Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QlRAwdpFkv8v-NKVgrSqVdxvjPM.roa
File: QlRAwdpFkv8v-NKVgrSqVdxvjPM.roa (raw, json)
Hash identifier: IiLCNog+ORHt+IzqtoKvHDd1Pz+0toDKK4JtGKLeObA=
Subject key identifier: 42:54:40:C1:DA:45:92:FF:2F:F8:D2:95:82:B4:AA:55:DC:6F:8C:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185221E16EC20978922AA8FCECF722EB160
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QlRAwdpFkv8v-NKVgrSqVdxvjPM.roa
Signing time: Sat 17 Dec 2022 22:04:35 +0000
ROA not before: Sat 17 Dec 2022 22:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:221d:ad7f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:22:1e:16:ec:20:97:89:22:aa:8f:ce:cf:72:2e:b1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 22:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=425440c1da4592ff2ff8d29582b4aa55dc6f8cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1f:70:5b:a4:51:ed:5c:a6:0d:7d:e5:81:49:
65:bf:ec:88:29:8f:b7:93:a1:8e:37:08:b3:92:7c:
32:6f:ec:b7:30:42:87:43:97:cd:12:3f:00:6e:ef:
73:03:92:b1:cb:73:f7:a4:04:84:2a:6e:63:e6:39:
da:62:5c:5f:33:b3:18:1e:85:00:15:d0:42:d4:06:
63:46:fe:2a:c3:94:2b:34:67:85:54:a5:ab:cc:36:
21:22:77:2f:6d:68:3d:ac:4c:44:00:d6:f9:00:98:
a3:4a:9b:e4:ab:50:5c:28:8a:7c:64:0c:1f:dd:d6:
79:9f:fa:60:1b:e4:96:f7:a3:01:79:03:35:1e:76:
fd:ad:ad:08:16:d2:bb:1f:57:56:97:d2:52:14:5f:
30:92:b5:4e:da:8b:9e:e2:ca:c3:cd:c9:fb:8f:fc:
bc:0d:b1:52:32:57:01:c1:b0:9a:7a:90:c1:d3:54:
45:46:ce:7c:7b:bd:37:69:68:09:5b:1a:f7:77:5f:
bb:52:87:44:c0:5d:e3:6e:49:70:50:9a:5b:80:6a:
ab:20:e1:be:6e:bd:ca:64:62:26:61:e5:df:41:eb:
f4:2c:27:43:5e:93:ab:c8:a4:bf:01:a7:0e:fa:a7:
5b:5a:ff:b2:85:37:0e:86:0f:48:a3:f5:64:33:75:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:54:40:C1:DA:45:92:FF:2F:F8:D2:95:82:B4:AA:55:DC:6F:8C:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QlRAwdpFkv8v-NKVgrSqVdxvjPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:88:06:57:cb:7e:9a:31:58:69:c8:c3:fb:e4:a8:53:d2:3a:
cd:32:2a:f1:ea:b5:6b:77:79:e9:ee:48:07:84:b0:90:de:dd:
96:45:91:fe:ab:e2:83:1f:fb:6e:d0:58:ec:2a:0c:9d:6a:7c:
4c:4c:de:56:96:59:6f:8c:ca:8a:c0:b9:75:e5:76:09:db:4c:
77:bd:79:75:4e:f4:7d:07:4a:6c:d7:f1:32:eb:24:f3:05:27:
37:f2:7b:0b:a8:d4:de:90:bf:94:d1:61:c5:0b:76:94:00:05:
4e:0f:c1:d4:ec:77:0e:42:cf:bd:1f:f8:10:2e:d1:c1:78:19:
4a:57:51:eb:ea:ca:57:45:fc:ab:96:e9:91:ad:b5:5e:bf:13:
b6:8d:fa:c1:2c:c8:54:d6:69:84:c5:49:28:78:40:17:f3:be:
8e:bc:32:45:f7:d5:40:40:21:1a:18:dc:10:26:11:18:69:b6:
28:7e:f0:66:35:50:47:b3:19:fb:c0:53:29:d3:26:ac:af:dc:
1f:e2:2b:5b:76:ff:39:95:f1:02:49:6c:a9:db:6d:01:49:10:
4e:41:ab:43:25:d3:35:f5:27:c6:fe:52:23:d7:c3:06:ae:e4:
3d:ab:64:64:b5:e2:de:fe:13:2c:4b:48:82:e3:cf:9c:ce:e6:
42:06:f4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:53 2025 by rpki-client