Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qy1sHK8LFBJzwqKsRNxwSIKYy3A.roa
File: Qy1sHK8LFBJzwqKsRNxwSIKYy3A.roa (raw, json)
Hash identifier: MoZ2HC+UQKjXrXqNnC4acSfrmxZndJyj95A51ZcpEck=
Subject key identifier: 43:2D:6C:1C:AF:0B:14:12:73:C2:A2:AC:44:DC:70:48:82:98:CB:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184797ED3996E4B9A79C41EA159DE54C5DF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qy1sHK8LFBJzwqKsRNxwSIKYy3A.roa
Signing time: Tue 15 Nov 2022 04:14:25 +0000
ROA not before: Tue 15 Nov 2022 04:14:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:79:7e:d3:99:6e:4b:9a:79:c4:1e:a1:59:de:54:c5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 15 04:14:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=432d6c1caf0b141273c2a2ac44dc70488298cb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5f:2e:4d:6a:78:d1:52:ff:09:35:ca:6e:5d:
3e:57:d5:04:c1:9e:09:10:27:75:f8:05:86:69:15:
c4:79:d6:ae:40:9c:91:6e:3f:ed:dc:25:20:98:04:
6b:90:aa:ab:02:b9:13:fd:7e:f0:bd:84:13:80:b6:
b3:11:d8:2b:d3:03:45:53:88:66:e2:9b:51:42:9e:
de:c6:92:64:3a:2c:41:d7:b6:59:d4:8c:0b:f7:e3:
c0:0e:1c:d9:13:27:65:62:fc:16:99:ab:6b:94:7d:
ad:8c:dc:60:2e:b8:70:7d:66:b0:f1:ab:31:d4:53:
02:90:18:df:ee:d8:82:e3:29:28:86:e7:ce:37:26:
f6:6b:7d:7a:ba:15:94:da:a6:4e:dd:c5:91:c2:09:
8a:4f:e3:8e:21:16:7a:84:3a:e8:99:52:d2:b3:54:
41:d6:11:54:08:4f:7b:67:49:51:eb:ea:28:a2:39:
dc:f9:1f:1f:14:70:ec:ae:5f:e4:73:ea:25:bc:87:
c7:d5:18:27:21:9f:d3:80:a3:4d:16:91:1b:ec:c0:
59:24:ad:1b:a6:1c:ae:39:4c:82:d2:d1:1c:61:0c:
e7:18:19:5f:ee:bb:1d:b3:87:b3:d0:24:5d:f5:29:
94:43:b6:78:f6:3a:bc:fa:e5:25:e8:4b:cf:95:80:
67:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2D:6C:1C:AF:0B:14:12:73:C2:A2:AC:44:DC:70:48:82:98:CB:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qy1sHK8LFBJzwqKsRNxwSIKYy3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:cd:ea:ac:35:9d:80:0f:7e:84:47:44:e1:8b:fc:90:35:66:
77:67:82:fd:6d:cc:71:6d:5e:11:e7:d7:a0:31:a1:ec:91:7b:
cc:79:5f:b9:1a:fa:77:6a:d0:e6:96:19:bc:63:7c:1d:ed:30:
80:12:2d:c0:78:f8:e9:a8:13:e8:ee:55:bf:4f:0e:a4:ae:17:
7a:1f:13:42:ed:08:53:a4:8c:00:fe:87:0c:14:f9:ce:b0:e7:
ed:6f:fa:9d:cd:04:8c:f8:28:59:1d:a6:e1:f8:9b:7a:a5:ca:
9f:72:a9:d8:5b:92:1e:e4:a6:e1:34:96:12:b8:f4:09:76:0d:
24:39:ed:f8:51:54:7e:b3:28:b3:ec:07:41:f9:4a:1f:5b:50:
d5:b4:61:23:82:2e:5b:71:85:f1:49:6c:a0:61:cf:45:96:89:
7b:97:67:c9:50:00:20:f2:f1:23:b5:90:23:c5:7a:f0:6d:2e:
90:28:69:af:ae:9c:e0:d0:a9:e4:14:31:ed:0d:9e:2e:69:3e:
10:f6:5c:bf:fc:d8:51:06:15:7d:b6:99:4a:58:f2:50:2f:7e:
6a:0b:37:5d:19:55:36:b1:94:de:96:5b:9f:31:34:07:8b:cb:
e7:aa:ee:86:b0:7f:56:6d:a7:9c:69:dc:99:7b:5a:f7:44:a1:
0f:96:0f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:59:32 2025 by rpki-client