Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_qzpwqpPaKXZaY6F9VGi3U_e6rs.roa
File: _qzpwqpPaKXZaY6F9VGi3U_e6rs.roa (raw, json)
Hash identifier: 3oR+xDauJdBph1yt1cIgFwFiwVXHUimvVao8leKYW1U=
Subject key identifier: FE:AC:E9:C2:AA:4F:68:A5:D9:69:8E:85:F5:51:A2:DD:4F:DE:EA:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01857A53AFD78436267D8FBA089A19373FBB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_qzpwqpPaKXZaY6F9VGi3U_e6rs.roa
Signing time: Wed 04 Jan 2023 01:09:42 +0000
ROA not before: Wed 04 Jan 2023 01:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7a:53:af:d7:84:36:26:7d:8f:ba:08:9a:19:37:3f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 4 01:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=feace9c2aa4f68a5d9698e85f551a2dd4fdeeabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:d3:0a:5e:f2:2c:59:13:f0:b3:75:be:fc:
07:65:f2:8b:36:5c:bc:82:7a:62:a9:2f:1d:3c:5e:
77:14:f2:d5:04:6b:6e:76:8d:8a:a2:34:21:e2:36:
79:05:f6:c3:5f:b8:6e:c9:a4:d4:32:e7:7a:09:43:
bf:f8:a5:d5:d4:f0:55:fe:aa:56:db:34:45:68:6a:
f9:5f:dc:20:6f:2d:6b:41:fd:6c:fe:ef:7d:8f:83:
e7:6f:e2:31:8e:90:12:6c:e8:d0:b8:bf:6c:4b:62:
2c:a8:dd:c9:63:bd:44:47:8b:17:91:a4:fc:b3:ff:
d0:5a:24:b9:f9:30:67:bf:e3:13:0b:da:e6:80:c1:
5d:f2:82:a8:de:2e:ce:5a:0d:d6:b9:a5:27:68:b9:
2c:57:51:f4:b5:29:00:55:76:ec:ac:43:e5:0a:8b:
0c:c9:a6:1e:43:62:fb:7d:df:71:c2:28:4e:02:f4:
4d:ff:2b:db:48:b0:d9:c1:b9:78:43:1e:60:09:6d:
b7:7a:3b:25:bd:0e:86:b5:0c:e6:88:3c:9a:c8:62:
c6:f1:64:af:c0:4e:31:47:51:b2:5d:36:4a:c6:b7:
64:17:08:ac:7e:f9:c5:e5:42:e9:78:a2:ee:6a:2e:
6a:16:4b:53:27:cc:66:6b:4b:11:2a:1a:52:99:6f:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AC:E9:C2:AA:4F:68:A5:D9:69:8E:85:F5:51:A2:DD:4F:DE:EA:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_qzpwqpPaKXZaY6F9VGi3U_e6rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:93:ac:a4:23:8f:44:c8:0c:82:a5:97:6c:9a:f9:7b:2e:af:
34:19:a4:ce:16:4a:d1:79:f6:05:f7:5e:a4:d1:e9:2b:0f:44:
a2:69:c1:3b:82:61:e4:44:82:aa:2c:7b:69:6c:6d:bf:44:f5:
19:f8:62:17:67:7e:73:ed:b3:d9:02:4f:fd:2d:69:10:0e:f7:
55:66:2a:e9:21:e2:81:9c:d4:05:4e:62:01:6e:3c:21:3d:aa:
fa:ba:93:02:1f:a9:a8:5b:c3:8a:7c:45:84:61:75:6d:e8:e8:
ae:bb:84:6b:0b:0f:c6:90:0d:ab:53:dd:ef:f0:8a:41:09:72:
f1:85:f8:21:35:71:bd:87:57:9e:bb:d3:93:56:ab:9d:00:52:
54:e5:b8:65:b7:61:c2:d9:a3:14:48:ef:34:45:79:9f:14:a7:
a8:26:4a:9d:20:13:46:e4:bc:4b:b1:26:5b:41:cc:eb:ff:6f:
f8:e6:43:52:cf:90:e5:dd:30:8b:cf:01:8e:c2:05:75:6b:6e:
2b:51:80:00:44:9e:8c:af:63:ba:0e:15:a9:44:36:a6:92:9d:
8d:84:64:74:71:e6:d6:f4:9f:93:74:d3:2d:da:e1:be:6c:25:
ae:24:e9:82:1d:94:f7:56:d9:3f:63:91:9d:dc:69:08:a6:96:
e5:60:e2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:14 2025 by rpki-client