Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q1062ZRc_MDsyA51SLJhQnJka1Y.roa
File: q1062ZRc_MDsyA51SLJhQnJka1Y.roa (raw, json)
Hash identifier: KLcwG/+FgoLR8NrS4DjTT8GGFdfSLZNPkVGXCS9CwO8=
Subject key identifier: AB:5D:3A:D9:94:5C:FC:C0:EC:C8:0E:75:48:B2:61:42:72:64:6B:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B73D6F51051490F5101B84FD9F00509E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q1062ZRc_MDsyA51SLJhQnJka1Y.roa
Signing time: Mon 06 Mar 2023 14:05:02 +0000
ROA not before: Mon 06 Mar 2023 14:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:b73d:4f0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b7:3d:6f:51:05:14:90:f5:10:1b:84:fd:9f:00:50:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 14:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab5d3ad9945cfcc0ecc80e7548b2614272646b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:df:c3:4b:a3:c2:5d:e0:6d:d4:fe:76:bc:
78:11:e4:da:68:fd:37:90:08:84:b2:3b:d0:83:69:
bf:ae:f0:58:d9:0e:a2:b8:61:63:3e:d4:41:e5:ff:
f5:a9:5f:13:4c:d5:ce:3d:61:03:d3:89:24:12:ac:
ab:2c:8c:82:f9:10:50:16:f3:63:e6:3e:26:de:76:
97:c1:5a:05:7c:48:76:f1:48:40:14:2d:4c:ab:1a:
6c:e3:52:12:9b:f0:ac:bf:06:c0:4d:df:3a:88:ba:
e2:2b:2c:78:26:3f:2e:26:6c:ae:a7:65:0a:b5:4a:
86:54:fb:7b:02:d4:f5:9e:a4:9a:3b:12:17:7d:d7:
15:14:88:58:13:3f:76:21:b7:92:b1:1e:ba:1a:50:
0f:bd:f4:bf:fa:30:2e:d1:e6:fb:ee:eb:a6:d3:ee:
8d:62:b9:95:e5:65:0e:e5:45:d8:bb:2a:6b:a2:2a:
4b:6b:6c:a9:f1:9b:11:20:78:e1:3c:12:a5:88:5d:
a6:b0:76:c1:36:73:c3:db:8c:54:7a:af:4a:e2:d0:
47:11:2a:44:47:e5:fe:ac:37:ab:56:f9:31:0b:23:
cd:d5:77:ca:5b:34:9f:0a:7a:d8:d8:1d:56:c6:36:
53:d7:5a:04:41:7f:64:9c:f0:a0:fa:54:35:83:b0:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5D:3A:D9:94:5C:FC:C0:EC:C8:0E:75:48:B2:61:42:72:64:6B:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q1062ZRc_MDsyA51SLJhQnJka1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:0e:b4:33:9c:0b:d4:73:6c:16:aa:a4:46:bb:b4:de:de:00:
3f:1c:6b:8c:01:f0:c0:3a:95:98:c4:1c:7b:73:93:e0:a2:20:
0d:19:61:93:ee:0e:87:62:2e:64:9a:04:96:79:b2:ca:78:e8:
c7:39:b9:6a:ca:5e:aa:f7:96:72:d2:fc:5c:b3:66:b5:79:c7:
bc:4c:02:02:7f:a6:2a:1b:48:ac:b2:cb:81:76:ec:6d:78:19:
dc:e3:9c:88:6f:86:d4:fe:38:ca:51:4d:45:4a:65:b7:61:c5:
93:22:3d:3a:88:a4:27:46:e6:d6:94:ff:3b:83:81:86:b7:d8:
95:27:b5:ef:77:dd:c1:30:6d:3e:af:80:6a:af:6e:09:78:df:
a6:86:a3:36:10:c4:62:f1:06:88:a0:3f:87:0c:dd:66:dc:8f:
50:94:6f:6e:83:cb:27:d1:c6:7c:04:5b:65:a5:0f:75:cd:74:
e6:6b:1d:d4:b7:c3:05:b2:e7:0e:5d:1d:78:0d:cf:ab:ca:65:
52:32:2c:68:88:b7:8a:c7:7a:e0:8c:b4:d4:57:8c:0b:32:f2:
47:2b:f6:e2:da:d8:3b:65:21:69:7a:73:c2:72:eb:0a:da:f5:
d5:cf:ff:7b:c7:73:41:b7:92:60:8f:9f:f1:cc:f4:8a:0c:e8:
d4:5f:9b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:20:28 2025 by rpki-client