Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SqBMqgMhy92yF3byqjoL2Vxz5CY.roa
File: SqBMqgMhy92yF3byqjoL2Vxz5CY.roa (raw, json)
Hash identifier: A7T41CqraGGYpMyntFx9zEjyoS6v4PDtTkRI8mhDkPw=
Subject key identifier: 4A:A0:4C:AA:03:21:CB:DD:B2:17:76:F2:AA:3A:0B:D9:5C:73:E4:26
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188CD89430BA83BBFF2CED49EBE7B0912DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SqBMqgMhy92yF3byqjoL2Vxz5CY.roa
Signing time: Sun 18 Jun 2023 08:05:04 +0000
ROA not before: Sun 18 Jun 2023 08:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:188:cd89:82b/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cd:89:43:0b:a8:3b:bf:f2:ce:d4:9e:be:7b:09:12:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 18 08:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4aa04caa0321cbddb21776f2aa3a0bd95c73e426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:74:bb:b5:00:cb:ae:76:4d:7f:3a:d6:4c:
70:06:7c:00:02:d6:f3:ca:ca:ff:d1:13:d4:1e:7b:
29:57:82:e4:2c:b8:51:68:4e:05:59:9a:c6:35:bc:
c3:c8:70:17:c1:f5:ca:ee:75:6d:ab:d4:be:55:48:
3c:a7:1c:8f:43:17:70:30:10:85:47:c8:07:65:4b:
b3:79:20:b3:88:1a:b1:d1:1f:5e:6d:89:f6:2e:01:
e6:2c:1b:80:d8:29:89:58:60:c4:3c:08:af:6d:c2:
1a:70:7d:0e:58:78:da:0d:51:6a:d6:8f:2c:2b:d3:
b8:82:a5:a4:c8:cc:45:f8:9c:3b:74:86:ee:f6:c4:
0d:b5:c8:4d:9a:b7:29:a8:ee:66:ba:ee:d8:09:b1:
52:2a:c1:8a:fc:e6:3e:48:1d:13:57:4c:f1:35:3a:
df:f0:c5:21:a2:5c:da:99:4d:4d:b0:1b:a5:cd:0c:
57:a6:ee:6f:0c:7e:05:8b:81:53:c2:9a:95:61:b9:
91:ae:2e:4c:13:03:a4:71:f7:b9:b2:e1:de:1b:f4:
b7:25:c1:18:c2:54:9a:bb:c8:a6:0c:05:b9:96:79:
8f:3f:b8:3f:3e:ba:d5:d7:73:42:6c:67:00:3f:57:
aa:1d:36:ec:af:b6:f8:58:f5:68:bf:fa:10:de:cc:
c3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A0:4C:AA:03:21:CB:DD:B2:17:76:F2:AA:3A:0B:D9:5C:73:E4:26
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SqBMqgMhy92yF3byqjoL2Vxz5CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:c5:fa:79:ee:c2:07:92:8e:22:dc:69:34:0e:01:10:8f:7f:
cd:ee:d0:d0:75:ce:a9:46:38:c0:c0:e7:77:7f:f9:7b:b0:50:
d6:0f:b7:9e:8d:8f:21:2b:2b:03:e6:b7:05:ef:83:04:e8:dc:
5c:58:b4:51:01:0f:67:38:d7:3f:b1:e2:b3:40:b5:c5:87:1a:
3f:ec:d7:5a:2c:ab:52:bc:e9:bb:d1:82:cf:01:0f:7e:d7:10:
1c:f3:e5:ae:2c:93:94:da:f8:4d:1f:e6:95:b1:e4:44:61:d6:
a1:c4:fa:d6:12:72:67:38:ff:57:b2:37:11:66:72:59:69:0d:
d1:eb:7d:45:e5:dd:c4:e5:d0:92:6a:d1:bc:c2:e0:84:a2:c7:
fa:ce:07:0e:57:f1:14:05:97:70:73:42:db:5c:1a:81:67:84:
5d:a1:03:fc:0b:16:33:51:7e:4b:f4:a3:87:45:d1:69:6e:28:
ae:1b:eb:53:e6:69:c8:20:29:83:a4:d3:57:8d:f1:03:9a:fb:
a3:d1:e5:41:c8:3e:fa:c7:11:fb:58:96:04:78:83:66:7f:fd:
63:7a:6d:3a:7b:a8:97:e0:3f:4c:14:3f:26:1b:2f:ab:f5:04:
06:15:10:6b:fa:32:14:55:b0:b6:2f:2d:41:07:9a:0b:64:d4:
93:e3:c4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 13:23:10 2025 by rpki-client