Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bQWqHdSa6zU0HzPLyERzWY23C14.roa
File: bQWqHdSa6zU0HzPLyERzWY23C14.roa (raw, json)
Hash identifier: fDV0DcYSMggYtjwZ+8WVbaPuWaaMESCRmEReK8RW8Uo=
Subject key identifier: 6D:05:AA:1D:D4:9A:EB:35:34:1F:33:CB:C8:44:73:59:8D:B7:0B:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182CD6CCC9947FAD2C26274BD1628036DDF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bQWqHdSa6zU0HzPLyERzWY23C14.roa
Signing time: Wed 24 Aug 2022 01:17:15 +0000
ROA not before: Wed 24 Aug 2022 01:17:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cd:6c:cc:99:47:fa:d2:c2:62:74:bd:16:28:03:6d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 01:17:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d05aa1dd49aeb35341f33cbc84473598db70b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:47:25:95:e3:f6:c2:df:54:5b:68:44:3f:4f:
67:f6:03:93:33:eb:7d:2f:b3:f1:4b:57:3a:39:bb:
2e:bc:86:d9:6a:7b:e7:69:c3:2b:a7:ee:b9:0c:63:
56:a8:de:9b:bd:5c:9d:d3:c0:4a:cd:a3:64:c7:db:
84:40:ee:31:7d:26:9e:f9:a5:2b:6c:89:3a:52:7f:
86:fa:d3:c7:82:89:86:00:3d:c2:c4:b9:ff:f9:0f:
0b:32:0e:16:06:84:c7:fe:fb:14:0f:ee:8c:1c:9a:
62:e2:91:f2:a2:71:83:8e:bc:40:e5:4a:d8:dd:46:
ff:97:65:b5:b9:80:8d:f7:10:88:35:c3:be:b5:99:
32:7a:0e:dc:1c:81:35:2a:4d:d9:82:1f:f0:07:49:
a4:71:13:80:11:03:cb:d2:23:bf:47:3c:93:4a:20:
2b:f1:88:e9:b8:c2:c5:12:6f:97:9f:d2:18:85:15:
ea:bb:f2:da:10:c1:38:c0:5b:b3:e0:09:79:86:4e:
a9:7c:cd:14:4c:98:f6:9a:1b:1e:bb:8e:13:fb:81:
ce:4e:b3:4e:30:6b:eb:ac:6b:42:d4:50:d9:da:94:
ee:a9:02:55:75:62:e1:54:62:a1:96:a4:37:e2:6f:
5c:e2:4e:c7:bb:82:c6:c6:0c:2e:35:57:da:1f:0d:
c2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:05:AA:1D:D4:9A:EB:35:34:1F:33:CB:C8:44:73:59:8D:B7:0B:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bQWqHdSa6zU0HzPLyERzWY23C14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:0d:d2:e2:25:13:e7:ac:fa:fd:96:3f:7c:64:3c:d5:0e:c5:
76:d5:83:4f:de:f1:43:2c:65:d7:eb:39:25:b4:24:2e:62:2d:
ab:c0:45:b3:a4:00:40:4e:3e:81:32:50:e7:5a:47:53:4c:64:
eb:98:dd:83:bd:99:92:23:77:e4:f0:2e:2d:7c:c0:b0:7e:45:
f8:23:b0:66:63:e2:df:7b:6f:dc:d2:57:00:68:37:67:42:d7:
c8:cf:04:4e:96:4f:78:42:e1:66:f6:f8:99:cd:f5:f7:e9:6d:
c3:a9:62:49:83:c5:88:ea:e2:3c:be:83:82:f3:74:b7:40:88:
ac:70:42:10:0a:3d:31:a9:19:f8:90:c7:85:b6:93:00:3d:0a:
cd:0e:1a:75:c8:cd:02:ac:b6:66:74:24:f6:9b:a7:59:bb:c8:
59:cf:59:68:96:97:69:90:cf:62:f2:3b:22:c4:30:b2:0c:8c:
30:3a:bb:8f:83:61:5c:be:bb:41:7b:75:72:30:20:64:62:f4:
08:00:4a:33:90:2d:cc:65:71:26:96:15:03:42:22:fd:1c:33:
ed:4d:d4:e7:53:20:e6:9b:e5:2f:ee:39:7f:26:ce:a1:d5:2b:
f6:bf:84:04:e8:2f:ec:f4:c1:31:23:59:27:0f:05:4b:da:b6:
58:40:82:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:40:43 2025 by rpki-client