Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jQSTfZiGRhWJN0Ae0HHtafRbgzc.roa
File: jQSTfZiGRhWJN0Ae0HHtafRbgzc.roa (raw, json)
Hash identifier: ldENOplyjNW36YCOE+wRrWecyioedZwL4A2aDl46q5U=
Subject key identifier: 8D:04:93:7D:98:86:46:15:89:37:40:1E:D0:71:ED:69:F4:5B:83:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018589544EEDCF4D6A4CE152C9665430A20B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jQSTfZiGRhWJN0Ae0HHtafRbgzc.roa
Signing time: Fri 06 Jan 2023 23:04:41 +0000
ROA not before: Fri 06 Jan 2023 23:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:8954:10b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:89:54:4e:ed:cf:4d:6a:4c:e1:52:c9:66:54:30:a2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 6 23:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d04937d988646158937401ed071ed69f45b8337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:19:93:44:de:9d:e4:6d:68:01:4c:83:b1:
43:ab:7f:09:43:4e:1f:85:c2:3b:c8:d8:bc:76:24:
d6:54:5c:45:37:07:9d:0f:6c:d3:32:05:28:14:06:
0d:7c:1b:6a:c1:36:d8:76:37:f3:7b:46:51:df:27:
42:2c:a3:f0:fb:47:34:ce:80:0a:0c:d8:3d:c9:f2:
64:65:ed:c9:db:4a:4b:c4:01:03:72:8f:bf:dd:1b:
d7:71:b4:07:78:31:dc:e6:cd:8c:0e:6f:5b:62:46:
6a:c4:4b:33:6b:a5:84:61:75:c6:0f:c1:df:6d:40:
97:b0:50:4d:9b:84:54:c2:65:5d:a8:05:56:82:c0:
c9:a3:0a:b8:15:75:7f:f8:c5:c3:74:ee:af:2b:5d:
6a:e7:65:53:be:18:cb:84:33:d9:da:e7:54:45:ba:
d8:ff:a6:40:49:89:bd:6c:1d:0c:54:1e:6b:64:40:
f0:0d:17:53:3a:12:58:7d:28:d7:83:6d:a4:fa:6f:
87:50:28:af:57:3d:36:0a:58:34:1f:77:07:52:55:
fd:2b:98:1e:b5:1f:4b:15:ad:98:fc:2b:0d:9f:18:
a8:da:47:f2:21:aa:ae:d6:e5:e3:02:b7:93:05:e1:
ff:a6:3b:5f:d1:2f:27:8e:73:e4:4a:87:6f:4f:b1:
28:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:04:93:7D:98:86:46:15:89:37:40:1E:D0:71:ED:69:F4:5B:83:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jQSTfZiGRhWJN0Ae0HHtafRbgzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:ed:44:77:b2:b9:0e:2f:13:d6:f1:6b:e6:f1:7c:34:56:16:
5f:fe:f4:81:71:ca:4d:fc:e3:51:aa:cd:38:69:54:03:e8:37:
2d:c8:c2:72:bd:42:d0:ed:8b:71:f6:24:1a:57:b5:fb:a6:d6:
ae:85:ad:b3:bd:92:35:8f:20:53:95:87:86:2b:cf:5d:a8:8a:
d3:c1:42:4a:dd:53:c8:ef:48:48:46:cf:fb:ad:77:49:aa:ad:
b3:d3:2f:59:d4:af:10:1d:56:6a:49:18:85:a9:36:ce:79:fb:
99:67:41:2e:aa:71:14:12:b7:6c:dd:fe:f1:c5:dd:aa:a9:b0:
43:c9:19:8a:73:42:98:81:e0:4d:ad:15:c1:5f:56:c1:df:de:
a7:c4:19:82:84:a0:d6:96:47:ce:db:6b:cc:ca:76:b7:b0:47:
a2:21:00:53:c9:d8:51:d1:55:58:b5:6e:ec:30:bf:57:a9:de:
5a:ba:be:37:93:f7:8d:65:79:2d:e7:2a:a3:26:a9:99:0e:54:
c1:a1:de:a5:52:a5:a0:b6:8e:4a:aa:e9:37:48:03:6f:14:8a:
56:e5:a6:cf:04:51:10:6f:95:e7:21:03:42:39:42:c0:fa:c8:
af:d1:8a:8a:99:eb:c2:3b:0c:82:d6:12:c4:a7:dd:53:a2:37:
81:4f:7d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:37:59 2025 by rpki-client