Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n-Q5X4jF5m1YfuoigKozClJTWno.roa
File: n-Q5X4jF5m1YfuoigKozClJTWno.roa (raw, json)
Hash identifier: LNFJluYb+rJDLkOr+WMpopzHlxSUFSbSgd630+aPbDM=
Subject key identifier: 9F:E4:39:5F:88:C5:E6:6D:58:7E:EA:22:80:AA:33:0A:52:53:5A:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018984999E45C077CA278DC66154F8ED5EAA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n-Q5X4jF5m1YfuoigKozClJTWno.roa
Signing time: Sun 23 Jul 2023 21:13:27 +0000
ROA not before: Sun 23 Jul 2023 21:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:84:99:9e:45:c0:77:ca:27:8d:c6:61:54:f8:ed:5e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 23 21:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fe4395f88c5e66d587eea2280aa330a52535a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:ab:78:37:33:d2:a5:40:93:99:78:cb:9d:
e5:3c:95:95:1a:47:ca:19:3f:5d:d8:48:34:03:d6:
02:4b:65:79:69:ef:ba:9d:5e:02:a8:b0:83:5e:10:
b3:cf:10:44:76:09:f8:d6:82:0c:d7:18:5f:c9:f8:
d9:e3:17:ea:ad:70:33:58:f0:cf:e1:56:61:8c:82:
ff:05:e6:2d:f9:dc:25:ca:a4:c2:b0:36:c0:5c:d6:
58:88:7d:38:4f:bc:aa:d1:8e:23:f2:d4:f2:d4:51:
dd:99:b0:f3:a0:1d:94:f1:26:fb:69:06:ff:28:bb:
46:84:f2:f6:a1:52:2b:d6:72:57:d1:29:bb:f8:34:
25:ad:bb:07:53:b3:39:36:bb:20:c3:1f:9b:e7:b9:
75:76:1a:74:38:b3:7e:08:98:55:03:d0:21:f1:d4:
12:4b:08:8a:29:2b:65:9c:cf:d0:b7:d2:71:95:3e:
ee:6b:61:98:16:20:ac:67:0f:5d:f6:a3:42:8e:a4:
70:5a:ba:db:e8:20:33:0b:a2:22:1c:cf:5c:0e:b5:
44:72:3d:f0:bf:26:8b:aa:2d:19:8a:2e:c3:b9:64:
f9:ed:bf:fa:01:11:81:e8:da:ec:a8:18:4b:b7:34:
f4:e9:29:1c:19:64:2a:81:49:9f:f7:dd:6f:e2:81:
cc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E4:39:5F:88:C5:E6:6D:58:7E:EA:22:80:AA:33:0A:52:53:5A:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n-Q5X4jF5m1YfuoigKozClJTWno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:f1:1b:c9:1b:b9:d8:a3:76:bd:54:02:6a:37:e5:f7:ed:89:
14:50:0f:09:74:a4:9a:75:6d:09:7d:ba:9c:47:e3:04:f7:66:
70:29:d6:57:eb:5b:08:55:41:61:c7:eb:98:dd:f7:d6:97:15:
b5:41:af:0e:33:94:d8:78:cb:01:ba:36:41:32:59:12:e3:3b:
8a:8f:f5:43:81:3d:6f:bd:59:f6:ae:7c:23:57:e6:86:a5:75:
fa:7b:18:2f:59:ea:11:b5:a8:03:5a:42:2f:01:2b:21:7b:09:
41:d8:1c:aa:5e:b6:66:7e:cc:b5:f0:f0:37:c6:b2:1b:b9:06:
68:7a:14:87:36:9a:ef:bb:bc:5f:77:4d:9f:7e:05:2d:8c:4f:
46:fe:b0:e5:7d:3c:04:1c:6c:d2:ab:c7:d6:99:72:16:2e:71:
7d:51:a1:1d:45:f4:a4:cb:2a:6a:1b:05:1c:36:71:58:14:37:
3c:7e:ae:52:cc:ed:83:26:9e:b2:d4:c4:43:09:9a:41:b5:1b:
2b:14:da:1b:4f:f7:2e:9c:07:7a:2d:b5:93:b7:80:22:9f:71:
74:03:06:4c:65:5a:42:e9:15:f2:ad:3c:6a:eb:23:ec:50:6e:
db:e6:c6:33:0e:0a:d9:26:45:94:da:70:25:63:7f:6a:1e:7d:
52:50:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:37:28 2025 by rpki-client