Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qGPf3T_5GOC1VufjHYAp5nWPI8g.roa
File: qGPf3T_5GOC1VufjHYAp5nWPI8g.roa (raw, json)
Hash identifier: s3yE/S4lJEqDNWKZ5Z9m5Adp9T8TkNf70Uh98vxc8W0=
Subject key identifier: A8:63:DF:DD:3F:F9:18:E0:B5:56:E7:E3:1D:80:29:E6:75:8F:23:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018456BC2F06D72D1CF946EFC6BCA3319122
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qGPf3T_5GOC1VufjHYAp5nWPI8g.roa
Signing time: Tue 08 Nov 2022 10:14:44 +0000
ROA not before: Tue 08 Nov 2022 10:14:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:bc:2f:06:d7:2d:1c:f9:46:ef:c6:bc:a3:31:91:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 8 10:14:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a863dfdd3ff918e0b556e7e31d8029e6758f23c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:df:01:73:8b:81:f0:9f:1d:76:bf:0d:a4:f8:
95:c8:ba:78:0f:db:8f:a6:36:d3:2a:c1:e2:7e:6d:
21:35:2c:d6:8a:48:14:33:3b:55:68:6f:bb:4f:a4:
1c:10:94:ff:e1:75:b5:b1:71:f6:3b:7e:b2:77:5d:
38:03:6b:a9:d2:f5:bc:fd:97:42:7f:b5:e0:ad:2c:
1a:64:bb:7a:e1:82:42:0a:59:41:86:b8:c5:33:6d:
14:47:1e:e7:7d:5d:7a:8d:7f:d4:05:b7:e9:f7:8f:
b4:a9:73:e1:b6:ea:30:e3:31:f0:82:f9:bf:dd:fd:
45:ec:d2:6a:1d:98:c6:56:a7:5f:be:2a:42:f4:f2:
a3:2f:4a:06:5e:f6:2d:4f:63:27:31:da:ab:fc:56:
c8:49:49:9b:59:ef:95:75:38:8a:fe:94:fb:d7:81:
a9:ee:57:14:61:57:29:26:68:d0:19:64:ee:2d:ed:
b4:b7:d3:fd:01:56:e5:f0:8f:5d:1a:e3:d7:35:70:
cb:60:d4:e0:98:33:58:5c:d9:49:29:09:16:c1:3a:
8f:ca:8d:24:75:58:24:f1:71:0a:e5:ab:ef:44:ee:
68:33:d6:e6:83:ed:0e:f9:7f:13:c5:a6:bf:bd:46:
75:ba:6b:67:34:3a:b5:57:22:3d:23:84:64:1e:34:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:63:DF:DD:3F:F9:18:E0:B5:56:E7:E3:1D:80:29:E6:75:8F:23:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qGPf3T_5GOC1VufjHYAp5nWPI8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:b4:fb:ca:6a:a9:c2:c9:1e:e3:1e:63:b0:a1:c3:e2:92:5c:
00:c6:57:34:c0:a6:bb:4b:f7:f5:17:36:2d:27:21:04:44:e6:
d7:2a:ed:df:c6:03:52:84:c7:68:20:9d:8e:eb:63:f0:7a:c4:
16:b7:93:5a:c5:5e:97:65:1a:cc:b8:c1:d4:43:d7:dd:43:4c:
bb:90:c0:32:b2:7d:cf:a9:12:ea:82:8e:80:92:84:6f:3e:8d:
ca:9c:38:33:2a:50:97:26:d4:f5:d8:32:96:52:ef:de:ae:1a:
38:81:f5:b4:5f:89:ee:44:9e:09:c5:d3:ba:4e:a7:05:e2:d6:
48:ff:a6:99:d5:a1:14:14:6a:52:66:4f:49:32:1c:b9:56:18:
57:f3:7a:90:0d:2a:32:2f:22:87:4d:30:84:c9:4b:6e:85:1d:
73:82:0d:aa:d7:69:b8:93:7a:21:c9:79:de:fe:36:f3:b8:02:
11:5c:22:ee:af:33:40:8c:64:6f:31:8c:a3:00:e3:61:18:7e:
ba:3d:c8:6e:15:30:af:82:54:75:33:03:05:f0:17:59:31:ce:
2a:07:f6:60:a8:b6:93:fe:bf:ac:c3:c6:d5:35:41:dd:08:52:
39:e5:00:30:d3:cd:a5:e7:58:e0:f3:43:59:23:1f:c2:88:6c:
e7:fe:6e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:46 2025 by rpki-client