Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q7hjTUepUSLr7q6OZJkP6iPRXmw.roa
File: q7hjTUepUSLr7q6OZJkP6iPRXmw.roa (raw, json)
Hash identifier: J2tjtFxNQibdSbmBQ8Pd8WWgDSsy68b7G53w26uvixQ=
Subject key identifier: AB:B8:63:4D:47:A9:51:22:EB:EE:AE:8E:64:99:0F:EA:23:D1:5E:6C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867639637C7A723D1163F79C041A346BC6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q7hjTUepUSLr7q6OZJkP6iPRXmw.roa
Signing time: Tue 21 Feb 2023 23:05:17 +0000
ROA not before: Tue 21 Feb 2023 23:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:7638:758d/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:76:39:63:7c:7a:72:3d:11:63:f7:9c:04:1a:34:6b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 23:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abb8634d47a95122ebeeae8e64990fea23d15e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a5:70:69:83:81:77:f2:85:ca:47:80:3f:b9:
7d:2b:10:36:a5:c3:50:15:62:02:67:81:24:9a:9f:
91:a0:2c:f3:62:64:c2:1e:99:87:88:0b:e1:6b:22:
81:bc:8e:76:2a:98:d0:eb:91:ba:13:b1:be:07:83:
f0:0b:62:85:dc:f8:1a:f9:c1:33:84:3b:df:5d:5d:
69:97:4a:11:db:49:7e:70:1d:fc:71:9b:bc:77:d2:
a5:eb:16:ac:23:b6:c8:b9:5e:30:fe:83:a1:74:74:
e6:9e:9d:2b:fe:fa:9b:cc:37:d2:e1:81:8e:e5:b2:
c8:b4:30:ab:28:8d:cf:2b:3b:05:d2:55:b4:4c:1d:
11:d3:ca:7b:9f:e8:db:74:d9:5c:de:83:bf:1b:7d:
e8:d4:2d:73:19:4d:16:90:f0:32:ba:c0:48:7f:18:
8f:ea:07:ca:2c:33:0c:0c:b3:78:7f:7c:c4:8e:3e:
8b:b6:d5:59:ab:74:de:2d:0d:82:18:91:29:ce:ae:
6b:42:ae:b9:c2:5a:da:fb:64:8f:67:f1:7f:91:b6:
2e:7c:de:0f:57:ca:e6:ee:a8:66:e9:e0:50:7e:36:
ce:61:f3:14:fc:0b:70:85:0d:c1:6c:dd:f8:7d:5c:
69:98:17:78:54:da:b0:a3:83:fc:74:8c:2b:6d:2d:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B8:63:4D:47:A9:51:22:EB:EE:AE:8E:64:99:0F:EA:23:D1:5E:6C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q7hjTUepUSLr7q6OZJkP6iPRXmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:f1:b4:20:bd:b8:e4:58:f1:d8:97:16:40:9c:ef:4a:b5:73:
f3:52:5b:2e:ff:03:52:7b:65:f5:14:fc:76:09:8d:f8:d0:88:
fd:8c:d2:f4:e9:e1:08:c1:ac:06:14:f2:7f:ce:d8:f4:99:03:
00:12:7b:d3:5d:5e:76:b8:67:9b:1b:a1:1a:65:f9:f0:ab:f6:
9d:ca:b9:f0:7c:a5:87:06:6f:6a:11:78:6b:b5:b8:48:a5:f1:
bd:07:7b:5c:33:be:7e:14:33:57:d2:25:b6:c6:33:c7:13:ef:
f2:01:52:21:3f:17:ff:2e:b9:02:81:81:06:54:0b:7c:e7:d4:
62:c1:15:f4:91:d3:38:db:90:ce:51:ba:c6:e9:eb:ed:d4:68:
79:cf:30:b0:2d:ca:e7:3e:32:cb:86:57:94:2d:4c:33:a5:60:
78:7d:ee:54:f0:f6:04:bd:07:c6:95:04:16:3a:1d:4a:d7:aa:
23:c3:5a:10:9f:e8:f3:21:f1:7d:be:f8:89:51:8a:12:80:88:
e6:5c:99:29:4c:26:d0:4b:17:f3:a3:00:83:77:45:f0:c2:83:
75:d8:13:08:8e:f0:e9:61:27:66:2c:4b:3e:fe:8f:b6:9f:79:
90:f5:5e:19:7d:0d:a2:c1:ce:49:dc:f5:cb:fd:2f:5d:d0:dd:
1f:7b:47:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:14:29 2025 by rpki-client