Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qC6-jwYOpY_70DpnIbNHgnEJmYA.roa
File: qC6-jwYOpY_70DpnIbNHgnEJmYA.roa (raw, json)
Hash identifier: LlAS6mE5gjJyJO6FOcVPamvjHoWtiofDNvReoVA5qyQ=
Subject key identifier: A8:2E:BE:8F:06:0E:A5:8F:FB:D0:3A:67:21:B3:47:82:71:09:99:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189ABA64283E6241E3C4203A44BEF35AA83
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qC6-jwYOpY_70DpnIbNHgnEJmYA.roa
Signing time: Mon 31 Jul 2023 11:12:27 +0000
ROA not before: Mon 31 Jul 2023 11:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:a6:42:83:e6:24:1e:3c:42:03:a4:4b:ef:35:aa:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 11:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a82ebe8f060ea58ffbd03a6721b3478271099980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4d:69:48:14:bd:85:01:72:95:c2:a9:af:63:
56:79:14:38:98:54:ca:a9:b5:f1:d9:c3:5c:63:08:
d6:50:dc:a2:f9:7e:74:4d:01:40:e5:24:bb:54:7e:
72:20:34:95:bc:6a:d7:dc:c1:3f:40:26:e7:31:c8:
2f:3a:4b:84:aa:46:80:b7:17:11:99:13:70:c7:23:
6f:37:f7:7e:4e:e2:28:0f:e3:07:08:58:64:5f:1f:
6f:7c:24:40:70:5e:61:95:4c:e0:13:92:9b:33:a2:
4b:13:c1:8d:a0:d6:a6:25:c2:bb:1b:69:63:16:b6:
7c:9a:ea:2a:3e:ae:c2:77:08:f7:12:8e:c0:ab:a6:
a6:10:87:59:7e:66:7a:20:40:1d:a5:0c:c1:7b:2e:
93:26:c8:1f:ce:9c:14:f3:2b:e8:9e:45:21:1d:76:
23:8e:24:cb:6a:3d:af:77:47:2b:7a:72:85:04:70:
a7:da:fe:c7:dc:c6:ea:0f:bf:8b:e0:6b:66:91:39:
2d:ee:b5:f5:62:c9:9d:5f:55:c3:f1:4d:d2:66:af:
08:f6:55:04:39:7d:f1:c2:38:f7:af:6f:56:87:07:
60:2d:30:55:f4:f4:a8:37:e7:fa:f6:ba:10:85:d3:
02:f8:9a:90:c9:18:59:c4:75:55:f5:70:4e:26:e9:
f8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2E:BE:8F:06:0E:A5:8F:FB:D0:3A:67:21:B3:47:82:71:09:99:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qC6-jwYOpY_70DpnIbNHgnEJmYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:2f:92:60:f9:16:e5:11:5d:18:6e:84:fa:96:a6:d5:c2:72:
83:55:84:34:30:9e:cc:2a:f9:99:56:e4:e5:1b:9e:a6:65:2a:
0e:85:a7:aa:67:87:36:77:de:41:61:db:25:f4:72:96:27:af:
c6:65:2a:df:c8:5d:26:bc:13:74:38:fc:3c:56:20:34:12:2e:
c9:34:7a:70:ce:f7:55:19:d7:48:e9:69:90:5a:c9:c2:6d:79:
1d:91:5e:a7:ad:47:18:91:0d:75:09:9e:26:55:72:df:7b:09:
e0:c1:98:41:d9:8e:05:29:ca:a7:4b:b5:20:0a:f1:9c:11:62:
3f:54:58:fb:58:72:77:ee:37:05:de:d7:c2:dd:ad:78:ba:d6:
96:a7:b1:bb:2c:4e:9b:46:30:96:23:4d:80:7b:e6:0c:6a:4d:
14:3a:bc:f4:d9:8c:ac:17:76:87:08:d1:0a:2f:2f:31:63:fe:
c8:8d:f9:7c:d1:7e:69:39:8c:c5:d2:6e:d0:ee:cb:e5:91:8d:
51:29:6d:e3:f5:b8:4c:93:10:70:83:73:f5:4f:51:c7:9b:5d:
89:a5:4d:b4:9e:9d:74:a8:26:5b:cf:04:be:5e:78:7d:27:38:
43:8f:87:dd:b0:22:c2:73:c2:f0:d1:88:7d:e5:6f:8d:fa:06:
a3:eb:44:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:00:34 2025 by rpki-client