Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q86KjGqK5qIqnxNsIxrIs2ZaLpE.roa
File: q86KjGqK5qIqnxNsIxrIs2ZaLpE.roa (raw, json)
Hash identifier: IpT8XJTsAzJVXoEoh3ryzK9mw6Z4XNF/VWHYQPAPvHI=
Subject key identifier: AB:CE:8A:8C:6A:8A:E6:A2:2A:9F:13:6C:23:1A:C8:B3:66:5A:2E:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F2AEF31DA593476AB3350C9A283EB1BA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q86KjGqK5qIqnxNsIxrIs2ZaLpE.roa
Signing time: Mon 14 Aug 2023 06:14:58 +0000
ROA not before: Mon 14 Aug 2023 06:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f2:ae:f3:1d:a5:93:47:6a:b3:35:0c:9a:28:3e:b1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 06:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abce8a8c6a8ae6a22a9f136c231ac8b3665a2e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:68:89:dd:4e:f0:c5:33:9e:c7:24:13:0d:7a:
09:6a:6f:75:f4:66:17:0d:fa:f7:15:1b:20:75:4b:
05:bf:e1:48:00:36:5d:be:b3:06:08:74:82:43:a1:
6f:c4:86:25:a2:7a:bc:a2:78:c9:be:e6:97:da:88:
05:44:33:48:c4:19:68:40:7e:99:c1:76:12:2f:58:
c5:64:6a:b1:2c:e1:c6:71:70:f6:a8:df:39:71:1e:
34:ab:5a:54:75:98:26:b8:2a:29:68:76:7a:ed:d3:
4c:33:3d:10:e9:40:cc:6e:26:5a:7a:ee:18:c9:2d:
fa:5b:38:25:44:22:62:a4:4b:74:db:9c:67:7b:a4:
e5:3a:c7:9b:2c:74:3c:37:3b:a8:8c:06:19:bc:e6:
e5:34:6a:58:8a:db:61:52:83:eb:e4:66:80:bb:21:
61:1c:af:2e:bf:54:7b:80:11:98:32:52:1a:c6:3a:
b1:9e:8e:2f:bb:85:bc:52:5f:88:d0:f5:a3:6a:48:
d4:66:3c:9f:9f:bc:36:bc:d7:3b:ae:dd:ca:8c:49:
1b:1f:a7:ee:f0:4e:b2:7f:19:5e:4b:50:d8:b9:62:
19:b8:94:00:29:d8:d8:2f:58:90:f1:50:09:75:f4:
c4:4b:ef:63:83:f8:34:b7:1d:3a:b7:84:d7:d3:b3:
13:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CE:8A:8C:6A:8A:E6:A2:2A:9F:13:6C:23:1A:C8:B3:66:5A:2E:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q86KjGqK5qIqnxNsIxrIs2ZaLpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:ee:b1:30:a1:55:14:8a:d0:2a:1b:2f:ca:a7:fa:60:bf:98:
bc:fb:31:b3:55:ea:e5:c5:6d:42:ef:8b:50:7b:d4:08:42:ec:
6d:d4:aa:33:ef:d6:cf:22:f9:8f:f6:ff:80:da:b7:22:50:11:
86:7a:70:fb:ba:5d:73:be:6d:04:9c:a8:bc:df:5a:d3:dc:75:
7f:59:1e:3f:a7:9f:cf:aa:d6:5c:d3:0d:9c:ad:ec:6d:27:f1:
4e:6b:51:23:9b:1f:8e:7f:5d:a6:b4:2d:ce:ad:e7:59:b6:a2:
e3:98:4c:40:d3:4a:5f:5f:71:90:3c:07:c5:2b:e3:1c:3a:9d:
6d:55:83:21:87:a1:2f:c0:98:00:33:75:6f:e3:ab:36:12:bc:
c7:73:1d:5c:5c:cf:97:ea:60:cc:99:ae:44:c3:f6:ed:68:41:
db:a0:11:39:81:e6:52:b3:56:32:ce:a9:44:5e:f6:c3:c5:4c:
c5:8d:ae:01:e3:3f:b7:60:fc:a5:f9:24:17:26:68:c2:b2:c7:
25:56:26:2a:1d:2e:72:36:cc:cd:34:10:95:7d:a5:13:4a:1d:
f9:af:75:0d:99:c3:e7:5b:c0:27:e9:3e:e0:cd:db:af:7c:56:
8e:92:7d:e5:11:58:ef:fb:1c:59:48:a6:f8:91:d6:5f:a0:33:
ce:b9:1e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:48:41 2025 by rpki-client