Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pq6R-xnqVt7OTbJEVRLlNFFxt4s.roa
File: pq6R-xnqVt7OTbJEVRLlNFFxt4s.roa (raw, json)
Hash identifier: glJiaEb1K4B2JtnbXcYXrv8wMx6wthNkANqI2YsM9xI=
Subject key identifier: A6:AE:91:FB:19:EA:56:DE:CE:4D:B2:44:55:12:E5:34:51:71:B7:8B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189431F98D780F3016BDAE53E42FEEF3568
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pq6R-xnqVt7OTbJEVRLlNFFxt4s.roa
Signing time: Tue 11 Jul 2023 04:04:51 +0000
ROA not before: Tue 11 Jul 2023 04:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:189:431f:6b83/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:43:1f:98:d7:80:f3:01:6b:da:e5:3e:42:fe:ef:35:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 04:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6ae91fb19ea56dece4db2445512e5345171b78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:6a:c3:ba:b4:2c:70:47:00:79:a3:a3:5e:
3b:af:52:81:9e:0c:47:1a:37:82:a1:fb:f7:3b:50:
b4:49:4a:a4:2c:98:14:03:b4:1d:b2:16:3b:a2:56:
88:5e:51:3e:b3:1e:13:d5:7a:03:ca:18:8d:ab:75:
27:01:cc:d3:74:95:eb:a2:17:a9:ae:13:90:24:91:
17:01:c4:b5:b5:3e:66:b9:d7:36:12:29:d3:2f:d6:
9a:78:ff:2e:96:ac:75:db:5c:7a:7d:07:c1:15:b6:
3c:7e:ee:7c:3f:c0:b4:46:4f:d9:16:01:d5:72:9f:
ea:ee:41:61:71:7c:4a:a3:40:2c:fd:f3:f0:26:58:
a5:10:f0:59:75:a2:fb:3a:1f:7b:50:54:53:40:8c:
ea:be:ea:2a:3d:62:93:09:85:6d:89:7f:38:6a:43:
28:d0:14:3e:84:ed:fe:5d:aa:e8:47:86:e1:44:c9:
9d:6d:cd:83:41:03:dd:fd:86:0b:11:a1:1b:85:4a:
bb:e5:5f:2c:1a:c2:b3:cf:e5:70:38:2e:48:94:34:
6a:2e:3e:73:34:d0:58:78:5b:8d:09:0a:1e:6b:5f:
65:f6:e5:64:42:64:1b:28:b6:8a:79:66:e5:fd:b7:
71:4e:91:f5:70:92:5d:91:d8:3b:6e:3b:7c:4e:84:
e8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AE:91:FB:19:EA:56:DE:CE:4D:B2:44:55:12:E5:34:51:71:B7:8B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pq6R-xnqVt7OTbJEVRLlNFFxt4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:e9:d3:01:01:a3:db:b5:78:cf:90:6d:b5:c2:f4:68:fa:7e:
e1:c4:e9:af:e6:06:42:0b:4b:54:93:aa:67:0c:a7:24:95:f6:
40:1a:9c:ab:74:1d:79:bf:16:86:0c:51:0e:00:af:34:4e:58:
d0:07:95:4e:e5:46:c9:38:ad:0e:2d:e6:cf:18:64:85:c9:50:
f0:10:93:52:58:40:2b:a8:88:6b:9d:d3:77:7d:f3:32:2d:ae:
96:80:1b:ad:0f:de:01:17:3d:e4:ce:5e:f2:20:f7:92:8a:6f:
2f:40:97:76:d9:29:a5:71:2e:ed:89:66:fe:db:a7:be:8f:de:
59:4c:bb:81:6b:1f:99:a9:11:08:7e:00:4f:82:6a:6c:a0:b4:
2f:9c:96:1b:3a:f4:86:b4:11:a0:ac:ef:d2:2c:22:b0:8e:ef:
57:dd:af:15:e9:9d:17:82:0c:b7:ac:a8:91:6f:15:c2:ab:c8:
35:09:8d:92:49:e3:08:d8:62:71:f6:00:2e:b1:97:df:f3:a0:
af:ef:ed:bd:93:b8:7e:75:1b:00:b5:95:32:e9:87:1b:ec:95:
9f:9c:09:a4:33:52:f2:13:87:22:ac:87:14:3d:75:63:04:96:
19:24:2b:9a:8e:a6:9e:59:c6:6f:86:f3:97:40:60:99:b8:dd:
c8:25:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:01 2025 by rpki-client