Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q4IRHDv-qQvGvvoj-lhyUvkNFpU.roa
File: q4IRHDv-qQvGvvoj-lhyUvkNFpU.roa (raw, json)
Hash identifier: /ZbjzaJ5FWPDx5BrthcbP1dAJUkFgDRX89fjQKglzbg=
Subject key identifier: AB:82:11:1C:3B:FE:A9:0B:C6:BE:FA:23:FA:58:72:52:F9:0D:16:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2D7B7257705374E9F1DF9C8944D04E5E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q4IRHDv-qQvGvvoj-lhyUvkNFpU.roa
Signing time: Fri 25 Aug 2023 16:16:19 +0000
ROA not before: Fri 25 Aug 2023 16:16:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2d:7b:72:57:70:53:74:e9:f1:df:9c:89:44:d0:4e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 16:16:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab82111c3bfea90bc6befa23fa587252f90d1695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f4:3d:ff:88:f0:87:15:00:2a:a9:f0:76:84:
3c:50:cd:88:81:12:ab:78:78:21:df:c6:11:73:4b:
50:16:85:c8:e3:ad:1a:12:f1:5a:d9:ae:be:d5:2a:
3f:0e:9a:ed:7b:69:5e:c5:d8:60:bf:83:92:20:af:
c1:b7:c6:a7:91:6e:41:5e:c1:27:61:50:cb:6f:02:
22:ad:a4:d5:c8:51:69:69:e7:ef:f3:63:3e:f7:52:
d7:f8:a7:85:b0:80:8d:a1:1c:c8:d7:c2:63:37:29:
96:db:d2:04:8a:f7:5c:bf:0e:97:46:47:13:82:ea:
85:a4:08:a3:b6:a4:ae:ad:47:aa:e5:71:3a:e0:e2:
ae:bf:fd:1b:7a:03:de:f4:5d:05:6f:d0:7c:d2:75:
66:de:f6:87:91:26:c9:e3:9b:dc:ff:08:b8:3c:9c:
c7:ce:07:6d:2a:79:a1:55:ff:57:9d:bd:41:32:3f:
f3:26:29:be:69:f5:4e:10:aa:53:cf:25:29:e8:a0:
af:31:82:d5:37:37:b4:da:83:21:b9:96:e3:25:92:
e2:84:d6:dc:80:99:86:95:db:69:b2:9c:a0:42:c8:
67:26:67:72:a4:77:f8:e2:22:33:b9:12:e8:f8:8b:
9d:3b:d2:c7:60:dc:1d:ef:4b:90:39:4f:04:11:23:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:82:11:1C:3B:FE:A9:0B:C6:BE:FA:23:FA:58:72:52:F9:0D:16:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q4IRHDv-qQvGvvoj-lhyUvkNFpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:3d:b8:39:d4:bc:cb:13:be:42:04:c8:a9:49:74:5d:98:27:
b0:37:fe:37:33:4a:63:da:9a:ed:72:db:62:59:17:b7:ac:94:
23:56:c2:01:a8:21:2a:32:99:73:8f:60:6d:41:13:27:ca:93:
c5:70:ff:30:21:24:5a:b1:bf:06:0c:60:ea:3a:ed:db:8e:b3:
d2:ae:61:0d:a6:2e:e7:87:57:45:a9:c6:01:b1:af:73:51:37:
4b:d4:a1:a6:31:51:98:36:7c:c9:77:b4:71:1e:f0:26:be:c4:
f1:4a:39:a2:3e:dc:f5:6f:a5:d2:b7:d7:be:c2:dd:36:6c:89:
a1:b4:85:e3:44:be:4e:cf:b4:90:97:28:92:70:bd:99:62:64:
a9:db:b0:9a:9b:b9:99:8a:e8:0f:d9:17:49:e8:4c:73:3a:23:
f9:39:d1:ed:08:1b:8e:74:f3:7f:e0:ec:ef:76:18:2d:66:1e:
72:74:0e:f6:d9:8e:df:85:bc:11:f1:43:89:71:c4:6e:07:f3:
99:d0:80:29:6e:35:df:64:f5:c1:d2:39:ad:e9:cb:18:75:0d:
0e:44:63:69:bd:0a:e7:6e:b7:34:5e:db:b2:01:69:e8:d6:e4:
1f:4d:14:83:a9:e1:ff:09:81:63:48:05:7f:92:65:46:45:42:
26:c6:4e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:56:57 2025 by rpki-client