f9:82:f3:ff:c0:a9:a1:
e2:55:cc:58:88:75:cb:f9:fe:1a:0c:14:01:77:97:
3a:9c:07:d2:1c:59:31:f3:e3:fb:4a:06:7e:fe:57:
57:a7:44:8c:54:44:b2:4e:68:24:2e:07:fa:df:40:
0e:50:12:03:2a:48:96:2f:56:5d:6e:3d:32:b9:a4:
fe:63:aa:57:16:b9:c7:4a:e5:a5:d4:87:a1:39:fe:
08:71:68:19:63:e7:2a:67:7f:e1:49:20:35:25:17:
7c:4b:47:4c:0f:45:3a:72:5a:33:0a:6b:b9:e7:f2:
b7:7c:32:d8:0b:ab:a1:23:0a:08:ce:b5:3d:8f:1b:
d3:8a:6e:b5:53:85:42:fc:b7:08:e2:a0:32:73:eb:
53:2c:63:95:7a:8d:0f:d4:bf:5e:25:2a:c9:cc:07:
f6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F7:B8:3A:89:FA:A6:C7:99:5A:A6:2E:5D:01:23:6A:C6:48:56:0F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qfe4Oon6pseZWqYuXQEjasZIVg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:f4:4a:d3:ca:9f:1b:72:03:cf:a8:44:98:36:3d:19:14:8d:
7b:a0:dc:36:73:bc:a7:cf:38:54:e1:eb:dd:a4:90:8a:90:8f:
98:cd:98:27:7d:b7:4c:8a:f5:81:1f:5f:f6:1c:a6:45:8d:3a:
ac:4c:6e:84:20:65:82:2d:d7:e0:5d:dc:da:68:f0:fa:8f:0d:
91:6f:c2:64:cf:f8:d3:de:a3:7d:6f:7c:f5:31:18:c2:d2:a6:
bd:cd:ad:ee:2a:df:11:03:35:bf:6b:c3:ba:c1:1e:da:4e:bc:
54:51:be:f3:9e:22:10:70:20:b4:ee:6e:a8:1f:dd:1c:ad:52:
a8:b3:2f:e8:f0:6f:5e:db:c7:e5:34:94:1c:8d:bf:4b:d9:1f:
14:e3:02:ff:0f:de:dd:79:e5:db:95:e0:ba:09:29:23:1a:a0:
e7:40:ea:cb:19:f1:4e:ce:36:b4:af:a3:8c:3d:ba:f3:09:c9:
c4:eb:24:0a:51:40:5b:20:44:05:68:d6:7c:f5:20:e8:a5:a0:
e9:c4:73:0f:90:f3:33:09:81:e2:f3:93:21:c7:2f:01:3b:0b:
12:16:e8:3d:1c:ba:96:a4:97:8e:b7:fa:b8:9e:69:aa:d6:a9:
08:c0:91:ef:bf:6a:5c:3a:f6:f4:d1:be:20:bb:a0:2e:4c:a2:
7e:73:b6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:56:46 2025 by rpki-client