Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q6LuDdLzKj-1MPlb2YIPQzfLJB4.roa
File: q6LuDdLzKj-1MPlb2YIPQzfLJB4.roa (raw, json)
Hash identifier: hegL1r+PzA+G45ZTfOAFk4IubkmK1W1YmgnErKqNrRA=
Subject key identifier: AB:A2:EE:0D:D2:F3:2A:3F:B5:30:F9:5B:D9:82:0F:43:37:CB:24:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185578C2AA8D2E93A8286D9E046C78F79AA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q6LuDdLzKj-1MPlb2YIPQzfLJB4.roa
Signing time: Wed 28 Dec 2022 07:04:41 +0000
ROA not before: Wed 28 Dec 2022 07:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:578b:efa0/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:57:8c:2a:a8:d2:e9:3a:82:86:d9:e0:46:c7:8f:79:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 07:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aba2ee0dd2f32a3fb530f95bd9820f4337cb241e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:74:80:47:95:4a:77:93:d3:7c:65:82:5a:
c1:7f:71:db:86:8f:01:71:01:a0:30:94:da:77:ee:
1e:d1:d5:6c:39:14:08:31:02:a6:2e:7a:84:7c:5a:
e0:7e:34:42:97:58:39:5e:c0:51:2d:82:1f:26:49:
ee:57:65:f4:3f:b3:c6:75:4b:df:f4:ef:11:c6:8f:
64:9a:b5:1a:45:63:39:e2:8f:06:c5:ea:bf:82:bd:
06:97:8e:37:45:e5:cd:df:c0:15:31:36:e2:b1:ef:
3e:66:2b:e5:b2:99:a3:53:38:a2:f8:df:4e:26:b6:
75:f5:08:5d:e2:b8:a2:2d:aa:bb:30:30:07:2f:97:
b0:34:dd:89:db:ce:5e:ac:72:7e:e8:37:3f:f5:2c:
29:8b:aa:56:86:77:53:74:26:2d:64:11:8f:22:57:
c7:42:00:16:ac:1c:9a:9c:ad:70:9b:07:f2:c7:43:
f1:66:82:3d:23:ef:fb:9f:ee:87:9f:35:b3:0c:7f:
06:14:f2:6a:dc:d4:c4:8b:6b:3f:9e:94:61:2a:d4:
06:90:2b:21:43:95:9d:5a:5a:ef:7d:ca:4b:82:cc:
a9:da:e4:27:97:de:cb:d8:6d:4a:fa:8c:06:e8:5a:
72:23:91:56:38:68:11:05:a1:42:90:a9:11:ef:de:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A2:EE:0D:D2:F3:2A:3F:B5:30:F9:5B:D9:82:0F:43:37:CB:24:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q6LuDdLzKj-1MPlb2YIPQzfLJB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:22:eb:8b:f0:aa:51:8a:98:dc:1c:12:91:30:a7:e6:32:44:
71:38:cc:19:77:1e:dd:58:9a:b1:b0:d3:14:55:ac:b4:58:6b:
21:79:0e:f8:88:bd:2c:c5:31:96:23:2c:8f:48:ea:d7:0a:84:
4d:77:4c:a3:97:c4:b2:16:65:a1:f1:d6:e4:93:06:07:b7:d8:
f1:1f:a9:f6:33:aa:4a:85:53:57:03:04:f4:04:29:fd:43:f3:
12:ba:0d:c6:4c:ce:a0:66:80:b0:dc:1b:c3:25:e9:91:fc:d7:
a5:c5:5e:d4:7a:97:ba:92:80:56:32:dc:00:65:33:61:09:da:
82:f4:6a:c3:24:1f:30:c6:3a:e0:e5:bd:9f:72:8e:80:8b:47:
6b:6c:93:aa:b5:6d:c9:a9:58:34:2f:72:0f:b1:a2:61:dd:37:
2f:a0:32:05:d9:96:b6:96:f0:90:b0:c7:ea:ec:df:18:97:ee:
9f:98:33:7e:79:f5:35:ae:53:48:16:9a:b4:0e:c7:1c:f5:0a:
84:fa:5d:2f:9a:ed:e4:2a:94:2a:4a:1f:15:99:c8:98:9f:c1:
0a:18:d0:cd:12:3f:a2:a9:e0:4b:72:47:64:f8:97:45:8f:df:
d4:d1:f1:ee:e6:0c:fc:34:36:21:c9:1b:b9:b0:20:49:c5:e7:
27:4a:e2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:34 2025 by rpki-client