Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gqnK53ktOZbIf76kfREJxDoc_qU.roa
File: gqnK53ktOZbIf76kfREJxDoc_qU.roa (raw, json)
Hash identifier: fr1LQlXf9ItfK/kVUkib/IhEL8EaDoP/YOxVyGnL5Hc=
Subject key identifier: 82:A9:CA:E7:79:2D:39:96:C8:7F:BE:A4:7D:11:09:C4:3A:1C:FE:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 74C93E44
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gqnK53ktOZbIf76kfREJxDoc_qU.roa
Signing time: Tue 22 Mar 2022 16:11:08 +0000
ROA not before: Tue 22 Mar 2022 16:11:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1959345732 (0x74c93e44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 16:11:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82a9cae7792d3996c87fbea47d1109c43a1cfea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:9b:eb:c1:fb:5f:23:53:28:67:dd:eb:de:
5d:21:2d:2b:86:7f:f0:0e:b2:55:e9:54:6e:da:b6:
63:99:7e:b1:63:1e:fc:96:f2:02:c8:74:89:85:d4:
99:d0:3e:19:a3:d0:85:ad:d9:d7:75:7d:4b:6a:65:
78:45:9f:ac:3b:5f:66:dc:58:69:79:94:71:e0:32:
1f:93:e3:9e:88:a4:f8:6a:49:46:e5:c3:fc:eb:a6:
e7:9e:a5:fb:0d:3f:d1:88:db:0b:f3:d2:b8:05:b6:
b4:9d:f6:03:fb:de:79:9f:2d:97:3d:2d:f8:f8:31:
5a:0c:01:00:e2:cd:1c:89:0f:af:d1:3a:29:ab:77:
45:15:a4:4a:87:dd:b5:06:50:ef:74:c9:7e:47:6c:
fb:1f:65:5e:8d:cf:95:36:b9:55:60:e1:07:f0:13:
a5:ad:4f:55:c5:69:fe:43:c2:a0:68:f7:3b:26:fb:
87:b3:7c:bb:f3:da:cd:66:93:db:f4:85:5c:61:02:
02:7b:98:cb:fa:53:27:c7:fe:58:d5:43:37:54:f3:
de:95:e7:25:2f:96:d1:5d:1a:bb:2d:cc:6b:57:b2:
d2:a7:21:b0:41:4a:63:65:fa:3e:50:80:e0:48:cc:
16:20:a8:d0:28:05:2c:a4:9f:5b:44:58:39:99:f6:
1f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A9:CA:E7:79:2D:39:96:C8:7F:BE:A4:7D:11:09:C4:3A:1C:FE:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gqnK53ktOZbIf76kfREJxDoc_qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:1d:5d:31:c3:1a:2e:49:81:3c:d1:04:cf:25:29:d4:d8:4a:
26:11:3e:e5:9f:53:55:dd:77:1a:a8:a4:fb:f9:52:c4:66:ca:
6f:fc:7a:2e:32:35:bb:ba:cd:1e:31:58:0e:ed:84:ef:2f:b5:
09:83:a4:bb:7c:fd:0d:1d:df:42:ac:b7:f5:3a:68:e8:d0:fd:
92:76:1b:76:7f:19:77:9e:14:2d:0c:40:c4:cd:0c:9e:de:d9:
ac:11:fc:1c:c3:d9:2d:71:91:61:3b:e5:8f:dc:e1:26:33:3f:
22:de:95:55:70:63:c9:fc:61:7f:af:0b:97:e9:09:8b:14:12:
6e:5c:a1:8c:53:77:8e:95:43:92:a5:0e:13:4c:d3:4d:91:46:
c7:2a:0b:82:1c:36:7c:3a:60:60:f8:8a:13:ab:3a:ba:5f:ae:
90:3f:a6:c4:a8:ea:16:b5:85:b4:6a:6a:4a:26:8c:87:47:9a:
e0:da:b7:c3:ab:b1:80:1d:5d:ad:3c:e0:a2:49:5e:39:64:cc:
0b:4d:f6:6d:b2:1e:2c:c5:f1:7b:33:80:5f:ae:22:5b:18:9d:
f6:db:e5:59:d7:95:47:a0:2b:ed:2b:f7:98:1d:65:b8:98:f7:
83:bf:5f:18:9d:eb:89:0c:04:d7:92:40:5f:00:91:17:f8:0e:
95:5e:49:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:11 2025 by rpki-client