Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SqSsQVhfvq2aJAyn93Bxk1moQWY.roa
File: SqSsQVhfvq2aJAyn93Bxk1moQWY.roa (raw, json)
Hash identifier: aEQzE+5T0/vj11D8D0IwUnjJPlJrY+l/sCc77ni63dM=
Subject key identifier: 4A:A4:AC:41:58:5F:BE:AD:9A:24:0C:A7:F7:70:71:93:59:A8:41:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F2ADE1C19C0D11D8922578931D1B95DD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SqSsQVhfvq2aJAyn93Bxk1moQWY.roa
Signing time: Sat 18 Mar 2023 03:05:27 +0000
ROA not before: Sat 18 Mar 2023 03:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:f2ad:db58/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f2:ad:e1:c1:9c:0d:11:d8:92:25:78:93:1d:1b:95:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 18 03:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4aa4ac41585fbead9a240ca7f770719359a84166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:65:98:d6:fc:ef:14:d8:f8:bb:2c:39:51:5c:
ba:50:b1:e5:5c:22:df:14:93:50:bc:b4:07:a6:d5:
51:3c:81:a7:63:92:e1:13:cb:20:36:97:e4:f6:25:
82:50:ba:aa:0b:f6:a8:16:7a:3b:96:7d:54:1b:30:
a0:93:d2:3f:bb:e3:84:64:f5:80:97:fa:0d:55:1b:
a7:c7:0c:fc:2d:db:f2:38:c9:20:b1:4d:5d:e2:33:
fd:4c:8b:42:d9:f0:9d:0e:fe:51:b9:9f:c9:6f:6c:
fa:fa:c7:58:14:01:e5:48:fa:96:f2:46:45:72:39:
f9:86:ef:c8:6f:96:5c:23:2e:6b:fc:78:44:98:0a:
a8:53:5c:a6:e3:d4:88:60:1d:50:78:8a:5e:c6:2d:
a9:90:aa:20:37:53:8f:40:12:63:14:b4:5b:fe:c0:
f3:32:e0:aa:d6:b5:ef:c8:08:ee:e7:7b:9c:5b:3d:
30:5c:92:a4:86:59:c9:11:aa:43:98:78:a5:c4:ef:
4c:68:09:fd:15:4a:d7:02:e5:09:c1:49:4e:c8:4d:
22:b2:d9:96:ec:3a:ff:41:bd:18:39:80:09:cd:6e:
c4:0b:58:2c:48:c8:88:21:06:03:4a:61:c0:49:16:
37:12:87:a2:26:63:ac:41:2b:f5:52:81:b4:3f:66:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A4:AC:41:58:5F:BE:AD:9A:24:0C:A7:F7:70:71:93:59:A8:41:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SqSsQVhfvq2aJAyn93Bxk1moQWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:4b:e4:42:1d:c0:cc:85:0b:58:46:5a:18:b6:ab:a3:68:f3:
e3:c2:7b:25:f3:11:95:75:7f:a1:76:7f:de:5d:33:82:bf:69:
5c:d2:43:21:d7:5f:37:2f:42:76:7d:dc:03:d8:23:8a:66:2c:
de:fc:a9:f4:63:a8:6b:52:d5:14:c4:3f:6c:88:2e:d9:6a:f8:
ec:1f:a0:b8:48:aa:a8:dd:4d:9f:4a:91:93:7c:fa:56:8a:cd:
58:c2:1c:5d:fd:c2:af:66:69:44:1f:20:1d:3c:07:47:e7:ce:
08:1c:ad:8b:26:cd:dc:33:cf:52:cd:07:61:6e:59:62:8e:ce:
35:e5:6d:f6:6a:f3:c7:d9:33:63:c2:bc:f4:ac:85:5b:c6:84:
58:ab:98:6f:2c:3b:bd:a5:74:6a:ef:fe:f7:85:e4:7f:a2:82:
1b:a6:1a:c3:54:0f:0d:61:ca:f4:3d:78:50:ae:70:19:42:4f:
16:44:07:66:b5:99:63:0b:74:a3:76:cb:49:c6:a3:03:65:bb:
a0:04:ca:34:34:9c:4c:55:4a:5d:bc:5b:6e:03:b7:f5:3b:31:
18:24:97:39:37:57:6f:9d:6e:20:5c:27:42:ed:58:00:66:92:
54:4e:c1:96:70:22:5a:54:24:09:50:7d:cd:42:2e:c1:ea:aa:
e0:49:f4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:26:37 2025 by rpki-client