Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qixfl_lL_S6eKBpQL_CYhuIAfiI.roa
File: Qixfl_lL_S6eKBpQL_CYhuIAfiI.roa (raw, json)
Hash identifier: GPZSKl02EgTkKK1lsnJ9xbg0fsVGG6aHzGSiDitCsj4=
Subject key identifier: 42:2C:5F:97:F9:4B:FD:2E:9E:28:1A:50:2F:F0:98:86:E2:00:7E:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3C3EBE5E4F64062001051D4344EB488C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qixfl_lL_S6eKBpQL_CYhuIAfiI.roa
Signing time: Mon 28 Aug 2023 13:04:19 +0000
ROA not before: Mon 28 Aug 2023 13:04:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:3c3e:b57c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:3e:be:5e:4f:64:06:20:01:05:1d:43:44:eb:48:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 13:04:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=422c5f97f94bfd2e9e281a502ff09886e2007e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:7c:f8:18:04:15:e7:ad:17:ff:1e:6a:87:
ba:82:7a:1f:c7:8a:7f:ab:1d:99:be:70:4a:b5:3d:
30:b5:f8:e8:d3:63:13:ce:bd:63:ab:9a:86:21:0e:
4b:c7:fd:e9:48:c0:fa:f5:27:39:99:7b:45:34:64:
46:e3:f6:39:4c:ed:f0:93:39:43:32:d2:14:72:0a:
17:31:a3:eb:99:3a:6e:ce:45:db:d5:a1:1b:56:ad:
27:8a:f9:8c:43:e5:7f:4f:22:d7:82:fd:e7:16:35:
d8:ea:98:7c:27:78:32:46:00:f9:d6:2c:22:91:75:
1e:ac:0f:b1:5b:d1:f9:35:6e:b0:c5:a1:da:47:12:
54:cd:69:5e:ee:78:b8:42:e2:9b:bb:42:90:c5:53:
3c:bf:f6:1b:0b:d3:60:c0:ea:17:96:6e:56:f5:84:
fa:92:c7:87:76:43:56:f0:25:e7:79:ce:3d:98:20:
20:5f:0c:79:a7:67:ac:b1:d8:30:45:c6:6c:29:cf:
6c:dc:31:64:24:89:50:1f:9c:d0:5e:90:a7:64:16:
0d:23:13:6d:9a:56:e5:fb:b2:1a:4a:2f:33:d4:a3:
bd:b3:9c:13:74:55:d5:68:9c:41:0a:1e:f6:39:23:
4d:98:7f:cf:7c:df:52:f9:82:e0:78:46:fa:12:4c:
97:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2C:5F:97:F9:4B:FD:2E:9E:28:1A:50:2F:F0:98:86:E2:00:7E:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qixfl_lL_S6eKBpQL_CYhuIAfiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:22:d6:e3:10:16:41:89:7d:a2:19:39:68:79:49:38:c1:83:
5a:ba:66:6e:2c:2a:ed:18:d5:b5:a9:20:77:cf:c7:12:ee:81:
10:25:e1:a8:0d:25:74:2b:b8:bd:39:2b:e4:2b:38:15:a9:f4:
54:fa:54:a2:07:80:85:ab:8d:63:1b:47:99:bc:1e:43:38:fa:
65:06:b5:a1:cd:95:ce:86:89:2d:2b:58:ef:76:d3:b0:4d:c4:
b7:7a:36:65:d3:7a:5c:29:48:a2:04:1d:94:ae:ae:19:a1:38:
0a:fa:74:66:b4:a8:41:2e:54:a2:f0:3a:1d:7f:d5:5f:b4:4a:
3b:de:02:27:37:9f:13:22:a0:e5:4e:6d:8e:1e:f0:b1:70:20:
72:b4:c3:02:1d:ba:c2:a7:5c:56:f0:dd:5e:68:fa:84:8d:92:
ec:8f:5a:f2:a2:b3:c3:7a:ae:95:a0:c1:99:e4:22:c6:0b:f6:
00:50:fa:eb:cc:5f:05:14:71:f9:40:7b:6f:49:fe:ad:39:db:
b6:7d:af:07:e3:49:cd:be:b6:cc:55:de:40:8e:eb:c0:8d:00:
20:4e:bd:98:71:6f:14:4f:41:00:7e:14:a4:57:99:62:8a:ff:
8c:b7:a7:0f:48:85:bd:25:89:9e:aa:15:8f:ec:5d:ee:00:8d:
b9:3f:15:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:07 2025 by rpki-client