Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qAUFCxvpB_nf-v96AyY-4NBMOko.roa
File: qAUFCxvpB_nf-v96AyY-4NBMOko.roa (raw, json)
Hash identifier: t14hcDjKoffics5qGdMWzUGJjGMBbZrgTp+1OqfzUuw=
Subject key identifier: A8:05:05:0B:1B:E9:07:F9:DF:FA:FF:7A:03:26:3E:E0:D0:4C:3A:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A86C48D66BD28019FF16751C4AE3C19E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qAUFCxvpB_nf-v96AyY-4NBMOko.roa
Signing time: Sat 22 Apr 2023 10:04:41 +0000
ROA not before: Sat 22 Apr 2023 10:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:a86b:dd79/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a8:6c:48:d6:6b:d2:80:19:ff:16:75:1c:4a:e3:c1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 22 10:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a805050b1be907f9dffaff7a03263ee0d04c3a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:ff:62:1f:91:a6:f3:dd:a2:f3:f6:d7:79:
95:39:26:59:03:92:30:b4:df:f6:ad:be:95:9b:83:
a7:b1:20:07:3b:44:9d:e5:da:73:72:34:69:68:5a:
49:77:92:8d:ca:3e:97:df:1f:98:e5:62:67:84:e3:
68:2f:2d:08:9d:8e:23:6e:11:7c:18:46:69:f4:62:
0d:0d:78:53:90:5f:1a:8b:98:0a:2d:ea:fd:16:18:
b7:1f:10:88:02:e1:8d:bb:48:bf:3d:b2:0c:fa:01:
62:33:fb:af:4c:ef:14:40:4e:d9:8d:48:73:27:be:
2c:15:9b:d4:01:5d:59:a9:70:41:bf:7e:f4:37:39:
ae:53:27:41:d1:d1:91:ef:d0:d0:67:79:f9:73:d6:
da:8f:dc:46:b4:a5:f3:b7:b8:9e:7d:07:52:39:16:
e7:d0:25:f4:9e:c8:e4:c9:bd:b0:0b:6e:e1:0b:1f:
b3:8e:2e:aa:7c:84:70:8c:a4:95:f8:80:3c:6f:4e:
a8:ae:a6:b5:28:ad:e7:45:f0:7b:22:51:02:c1:3f:
26:1b:aa:63:3e:59:25:b5:73:0c:54:61:b8:fe:69:
7e:10:eb:e9:86:64:74:4e:d1:8b:b0:7d:3a:24:b2:
76:1e:89:f5:1e:09:c8:c1:7c:c0:68:31:d6:95:17:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:05:05:0B:1B:E9:07:F9:DF:FA:FF:7A:03:26:3E:E0:D0:4C:3A:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qAUFCxvpB_nf-v96AyY-4NBMOko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:99:8c:95:c7:21:a8:1b:54:6f:3b:37:94:f9:3d:fd:3a:36:
36:d2:db:11:02:b6:46:2f:39:6f:83:77:68:6b:72:15:48:54:
c6:cc:4b:8c:e9:9e:bd:0f:52:ee:9a:d2:00:fc:10:e1:86:e3:
91:1c:ae:a6:de:0c:7e:60:a5:0e:a4:a1:47:da:0a:79:48:4d:
eb:79:04:f9:0e:b4:60:ab:8c:63:c9:b5:12:06:21:48:cf:e1:
bb:00:06:f3:e0:a7:27:0f:9f:0f:c2:0b:0f:17:1d:54:2c:85:
23:ee:b0:d7:1a:a5:3f:32:3d:b1:7b:7b:a4:49:95:21:66:80:
a4:35:10:41:5f:10:a9:ae:3f:96:5b:f7:5d:ad:62:70:66:c0:
71:10:19:81:46:82:3e:44:a5:f0:cd:39:d5:c5:1b:cd:21:d7:
2e:fe:e6:e8:72:e4:34:77:aa:22:54:a4:ec:b3:ad:cc:e3:7f:
a1:de:4b:94:d8:8b:5a:b8:98:ec:a3:e7:bb:ff:3c:ea:6c:06:
28:a1:20:36:78:53:e5:35:dd:50:ef:8e:ea:d2:bd:62:86:c9:
73:a0:2c:76:ae:9a:0d:37:2f:01:f4:5b:43:42:46:0b:8a:a7:
8b:9d:d8:9f:2e:f1:97:b7:58:24:ff:6b:1f:6b:e4:42:13:dd:
67:97:33:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:54:04 2025 by rpki-client