Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q4PU3vCaA1nTYuFTm0m9KqP6MuQ.roa
File: q4PU3vCaA1nTYuFTm0m9KqP6MuQ.roa (raw, json)
Hash identifier: esnOap1XP3Ud35EicoLULV3R/MuhFUOLkwN5/v5pvcc=
Subject key identifier: AB:83:D4:DE:F0:9A:03:59:D3:62:E1:53:9B:49:BD:2A:A3:FA:32:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01882F9B6940BBCDAFB37C48BBA701DEBDA0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q4PU3vCaA1nTYuFTm0m9KqP6MuQ.roa
Signing time: Thu 18 May 2023 16:04:54 +0000
ROA not before: Thu 18 May 2023 16:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:2f9a:f91b/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:9b:69:40:bb:cd:af:b3:7c:48:bb:a7:01:de:bd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 18 16:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab83d4def09a0359d362e1539b49bd2aa3fa32e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:32:0a:64:4a:91:a6:99:4e:27:61:4d:06:
47:e9:68:75:05:31:80:47:eb:df:68:34:07:ce:95:
04:36:5a:0d:ad:74:da:bf:7b:8c:02:8c:75:e3:cb:
fc:b7:ce:1b:95:b3:f4:57:f9:fc:e2:54:60:9d:a0:
4a:96:27:66:dc:6b:3b:43:c1:fb:79:df:ab:09:05:
7d:da:b0:d7:b4:fa:cc:6c:25:e7:b5:dd:ee:aa:d4:
ba:fa:f0:9d:62:fe:22:b2:ee:15:4c:2c:97:41:f6:
ce:e3:9a:26:4e:58:99:28:4b:59:a7:6e:b9:5c:54:
a4:2b:50:1e:c7:e8:74:9d:62:1f:2a:9b:c6:ee:ae:
74:bf:19:22:12:01:7a:1d:a0:fc:af:b8:f6:08:df:
c6:94:b8:b2:b0:bb:c5:cc:46:03:cd:4f:38:cf:65:
cc:63:dd:b1:10:ea:89:71:9a:b9:c9:03:bf:41:bf:
19:04:92:62:cb:08:4d:1c:d2:83:46:e5:3a:5e:ce:
a8:6f:8f:df:53:23:c8:26:e7:8b:7a:c1:94:23:ee:
1f:71:56:00:6e:48:3e:c2:f1:e9:83:7c:0d:cd:b3:
c5:c0:d8:71:8a:7e:87:56:e0:ee:e6:0e:d9:4d:c5:
de:62:26:6d:67:17:52:3a:6c:37:5a:68:de:00:21:
97:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:83:D4:DE:F0:9A:03:59:D3:62:E1:53:9B:49:BD:2A:A3:FA:32:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q4PU3vCaA1nTYuFTm0m9KqP6MuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:9d:7d:1b:2b:e1:3d:b6:53:96:00:89:e3:05:8d:0c:53:78:
f4:a9:7b:da:36:05:a8:15:37:11:84:d9:b4:11:95:9a:f7:43:
e2:42:89:72:f0:8a:ff:42:06:33:55:d7:e7:12:91:18:52:59:
74:8d:6a:17:cb:8a:d2:4a:2f:9b:b9:bd:43:fa:a3:4b:dc:87:
56:e2:c2:29:8b:de:d2:da:f3:67:c5:b4:97:05:b7:c3:f1:f3:
fc:2a:f7:4a:ab:4e:fd:c1:06:eb:d1:ff:17:64:12:8b:e7:d1:
79:a9:a8:bc:a5:47:aa:56:2d:b5:fa:7a:4e:2c:58:40:b5:89:
9e:2c:93:3b:5f:79:83:e1:2e:24:67:c6:f4:73:f3:5e:47:01:
84:01:1b:cc:0b:fe:36:84:de:b5:42:ea:f0:b6:47:a4:3d:6a:
eb:bb:98:d9:88:a6:a1:91:2c:f9:12:fb:3f:d0:7f:41:2c:b0:
9b:cb:7d:fc:c5:ec:7f:5e:5e:6b:31:f3:6f:f0:94:49:e7:38:
c1:a2:f7:13:23:bf:03:63:33:58:e4:27:66:3c:d6:a2:ff:3f:
d2:a3:fa:cc:40:9c:d1:4c:1c:df:05:35:3e:b5:1d:77:45:ed:
4a:fe:89:79:d5:59:55:eb:08:0d:f8:3c:de:11:1f:a8:13:9d:
e5:f2:57:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:01 2025 by rpki-client