Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q24LMAh1KVovSik1RtQuNjs3C-w.roa
File: q24LMAh1KVovSik1RtQuNjs3C-w.roa (raw, json)
Hash identifier: kavpeDNum3gAFHwkKI/eWEqma84f1zNv/iGK8skAn0Q=
Subject key identifier: AB:6E:0B:30:08:75:29:5A:2F:4A:29:35:46:D4:2E:36:3B:37:0B:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182520878E2378C5D31CBFF1220355302D5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q24LMAh1KVovSik1RtQuNjs3C-w.roa
Signing time: Sun 31 Jul 2022 02:14:23 +0000
ROA not before: Sun 31 Jul 2022 02:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:52:08:78:e2:37:8c:5d:31:cb:ff:12:20:35:53:02:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 02:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab6e0b300875295a2f4a293546d42e363b370bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:98:8e:be:17:11:0d:b8:0c:3f:7d:7b:39:
41:24:28:23:ec:84:df:c3:61:f5:5a:3b:2d:85:aa:
05:11:5d:48:74:ab:a4:33:5d:dd:6a:1d:a9:a5:e2:
42:d5:f4:14:26:36:d9:b5:18:db:49:3c:69:a7:75:
9f:f3:f3:44:78:f3:d6:20:21:b9:36:06:9d:54:27:
5c:e0:d6:c3:d8:34:92:17:06:7b:18:01:b2:74:32:
39:65:e6:3a:47:f8:27:8c:0f:4f:ef:0c:1b:fa:16:
fc:d1:3e:83:8a:59:31:44:17:73:87:55:76:fc:06:
8f:0d:ee:2f:cc:c8:ae:aa:8c:38:23:39:a8:4c:e1:
26:75:f3:38:1b:99:09:17:2e:6d:88:d2:52:15:35:
b5:76:bc:d4:47:d2:63:69:cd:01:b0:71:f1:87:ba:
cf:67:74:e7:7a:2b:81:89:b8:93:8f:17:4c:9d:09:
70:4e:0f:3e:e8:51:0b:e1:83:31:bb:d6:b4:17:00:
5d:6a:c4:bb:02:e2:c9:0d:15:ba:e0:99:01:3a:77:
04:0e:d4:f1:f7:3f:71:b8:f2:1a:3d:44:9c:08:f7:
b7:1d:ed:fc:7b:b8:54:1e:ad:13:b5:92:7a:ce:dc:
aa:ac:f3:dc:28:cb:77:54:1f:d7:12:b8:42:65:b2:
32:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6E:0B:30:08:75:29:5A:2F:4A:29:35:46:D4:2E:36:3B:37:0B:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q24LMAh1KVovSik1RtQuNjs3C-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:7d:34:21:b9:a1:c8:51:15:20:5b:50:00:d2:a3:38:22:93:
c2:5e:f8:64:e8:dc:06:be:c5:2d:c5:39:68:69:75:d6:0f:61:
b7:05:04:98:37:b6:94:8f:f1:64:cb:40:e3:e4:4b:49:ad:2e:
a8:4f:82:47:66:44:d2:c0:89:14:78:29:eb:43:d0:72:24:74:
59:00:c8:56:28:b4:cb:32:1b:f1:78:e0:8d:3f:6b:25:a4:f2:
a2:9a:e1:aa:03:34:e9:ee:47:38:7f:b2:9f:2a:09:81:27:59:
74:d4:ce:44:c2:26:f4:e9:f4:0d:41:65:25:4a:60:a7:0f:4e:
3b:27:7b:6d:23:ce:fe:cc:b6:8b:18:cb:0d:ef:4b:0f:7e:dc:
ed:11:27:72:75:70:1a:02:7c:cc:2d:bf:6c:2b:fe:fc:ed:b9:
c0:ef:14:1a:fe:70:26:0a:37:65:d9:90:33:7f:51:e6:b0:df:
50:d3:b0:0d:3f:14:f9:eb:a4:5d:fa:fb:97:6d:97:6a:9b:b2:
8b:f7:5d:c8:a7:6d:8a:c9:ad:cc:d9:d0:f6:cb:ea:62:04:0a:
57:0c:0e:5f:55:e9:ee:83:6c:80:d6:3e:f6:75:6a:08:60:a9:
f9:c9:44:24:07:b6:a1:1b:0d:1e:16:71:9f:57:b6:36:7b:9d:
79:16:db:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:29:44 2025 by rpki-client