Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q2rAnVKwWgrXxG_i6O4QQerqGdk.roa
File: q2rAnVKwWgrXxG_i6O4QQerqGdk.roa (raw, json)
Hash identifier: GYhHwbez1D4YRs7w2Y5IFU8eBnS2DkdoEOvXHPQ6dFs=
Subject key identifier: AB:6A:C0:9D:52:B0:5A:0A:D7:C4:6F:E2:E8:EE:10:41:EA:EA:19:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01830AF74D325CD855F74A1199A5E4ABB6DC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q2rAnVKwWgrXxG_i6O4QQerqGdk.roa
Signing time: Mon 05 Sep 2022 00:05:22 +0000
ROA not before: Mon 05 Sep 2022 00:05:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:af6:8016/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0a:f7:4d:32:5c:d8:55:f7:4a:11:99:a5:e4:ab:b6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 5 00:05:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab6ac09d52b05a0ad7c46fe2e8ee1041eaea19d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:a8:6f:35:82:8d:69:65:fe:fd:ab:7d:ae:
64:b5:2a:a8:ff:e6:05:be:63:12:9e:5c:18:da:fd:
19:66:e8:00:6b:6b:97:14:96:0e:60:75:0e:d5:56:
94:53:ca:ff:a7:e3:3f:85:9f:d5:d0:2a:4a:6c:f4:
a8:3f:b3:2a:dd:c6:3c:79:11:fc:ce:bb:27:c2:17:
21:ff:9f:68:7b:e0:ba:62:0b:11:4e:1e:5d:6e:c2:
41:d4:4e:30:7f:0d:1a:e2:b5:eb:93:df:9c:52:82:
04:ec:3e:3b:aa:82:71:5e:89:c6:c0:fd:b5:06:65:
02:ba:50:94:47:d9:f5:3d:41:88:af:91:02:7a:1a:
9d:12:cb:b9:f4:ef:f4:b9:9f:06:99:d6:e5:de:6e:
c4:cd:15:77:74:aa:d2:4c:94:17:ac:58:1a:89:c4:
3b:97:89:76:ce:e6:aa:23:9d:87:bb:02:18:ec:45:
15:67:ca:fd:7c:27:36:c6:32:23:7f:7b:f8:d0:29:
50:0e:49:5d:f8:ed:c5:a8:34:5b:b9:12:2e:8f:54:
e5:7f:c0:a4:8b:4c:37:d2:0e:0a:cc:26:66:06:58:
95:43:a9:5a:f3:38:cd:a3:a9:a9:cd:54:1b:d9:27:
6d:dd:06:e1:29:f0:82:96:10:56:52:bb:c3:99:ca:
5d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6A:C0:9D:52:B0:5A:0A:D7:C4:6F:E2:E8:EE:10:41:EA:EA:19:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q2rAnVKwWgrXxG_i6O4QQerqGdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:1c:0a:c2:21:cf:28:b3:4a:d3:74:c9:72:af:98:4a:3a:b9:
a7:45:7b:3e:18:8c:3c:8f:99:86:9a:e8:49:06:13:10:40:12:
53:ce:45:82:65:00:d3:b1:7b:67:ec:b6:0f:58:29:35:d5:fc:
5c:02:38:9b:d5:e3:fc:b7:6f:6b:be:48:09:51:c6:86:9b:51:
a7:28:9b:de:b4:b8:40:e5:20:7d:b5:d9:b8:02:87:d1:2f:9e:
9b:d3:98:9e:1c:fe:37:0b:f8:a7:35:f0:22:fa:0d:7c:a5:5a:
d8:cb:b8:a4:d5:52:cf:39:9a:fb:d7:b4:e9:33:bd:d3:4e:8c:
5d:1f:49:fa:64:f0:db:0c:41:7f:a9:06:b2:24:be:ca:8c:58:
fb:c8:46:d7:46:2a:24:9e:f5:4b:23:ac:55:92:1f:3d:15:b0:
d7:4b:ce:82:4a:0a:82:fe:c9:f7:9b:a0:03:be:01:98:aa:aa:
da:ea:dc:e6:dd:98:a6:f8:42:1b:f1:62:0a:03:3d:e4:0b:ba:
29:fa:35:88:6e:0c:19:4b:56:84:be:d2:77:3a:e2:b6:09:27:
da:d6:fa:1d:df:af:de:f2:d3:b8:53:e5:f1:7c:e0:18:dd:31:
38:d9:41:64:3c:75:82:85:5e:8c:52:f5:1a:e3:5f:4d:eb:8d:
34:38:e7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:10 2025 by rpki-client