Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qGtIRlsSJ7URHEI92jvhhbFkscc.roa
File: qGtIRlsSJ7URHEI92jvhhbFkscc.roa (raw, json)
Hash identifier: r3Jf1LaLku2nSNdpYgilVDu4f+QViyu9ODJ4jLFZGpk=
Subject key identifier: A8:6B:48:46:5B:12:27:B5:11:1C:42:3D:DA:3B:E1:85:B1:64:B1:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1E3FEC7532A9D663598A41ED243E7D1F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qGtIRlsSJ7URHEI92jvhhbFkscc.roa
Signing time: Tue 22 Aug 2023 17:17:00 +0000
ROA not before: Tue 22 Aug 2023 17:17:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1e:3f:ec:75:32:a9:d6:63:59:8a:41:ed:24:3e:7d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 17:17:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a86b48465b1227b5111c423dda3be185b164b1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:6d:8e:7d:94:db:0c:79:23:60:5a:f9:09:
c5:d6:c9:81:54:d2:a9:80:b1:e7:0e:ae:19:ae:c0:
e2:fc:06:ea:3e:57:59:6f:23:01:ca:94:96:1c:64:
d4:80:b1:fb:18:29:57:c6:0e:32:c0:1c:dd:a3:97:
8a:08:54:6f:dd:31:28:94:9e:15:59:82:71:97:06:
63:d5:84:a8:11:2c:6b:36:22:a3:ad:59:1b:e7:20:
10:3f:ea:d3:e5:5f:c1:b0:59:01:f9:59:06:2a:49:
e6:97:48:e1:60:52:47:98:b5:3b:30:c9:2c:71:7f:
82:e1:30:75:bb:3e:40:12:d1:9c:25:64:71:f5:c2:
e4:8f:11:aa:9b:f4:f7:c5:54:3f:18:50:ed:54:2e:
ab:11:ef:28:39:25:5b:71:10:1d:74:fa:58:e0:0e:
be:3b:73:72:90:e5:95:ae:99:b5:00:0a:4d:ff:96:
62:56:95:c7:cc:7e:dc:61:2b:47:75:90:07:ab:76:
49:3c:1b:c8:60:e8:60:47:00:cb:27:bd:16:c7:1a:
87:65:08:2b:d4:14:f8:ad:f9:16:28:2d:9d:b7:e0:
d1:32:f0:13:52:cc:9e:d0:9d:ae:9c:35:75:3d:1c:
05:e4:07:5c:91:39:c9:77:5a:2f:e7:88:10:4d:09:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6B:48:46:5B:12:27:B5:11:1C:42:3D:DA:3B:E1:85:B1:64:B1:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qGtIRlsSJ7URHEI92jvhhbFkscc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:48:4a:a9:23:e2:cb:c0:e5:95:25:c6:d2:f4:3a:ca:ee:7e:
1d:d0:a9:b2:71:e2:2b:c3:d7:d9:ad:52:c3:04:99:10:59:10:
d5:19:1c:71:2d:2e:18:49:ac:5c:0d:e7:17:4d:66:e2:c6:73:
00:c7:46:8e:9c:cb:e4:5d:d6:a9:51:f7:e1:5a:e8:35:1b:cd:
01:de:dc:56:03:09:38:cd:b0:87:25:9d:38:3b:cf:f4:bb:08:
5d:dc:e6:63:60:b3:95:9d:23:67:11:5d:af:d0:2e:d3:ff:01:
94:b4:47:49:b9:c2:90:41:66:d8:ea:91:b1:48:c8:38:04:64:
c0:2f:39:94:49:03:3c:29:d4:d0:6e:96:87:ef:8d:e1:b1:15:
02:30:22:b0:9e:88:48:be:a3:f6:27:73:8d:15:07:41:12:2f:
1e:73:29:da:9a:71:aa:af:fa:f7:7e:8f:16:c8:0b:a9:b0:33:
a2:25:35:33:4a:fe:14:a1:ea:25:7c:2c:d5:2f:b8:fa:26:34:
65:07:30:82:e7:89:72:f8:74:fd:ce:41:e7:d7:b3:fc:e1:c2:
b3:4e:a6:4e:f8:ed:2b:49:e6:92:9a:90:4d:6c:55:34:56:55:
f0:9d:a5:3e:6f:d1:bd:88:96:e1:9e:08:8e:95:60:47:36:a6:
7c:6e:d6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:50:01 2025 by rpki-client