Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f_qt6aB8KB0tsQu-ausJdtvxgY8.roa
File: f_qt6aB8KB0tsQu-ausJdtvxgY8.roa (raw, json)
Hash identifier: SGAB6pRxZ8KetDfE5FbWxVQcOLhAtA5gPGMRfQvmZMc=
Subject key identifier: 7F:FA:AD:E9:A0:7C:28:1D:2D:B1:0B:BE:6A:EB:09:76:DB:F1:81:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E93EFD1C2F5A542B1F0DA22D682E128E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f_qt6aB8KB0tsQu-ausJdtvxgY8.roa
Signing time: Fri 05 May 2023 00:10:32 +0000
ROA not before: Fri 05 May 2023 00:10:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e9:3e:fd:1c:2f:5a:54:2b:1f:0d:a2:2d:68:2e:12:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 00:10:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ffaade9a07c281d2db10bbe6aeb0976dbf1818f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:88:9f:b2:8f:1f:5e:f4:10:70:27:21:39:15:
32:d5:6c:ba:d1:69:43:d0:7d:32:aa:ed:54:7b:42:
8b:2e:3c:78:59:03:69:6a:c7:c7:49:4d:7a:86:06:
0c:be:1e:77:9d:14:4b:69:cf:09:b0:12:cf:bc:bd:
45:2f:15:72:50:ac:ce:98:72:6f:cd:7d:63:e8:94:
4e:83:bf:e2:85:ef:71:fe:28:24:20:11:4a:8f:80:
1b:5f:9f:e1:67:34:98:72:84:9e:6e:13:8b:0c:e4:
e9:46:84:87:c4:77:f4:fb:1e:4a:99:2e:e2:7f:dd:
80:23:01:47:3a:b9:ab:3c:65:8b:2e:a0:0d:00:c0:
2d:77:65:a4:88:ee:ff:9d:fc:9b:d0:65:f6:ae:22:
a5:0b:75:ac:a3:aa:f8:08:0d:1c:80:7d:c9:74:1c:
e9:5f:13:c5:09:1f:aa:f8:44:b7:2f:70:7d:1c:5f:
89:09:e5:75:b4:c3:e1:75:40:0a:53:ec:c0:6d:96:
cf:31:b1:22:99:84:36:94:13:74:5f:1c:ee:cb:bc:
7d:4f:99:d2:ab:18:cf:c6:73:4d:dc:ab:81:c1:fb:
4e:90:ab:25:51:52:b4:0f:c7:b7:5f:e9:14:83:1a:
80:9d:4f:b1:a9:15:fb:6b:9d:18:1c:8a:66:95:92:
fc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FA:AD:E9:A0:7C:28:1D:2D:B1:0B:BE:6A:EB:09:76:DB:F1:81:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f_qt6aB8KB0tsQu-ausJdtvxgY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:72:8f:c4:45:6a:34:bd:55:40:46:cb:f0:1d:db:fb:57:24:
21:2f:6a:0d:d6:15:49:ad:69:c4:bc:ef:30:6f:41:3d:a2:93:
a6:8e:f8:17:b9:d6:09:95:40:2e:5a:27:1f:a2:20:5e:1d:45:
ea:a3:84:f6:11:b4:4c:20:28:2a:fe:9f:59:86:a3:62:e5:cf:
71:35:fa:e2:f0:1d:54:a4:21:5b:b6:7f:35:46:6e:d1:02:ef:
ad:70:14:fb:fc:f4:bc:17:57:24:ce:c5:a5:3f:92:18:cf:8a:
22:a2:5e:47:9e:e1:4e:a8:79:8e:10:95:dc:29:c8:86:49:5d:
21:94:45:74:f6:46:2e:bf:e4:89:2b:10:6e:fd:cc:ad:ad:39:
12:ef:5d:45:25:60:7a:ac:ed:fe:2b:3d:89:1f:3c:fb:f0:6e:
2d:b3:ea:bf:64:24:84:90:2b:ea:86:c7:f8:64:27:e9:dd:45:
54:50:1e:0c:67:7b:36:9e:6a:1f:b2:f7:de:34:e8:0e:0e:00:
38:69:52:ae:29:39:c8:e4:b7:fb:89:6a:f6:5f:88:5b:13:bc:
0f:18:6f:25:ff:bf:c2:30:ff:80:5e:c7:36:8c:0c:c7:3f:04:
47:7f:90:eb:e7:54:98:ef:49:5e:70:ec:86:8e:74:e0:e6:03:
19:66:b4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:30 2025 by rpki-client