Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qF3ybtjpLt7EyZf21gyowdvtOO4.roa
File: qF3ybtjpLt7EyZf21gyowdvtOO4.roa (raw, json)
Hash identifier: +l8e/JQiDF7xjRCkef/HTDOv1qvGRk6S8FRZKoIrl5k=
Subject key identifier: A8:5D:F2:6E:D8:E9:2E:DE:C4:C9:97:F6:D6:0C:A8:C1:DB:ED:38:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D92DF5ADB2DE4191BD6820503EE7F758
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qF3ybtjpLt7EyZf21gyowdvtOO4.roa
Signing time: Mon 13 Mar 2023 04:15:13 +0000
ROA not before: Mon 13 Mar 2023 04:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d9:2d:f5:ad:b2:de:41:91:bd:68:20:50:3e:e7:f7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 04:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a85df26ed8e92edec4c997f6d60ca8c1dbed38ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2d:02:ae:4a:2f:5c:c3:4d:ea:8d:8e:fe:d3:
6f:66:83:62:11:94:95:1b:44:8b:e1:40:57:1d:7e:
07:41:94:c7:0f:9c:f0:98:15:ca:6a:8e:93:fb:63:
77:f0:62:98:94:6a:be:02:e6:7f:d2:c8:7d:ba:74:
69:3e:a9:1c:f1:ec:a7:e3:c8:c9:ca:cc:fb:5c:ef:
4a:cc:14:3c:07:71:7e:80:33:34:57:95:3d:a4:48:
25:48:b8:c3:2a:bf:bf:3f:39:c4:3a:76:0d:d0:8e:
75:e0:d0:8d:3c:49:84:2a:87:1e:3b:33:15:86:47:
b0:f0:98:d1:ae:30:bd:4a:3a:7a:79:73:83:d9:72:
bc:71:6b:12:80:01:74:cd:80:89:e6:2a:c4:97:ee:
57:19:b7:bf:8b:ea:49:c7:20:0d:61:45:44:80:b7:
c1:65:91:53:f0:e7:2c:0a:5a:eb:4a:6f:a9:bd:1f:
f5:6c:6b:5d:50:6b:78:5a:ac:7a:68:6c:24:ae:e8:
77:9e:21:f8:e0:54:ae:79:4b:03:d4:e7:64:9a:74:
45:61:ae:ae:a7:86:13:41:be:ac:77:41:9c:d7:32:
16:49:2b:57:a6:07:0b:5f:d9:64:b1:7a:ba:6a:32:
8b:41:3b:b1:88:a1:83:54:53:7d:88:3c:6e:c7:de:
3c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5D:F2:6E:D8:E9:2E:DE:C4:C9:97:F6:D6:0C:A8:C1:DB:ED:38:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qF3ybtjpLt7EyZf21gyowdvtOO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:12:ba:0b:7c:7c:81:0d:17:19:16:3b:d2:16:0c:cb:f6:3e:
0b:89:73:f1:0a:d3:3a:b4:2e:1d:1b:bc:d1:6f:23:8e:0e:21:
07:00:f6:9c:dc:7a:f5:22:e7:40:0f:62:c4:20:f5:99:4c:47:
b3:a3:c4:13:3f:66:03:50:c4:35:54:34:36:a3:20:fe:67:6d:
92:5b:be:75:67:2e:31:b6:49:67:b5:68:8d:6a:41:4a:e3:80:
d1:32:07:d2:0f:50:ad:4b:84:1e:9f:33:0b:5e:6e:2d:b7:00:
9d:25:62:ec:6b:f1:b4:50:18:f0:5d:e4:96:bf:b9:10:04:55:
cc:3a:62:f5:ae:88:ba:64:56:02:5d:5a:3f:d9:14:b3:68:6c:
2a:41:0b:21:2b:b1:ab:57:65:f9:c0:70:e9:f3:0c:e7:a1:2c:
1e:b2:13:a9:29:ed:f3:41:f7:53:0a:e4:3f:57:78:51:db:97:
ff:2a:31:e9:ae:b1:57:84:44:24:90:92:a1:37:43:c5:8f:93:
9d:f8:f4:5b:bf:7e:88:aa:38:07:2d:ce:51:ac:87:52:fb:9d:
fa:07:b4:41:d6:df:c4:82:0a:3f:bc:6d:cf:7f:f0:03:52:d1:
a2:41:4b:01:92:59:fe:f3:37:6b:f0:e9:8b:93:ba:0c:8f:31:
6a:f9:2c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:02:15 2025 by rpki-client