Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QxxbtKXcCkEL1m1ghciOJk1CZgk.roa
File: QxxbtKXcCkEL1m1ghciOJk1CZgk.roa (raw, json)
Hash identifier: w6cXzJx7GK8LmhCmv3C/5jzcS4gp/hDM0lSi0TrIYZk=
Subject key identifier: 43:1C:5B:B4:A5:DC:0A:41:0B:D6:6D:60:85:C8:8E:26:4D:42:66:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018716551304B9557DE496F8E65227FB974D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QxxbtKXcCkEL1m1ghciOJk1CZgk.roa
Signing time: Sat 25 Mar 2023 01:14:46 +0000
ROA not before: Sat 25 Mar 2023 01:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:16:55:13:04:b9:55:7d:e4:96:f8:e6:52:27:fb:97:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 25 01:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=431c5bb4a5dc0a410bd66d6085c88e264d426609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:af:bb:82:5d:c9:dd:5a:d6:19:77:e4:1d:
2d:5c:08:7a:97:9b:74:ad:17:43:5c:30:a6:37:f7:
48:23:2a:c1:ba:cd:b3:25:29:f2:ba:17:5c:25:52:
7f:b4:ff:a3:5d:40:b9:c3:79:55:92:3a:e3:1c:67:
f8:2b:98:3b:70:bb:fc:67:f6:03:37:76:c0:04:34:
86:e6:16:e5:ac:74:ab:12:1e:00:cb:86:fd:c8:33:
45:31:f6:a9:51:9c:94:3c:9e:29:d5:b6:a1:a1:a6:
92:0b:91:86:30:e9:64:99:af:cb:1b:e8:02:7d:bf:
34:fc:69:97:5d:fa:92:e6:10:80:54:3d:31:96:2b:
36:20:ba:1d:1c:0f:17:ed:06:87:34:05:20:89:15:
2b:9a:b2:9d:56:75:75:21:99:e5:47:01:e4:58:ae:
9d:5b:ec:90:f1:02:d3:33:c3:ec:21:39:d7:53:fa:
81:85:e2:6f:2e:33:24:54:c5:6c:75:66:ba:ac:4b:
88:84:c3:01:18:e3:04:70:67:fd:dc:fe:75:a7:cf:
c6:7d:7e:e9:57:97:05:00:77:06:67:b0:b1:f1:90:
c6:b4:db:04:09:f0:7b:7c:ed:f0:84:4f:e2:4f:71:
f0:60:06:76:8e:11:af:de:aa:f3:e9:c3:9c:d2:fc:
73:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1C:5B:B4:A5:DC:0A:41:0B:D6:6D:60:85:C8:8E:26:4D:42:66:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QxxbtKXcCkEL1m1ghciOJk1CZgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:25:e2:07:e4:56:7a:bb:32:60:c4:67:0a:d4:a1:50:77:51:
d5:05:d7:b1:60:f7:90:c3:fa:45:e1:04:93:05:c6:12:ff:c5:
16:25:95:c7:06:0d:3c:13:cf:80:f0:fc:49:b5:ca:43:6d:9f:
38:0c:55:f9:0a:ac:b6:55:23:eb:ea:ca:22:93:25:02:38:3a:
89:16:06:65:a2:a7:aa:cd:fc:ad:e6:32:22:3a:45:2f:5c:46:
ab:c1:ab:2d:8c:94:12:04:9c:79:b0:09:f3:36:39:72:7e:ff:
79:4d:a0:fa:6d:5b:96:bd:29:83:2e:b4:1f:05:3a:a1:fb:2f:
fd:1c:f8:3b:ff:09:8a:12:84:eb:2f:a2:2d:6a:19:77:c4:23:
23:20:79:46:ad:40:76:94:01:41:1f:68:cb:16:0c:d9:c1:86:
a7:6a:93:f8:23:cf:f0:78:b3:ef:ed:c6:cb:36:73:16:74:93:
e2:bf:be:89:2c:69:39:d6:80:14:87:07:f6:55:92:1a:7e:76:
61:5c:dc:df:cd:ec:38:0f:50:88:4f:69:da:f1:66:de:dd:b7:
03:00:8d:32:1f:cb:e8:c1:10:2e:6b:c5:e5:b8:6a:6c:52:d0:
df:63:37:9b:52:4f:c5:dd:4a:9f:93:1f:a5:38:32:31:3c:e1:
fb:48:a4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 15:52:22 2025 by rpki-client