Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QwN7WDTRMT4EHuPvF8_RRTtFB8E.roa
File: QwN7WDTRMT4EHuPvF8_RRTtFB8E.roa (raw, json)
Hash identifier: l1IrNimqkh+E+bHdDOi2iJ5sbHhD40xwGY0mixldfZA=
Subject key identifier: 43:03:7B:58:34:D1:31:3E:04:1E:E3:EF:17:CF:D1:45:3B:45:07:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A14FA57D05ABBA13D14868F6160529EA9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QwN7WDTRMT4EHuPvF8_RRTtFB8E.roa
Signing time: Sun 20 Aug 2023 22:04:25 +0000
ROA not before: Sun 20 Aug 2023 22:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:14fa:4b2f/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:14:fa:57:d0:5a:bb:a1:3d:14:86:8f:61:60:52:9e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 22:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43037b5834d1313e041ee3ef17cfd1453b4507c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:59:0e:96:e1:ba:d4:34:7a:1f:d1:ab:ae:32:
e2:c2:8f:dc:ab:67:56:f1:ba:59:5e:94:45:7e:ee:
ae:46:48:67:2f:38:32:08:b8:ad:a8:79:f1:00:cb:
02:56:0f:29:e4:4a:41:ab:d4:c6:fa:5a:70:56:ca:
c9:43:e3:74:d1:b2:b5:c3:12:f6:32:2b:a7:aa:d0:
0b:cb:db:fe:80:f3:69:a3:6f:96:bb:60:51:38:87:
99:ab:4c:b5:96:8a:de:8f:78:0c:db:e4:49:a0:f8:
0d:53:04:4a:8a:48:7d:69:ab:6c:83:be:9c:d7:85:
5f:7d:44:55:73:14:7d:88:e1:03:ca:a8:fe:01:04:
c3:c3:58:74:57:1f:77:b1:40:79:ab:b5:f2:2c:2f:
76:21:da:b5:1f:1e:11:04:f5:1b:0e:7f:7a:1b:5a:
e5:d9:ff:61:df:40:8d:00:dd:32:41:a5:01:ca:12:
d0:ba:4c:41:59:7a:a6:ba:f0:06:f9:ab:c9:5f:78:
d9:74:40:1f:77:62:ae:68:64:ea:3b:d8:b1:23:19:
4a:66:44:b0:35:1c:c2:4e:f8:35:91:7c:f4:b7:84:
9f:8a:93:05:f3:95:50:80:3f:4f:79:cf:c7:68:e1:
55:f4:85:e7:9f:02:d9:1a:be:66:06:c4:78:02:43:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:03:7B:58:34:D1:31:3E:04:1E:E3:EF:17:CF:D1:45:3B:45:07:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QwN7WDTRMT4EHuPvF8_RRTtFB8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:3f:fb:b5:cd:85:b1:36:10:9e:9b:86:c9:f0:02:62:fb:1d:
cc:e2:54:8d:72:e2:10:52:72:40:03:5b:b0:81:b5:8f:34:d0:
38:e3:68:42:06:e2:2f:17:d0:e0:6a:b1:70:95:66:78:fb:af:
30:f1:7a:98:dc:67:03:ea:c7:59:d8:a0:d1:96:51:68:09:48:
77:06:6b:17:d1:73:54:e4:1f:f6:64:67:aa:3c:b8:d1:c4:ab:
83:70:8b:74:05:98:02:53:fd:ac:90:ed:2a:2a:9b:ef:a1:8a:
7c:5c:aa:0f:d5:03:f2:6f:77:55:97:5e:91:09:5f:d2:c9:b6:
b7:1e:2b:87:9a:cc:12:c3:0a:77:33:e3:66:80:21:47:fd:33:
e7:b7:3f:7f:81:77:4a:3f:45:3b:f2:02:97:32:0c:dc:8f:01:
00:19:49:c1:66:da:64:8a:87:19:ef:89:7f:09:1a:fe:84:97:
82:13:53:0f:de:95:fb:47:f5:57:d6:40:3e:a3:2c:c1:4f:6b:
55:94:ea:5a:56:a1:cc:37:4f:60:6f:79:a4:4e:11:e4:6a:2d:
eb:13:8c:7d:78:5a:4a:38:4e:0e:b5:67:46:7c:67:16:c0:75:
c6:30:fe:17:9e:f1:29:d0:e9:8e:b2:8c:3b:69:bc:5e:c5:d7:
f2:64:60:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:00:38 2025 by rpki-client