Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qEcI2mIof5K8mu0gVreJlaIjEKo.roa
File: qEcI2mIof5K8mu0gVreJlaIjEKo.roa (raw, json)
Hash identifier: mfQzb1LN9mZt3dG5mQ3+UJP5H5bioBDXt25V5kNZKjI=
Subject key identifier: A8:47:08:DA:62:28:7F:92:BC:9A:ED:20:56:B7:89:95:A2:23:10:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A428FAF5A56570E769CEFB339A23D57F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qEcI2mIof5K8mu0gVreJlaIjEKo.roa
Signing time: Fri 21 Apr 2023 14:12:41 +0000
ROA not before: Fri 21 Apr 2023 14:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a4:28:fa:f5:a5:65:70:e7:69:ce:fb:33:9a:23:d5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 21 14:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a84708da62287f92bc9aed2056b78995a22310aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b8:33:fa:9a:c7:75:90:ec:94:70:34:eb:c3:
28:98:06:e3:c5:b7:df:5c:04:7c:92:f3:2d:8f:96:
9b:a5:af:88:6e:a3:82:de:b3:ab:80:63:57:bc:fe:
64:d2:15:48:e4:f1:11:96:d8:08:d9:25:3a:f9:1c:
77:21:a0:c0:0d:12:d4:41:23:96:11:9e:77:81:d7:
87:b3:ba:36:a6:a7:82:18:6a:fa:f1:b8:11:4c:6e:
ad:2d:bf:5d:d1:39:7d:96:4e:1d:77:db:52:bd:7b:
ef:62:0a:89:6d:19:12:0f:08:54:c4:22:c5:e8:00:
66:a4:9a:49:5c:2a:be:d6:82:30:b9:79:5d:9b:30:
aa:3e:20:c2:a0:40:68:98:d8:80:81:c4:47:c8:93:
26:1b:54:be:dd:9b:c9:e7:5e:e8:2d:b0:24:53:45:
34:f5:ae:24:b2:de:c1:53:a8:5e:a5:1a:54:2d:55:
67:4f:8e:16:97:3f:2e:4b:53:b0:4a:d8:e5:5d:05:
63:3e:e9:94:ef:51:85:02:67:00:18:b7:fa:10:8e:
a5:3c:6e:71:67:2f:78:d0:b5:a1:0f:67:e1:0c:97:
d6:a4:ad:27:23:51:d4:6a:98:20:f4:0a:9e:b5:cb:
22:58:8f:2b:30:d4:a1:d5:4d:1b:56:d3:80:2f:94:
55:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:47:08:DA:62:28:7F:92:BC:9A:ED:20:56:B7:89:95:A2:23:10:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qEcI2mIof5K8mu0gVreJlaIjEKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:5e:87:c0:4c:55:f3:31:e8:82:c3:96:ec:79:bb:1a:18:45:
78:20:22:81:6c:df:21:d0:0d:dc:f2:0b:39:52:56:90:cc:70:
93:e7:8f:2b:bc:7d:04:de:e5:ac:b7:62:4b:ab:c0:2a:78:6e:
95:8c:60:4d:28:8b:e6:71:09:ed:ca:c8:d8:d5:a4:f4:1b:98:
a1:8e:32:be:65:d7:61:53:16:59:de:98:af:4d:c7:04:fa:c0:
99:1c:40:55:45:7b:a8:e7:5c:68:23:c4:a3:ff:78:ea:da:af:
fa:07:0b:6e:25:82:62:31:8d:af:08:02:3f:e3:f4:f2:90:b1:
53:e0:33:f0:20:5c:c1:78:94:4d:87:04:94:29:a5:3c:be:bf:
c5:d9:33:fa:83:b3:91:12:34:ad:8b:9a:16:58:b6:9a:b2:3a:
02:b7:b3:bb:e1:2b:82:06:d9:2c:d3:c2:82:27:7f:dc:9f:df:
a3:90:d9:97:6e:35:dc:f7:0f:1f:72:81:23:80:67:14:c6:c8:
76:62:db:2b:12:59:71:76:f4:90:2b:93:f3:bd:8d:49:2a:79:
c4:13:00:13:4d:1f:09:f6:f8:9f:7e:69:b5:80:2f:fd:a7:f1:
6b:e2:9c:5a:d2:98:e9:44:73:5a:f3:0d:93:b0:6f:66:fb:9f:
35:29:41:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:55 2025 by rpki-client