Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/keqAVhP9WkeVNquRXIDlnl2nOrQ.roa
File: keqAVhP9WkeVNquRXIDlnl2nOrQ.roa (raw, json)
Hash identifier: WQlH4/t2QOn79MdOpEjZ+P9GDKIYsGI8b4z+vRQqLaY=
Subject key identifier: 91:EA:80:56:13:FD:5A:47:95:36:AB:91:5C:80:E5:9E:5D:A7:3A:B4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A00D096682021BC1E3AD225EF366BE3EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/keqAVhP9WkeVNquRXIDlnl2nOrQ.roa
Signing time: Thu 17 Aug 2023 00:06:24 +0000
ROA not before: Thu 17 Aug 2023 00:06:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:18a:cf:dbf2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:00:d0:96:68:20:21:bc:1e:3a:d2:25:ef:36:6b:e3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 00:06:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91ea805613fd5a479536ab915c80e59e5da73ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:68:0f:82:a4:7a:84:74:76:74:9d:37:c7:64:
b0:d5:2a:ed:e5:e8:fb:24:b9:ea:07:0f:75:2d:81:
62:7b:92:29:26:3b:4c:c5:e8:e6:8b:46:a1:4e:10:
43:f6:a9:6b:b2:60:a4:8f:88:12:24:96:5f:49:11:
02:bb:b8:59:38:a0:52:e4:1f:df:71:4a:b4:26:f8:
6e:4f:67:f2:73:16:75:0e:cc:5b:a2:e1:e1:f7:6b:
3e:18:6d:4f:ed:80:d0:b8:39:7b:69:08:f7:5c:d5:
bb:d2:12:85:2a:a5:98:b4:c8:2f:e7:33:86:30:34:
73:6b:cb:a2:0b:23:43:1f:6c:9b:f6:1c:6e:9e:78:
92:7f:41:6b:73:51:a3:f2:d4:cb:cd:ff:0c:0e:f4:
4d:30:9b:35:3a:e2:70:c3:04:4a:f3:cd:1c:38:1c:
9a:97:7c:37:32:bf:63:e2:19:1b:b6:69:3d:a7:36:
bb:dd:a5:26:a8:c0:e0:78:0a:68:4e:da:3e:ff:02:
a9:5b:f2:88:b9:75:ca:e6:22:94:a9:80:76:0a:51:
dc:4d:ee:91:88:e2:fa:51:30:1e:bc:4b:30:1b:2e:
ed:51:56:6b:fa:34:ca:de:62:7c:67:4b:71:87:24:
aa:b2:c7:c3:ab:a5:21:de:dd:e9:8e:4c:11:c0:46:
ea:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EA:80:56:13:FD:5A:47:95:36:AB:91:5C:80:E5:9E:5D:A7:3A:B4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/keqAVhP9WkeVNquRXIDlnl2nOrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:5b:89:d2:2f:40:75:12:37:11:27:12:cc:95:ee:77:3f:17:
08:94:c0:ff:84:41:85:b0:4a:7a:c2:c3:b8:d9:17:a3:24:81:
d0:64:87:70:7d:19:c2:ed:2e:29:ee:fb:56:14:d4:8f:21:1b:
5f:8e:75:90:69:a8:8c:66:3f:52:fc:6b:dc:4f:c8:6b:48:05:
11:6e:d0:db:39:c7:d4:89:21:86:d8:f1:4e:b1:04:a1:4e:be:
03:d3:b4:b9:ff:04:fc:f4:aa:0c:85:c7:8c:16:dd:7b:c4:68:
bb:12:7c:0a:23:4b:61:10:ff:65:b6:a9:cd:34:a2:01:4a:8b:
af:9a:a4:06:73:52:ad:06:b3:2e:2a:05:dd:9c:28:a1:c3:df:
3e:3d:02:ba:fe:51:e3:3c:3e:95:ee:44:af:b1:48:1c:32:36:
62:70:c3:d8:5f:93:17:08:f2:c4:36:af:c6:40:11:19:d3:c6:
73:a3:5e:06:32:cf:af:9b:52:6d:89:38:cc:e6:e9:9b:cc:dd:
a9:f7:28:5b:f5:0f:b1:39:0d:17:23:eb:ff:2e:da:5f:b9:e6:
c8:6a:e3:f4:83:60:56:49:b7:c8:17:6e:a8:df:e4:ba:30:fc:
a1:b7:e8:18:cd:3b:82:e0:9e:57:00:d8:c1:77:4b:f1:7c:e7:
7d:46:19:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:36:27 2025 by rpki-client