Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_q14qtah1afF8WWbnRHxYXGq4hQ.roa
File: _q14qtah1afF8WWbnRHxYXGq4hQ.roa (raw, json)
Hash identifier: aAL1w6P6HyF3muNyLmGUh9AdY0tbI065aj/SMMnf4LM=
Subject key identifier: FE:AD:78:AA:D6:A1:D5:A7:C5:F1:65:9B:9D:11:F1:61:71:AA:E2:14
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182A1A275F7BB1A84331B228966904473FD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_q14qtah1afF8WWbnRHxYXGq4hQ.roa
Signing time: Mon 15 Aug 2022 13:12:35 +0000
ROA not before: Mon 15 Aug 2022 13:12:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a1:a2:75:f7:bb:1a:84:33:1b:22:89:66:90:44:73:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 13:12:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fead78aad6a1d5a7c5f1659b9d11f16171aae214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:20:6e:64:63:85:0d:df:ab:7b:ff:cf:cf:
a4:18:68:ac:f9:ae:42:fe:f9:29:b7:c9:87:d8:be:
51:1f:97:f5:b1:bf:fb:fc:b3:d0:c5:8e:ec:70:23:
c3:3f:d8:ef:b0:53:56:ed:a8:de:d6:11:11:a9:b5:
a3:df:a2:af:42:2a:58:82:e7:ab:b4:31:19:9c:cd:
73:9a:cc:61:1d:3e:a2:42:74:ac:69:aa:08:5a:ed:
5f:93:91:95:d0:da:ca:ca:38:16:56:8f:09:85:3b:
98:16:5e:ef:7c:bc:18:75:9e:65:e5:b4:39:cd:46:
90:f4:54:f5:2b:dc:02:8b:19:fb:f1:34:90:57:45:
40:8a:05:cb:e3:4c:fe:d2:11:30:ec:36:96:f9:f9:
41:23:c9:39:74:95:7e:68:03:0d:75:d3:80:b7:05:
11:bb:7e:a6:56:56:70:3e:28:68:76:1f:0a:90:7d:
01:cb:d4:87:8b:f7:e6:39:9b:7d:85:ad:57:e6:07:
90:56:3f:04:e0:6f:ee:e3:54:0d:f5:7b:07:64:07:
c4:c1:04:07:1c:fd:6f:1e:ce:12:6b:b4:72:c2:26:
fd:4a:ae:25:e4:8b:da:03:d3:ae:b9:49:df:0d:b5:
96:78:3b:28:a4:06:75:9e:3a:d0:3f:f6:b6:de:4c:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AD:78:AA:D6:A1:D5:A7:C5:F1:65:9B:9D:11:F1:61:71:AA:E2:14
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_q14qtah1afF8WWbnRHxYXGq4hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:e4:d0:ae:46:4c:c6:a6:40:be:c5:b4:34:66:57:33:72:84:
32:84:f9:d8:ab:c0:d8:de:f6:0e:db:34:96:dd:e8:b9:1a:10:
74:50:a0:9b:b4:80:5a:40:50:a9:13:2c:42:58:c7:57:ed:11:
1b:04:11:b8:34:b1:4d:2c:d2:ed:10:27:44:3b:c9:84:f4:5b:
01:33:01:61:2c:fc:43:56:10:7f:15:c9:26:4b:44:8c:9e:bc:
ab:e6:8a:44:78:7f:7e:1d:69:a5:c0:1a:c8:5b:05:f4:de:10:
57:dd:52:29:b7:30:49:b1:30:ef:87:0f:3a:04:b8:97:37:b8:
40:10:15:ee:69:04:7b:c7:5c:af:77:c7:e3:4f:c5:44:f9:2b:
d0:f5:ca:04:2b:fe:c4:d0:46:dd:45:07:55:0b:09:23:e3:f2:
bd:fe:e5:34:e9:de:16:8d:21:c5:cc:1d:8c:79:da:f2:d0:c7:
9f:d6:c8:1f:10:fc:e3:fc:1e:de:1f:30:71:cb:b6:0d:cc:e3:
be:7e:9d:71:5f:2a:ac:3b:6e:96:1f:21:44:bf:1f:e8:20:9e:
7e:25:f0:cc:a4:07:8c:40:8a:69:a6:1d:d4:ce:37:2c:a5:ed:
c6:c6:6b:1e:ef:70:77:35:4a:d8:3a:22:1d:36:af:d5:0a:58:
0e:a5:2d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:05:59 2025 by rpki-client