Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qCtq9gAzHLFH15B735vVwVR33h4.roa
File: qCtq9gAzHLFH15B735vVwVR33h4.roa (raw, json)
Hash identifier: eKyLOR7vf4I8RcduqmOdn036NKvNs2bujncWEGCwTlE=
Subject key identifier: A8:2B:6A:F6:00:33:1C:B1:47:D7:90:7B:DF:9B:D5:C1:54:77:DE:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876058C28B8A46256BDABAA7EDB87CB5EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qCtq9gAzHLFH15B735vVwVR33h4.roa
Signing time: Sat 08 Apr 2023 10:10:42 +0000
ROA not before: Sat 08 Apr 2023 10:10:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:60:58:c2:8b:8a:46:25:6b:da:ba:a7:ed:b8:7c:b5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 8 10:10:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a82b6af600331cb147d7907bdf9bd5c15477de1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:63:0c:e9:09:75:62:78:c8:1a:60:bf:f9:e6:
fb:df:fa:35:0c:36:5b:bc:35:77:57:c6:86:e9:02:
42:da:5a:22:f8:b2:80:1e:e9:61:b6:f3:fa:d6:73:
7c:9b:ba:80:36:92:61:ca:b4:77:cb:27:9a:dd:fd:
60:3c:8f:c6:4b:34:f2:ac:8d:82:20:c4:9d:77:3e:
c6:f5:f2:c9:81:26:1a:a0:42:2a:e8:fb:e7:46:59:
9a:eb:87:e3:c9:79:9a:aa:0f:57:bf:73:20:ca:1c:
b0:a4:e8:74:24:6f:3e:45:af:85:78:9b:1a:70:88:
05:5d:13:44:9d:5b:e4:ea:fe:47:55:93:0c:ad:fa:
8a:ef:3d:b5:eb:72:4a:b8:5b:bc:0b:e1:f7:48:5d:
76:f0:9f:cb:e5:ac:9e:23:79:b6:d3:82:2d:99:a6:
ea:70:2d:ce:35:b9:e3:01:bc:ee:9a:7d:53:8a:f8:
4b:d5:41:97:f6:25:35:aa:54:ea:09:09:3e:2a:3a:
cf:1f:73:eb:b7:9e:26:d7:14:bf:2b:c9:3e:2c:5e:
d2:67:d0:c7:f9:52:4e:a9:1b:5d:94:b7:69:61:1b:
4b:30:f2:aa:ae:e5:58:ca:87:45:0e:77:b9:f9:4f:
f6:3e:db:95:9d:1f:f9:ca:b5:4a:fe:b6:f5:e3:e5:
51:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2B:6A:F6:00:33:1C:B1:47:D7:90:7B:DF:9B:D5:C1:54:77:DE:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qCtq9gAzHLFH15B735vVwVR33h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:1f:dd:03:c0:b8:13:d6:2d:06:2c:f5:b8:a2:63:c9:1d:58:
70:66:3c:13:4e:c2:2f:d6:90:80:68:3c:dd:52:a3:4b:12:b3:
17:ea:b2:1b:6b:e4:dd:ea:9c:49:e3:aa:14:09:cb:19:45:44:
51:05:2a:0d:2d:02:c4:a8:87:9a:d9:c9:2c:c6:a4:c2:3f:17:
85:35:04:9d:6d:83:0f:cc:43:ae:ba:69:76:28:49:eb:f9:a9:
1d:7e:d1:3c:3a:8f:02:e4:53:c3:f1:60:dd:25:ed:6d:34:d4:
1f:3c:f9:b2:2d:a1:af:6a:25:7b:a7:52:bb:35:84:90:a1:e8:
89:bf:16:3f:0d:a9:79:96:16:4d:77:fe:7b:89:69:1a:af:ad:
00:3d:c0:fa:7b:69:94:3b:10:74:1d:27:7c:af:d4:ac:5a:32:
b5:dd:69:0f:18:f1:ee:3f:a7:bf:4a:19:f7:18:3e:b0:cd:f6:
90:46:87:0c:3f:ce:c1:b9:94:3f:3c:b7:37:81:4e:a6:6e:92:
25:b6:3a:c1:f3:91:3f:87:2f:97:c7:3f:88:63:73:fb:f9:cb:
de:69:32:ed:a4:21:01:9b:93:d4:58:29:6f:ef:78:50:58:15:
66:b9:28:25:9c:d7:80:16:59:43:86:63:7e:d6:d4:a8:20:ef:
17:03:44:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:31:51 2025 by rpki-client