Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q4UBN7336NheEzk6bvKDHfe8QGQ.roa
File: q4UBN7336NheEzk6bvKDHfe8QGQ.roa (raw, json)
Hash identifier: jo7zggeAbFKK6guWPveqYnLDxumJLqQzm+jfAmswPiM=
Subject key identifier: AB:85:01:37:BD:F7:E8:D8:5E:13:39:3A:6E:F2:83:1D:F7:BC:40:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01860596672BB0C812D460D6D889E0B16FA8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q4UBN7336NheEzk6bvKDHfe8QGQ.roa
Signing time: Tue 31 Jan 2023 02:09:48 +0000
ROA not before: Tue 31 Jan 2023 02:09:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:05:96:67:2b:b0:c8:12:d4:60:d6:d8:89:e0:b1:6f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 31 02:09:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab850137bdf7e8d85e13393a6ef2831df7bc4064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:64:b0:3d:6d:64:a7:3b:28:8b:68:c8:9f:36:
22:d7:99:03:98:6e:6d:13:a3:f7:43:eb:9c:55:07:
ed:80:ec:6a:b3:d0:23:49:99:d4:74:48:4d:f2:39:
4a:3c:cd:7c:71:a4:74:00:99:72:89:01:51:01:f1:
b5:ab:4d:dc:6a:11:9f:37:c1:96:10:54:31:f1:f6:
49:34:b2:6b:5a:18:30:90:92:ef:8a:c1:16:5c:b0:
1b:c6:07:1d:86:53:95:b9:54:df:4c:55:6f:fb:77:
a5:f6:1d:5a:6a:35:ae:00:a7:7f:fe:d4:39:db:e6:
be:4c:bb:de:7d:ea:d4:61:c5:a8:3b:ea:72:67:ac:
db:2f:bd:61:1e:99:d0:b7:f3:51:f7:a6:74:96:0d:
74:6b:a0:38:98:97:c5:60:a1:2a:79:46:8d:2f:a2:
20:03:cb:47:84:34:64:32:de:da:da:b1:7d:05:43:
e0:32:66:2a:8e:fe:6f:7e:e7:80:49:09:52:0b:30:
be:05:ea:9c:74:47:be:f9:90:1e:70:ff:c1:d5:74:
a7:a1:4d:c0:d0:4c:d9:13:f2:a6:f8:b7:a8:a4:19:
1f:a5:79:35:c6:f9:bf:bb:58:40:ab:cc:b3:88:05:
c0:63:54:cb:3c:1b:46:4b:ae:1a:5a:86:bd:e3:d7:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:85:01:37:BD:F7:E8:D8:5E:13:39:3A:6E:F2:83:1D:F7:BC:40:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q4UBN7336NheEzk6bvKDHfe8QGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:00:ef:3a:85:c1:89:31:09:5f:6c:af:07:4c:fb:13:d8:c2:
4f:58:5d:15:e3:de:26:a3:07:ea:4c:95:23:8a:e6:71:fb:0a:
b4:73:68:89:d9:90:c7:53:f8:9b:3f:46:27:2f:7e:55:2f:97:
38:f8:2a:8d:a1:ce:ae:a6:e0:6d:62:53:d2:6b:da:e1:4b:c5:
82:f9:06:45:cf:79:89:99:c5:75:48:b7:56:91:1f:25:39:de:
04:6f:4e:f8:72:b5:d6:c8:e1:5e:68:c1:e7:e8:45:05:55:53:
46:35:25:c8:5a:c9:0d:38:d8:c7:ff:69:29:3c:04:73:78:87:
98:13:4e:5f:df:74:d8:5f:4a:21:8a:01:5d:51:5e:4c:be:5a:
d3:1c:ac:66:b4:2d:07:23:07:ce:54:ca:77:ca:e8:f3:26:e9:
61:55:04:6d:ac:ae:27:e2:0e:16:e0:40:a8:9e:dd:5a:b6:21:
f8:4f:83:13:7d:6d:e5:b9:4d:aa:1b:11:9e:60:4b:0d:8e:e6:
21:00:f8:04:81:de:d4:26:3a:03:60:a2:e6:5e:5c:3e:ea:d5:
31:e6:6d:3d:54:df:63:89:38:60:9d:04:8e:fc:47:7d:42:96:
9e:25:b3:f2:f2:b7:d8:83:4f:65:92:51:15:58:0a:9d:3b:08:
ee:a4:f9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:17:42 2025 by rpki-client