Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qI1LUz8VauskW2cyETrO_40ycuU.roa
File: qI1LUz8VauskW2cyETrO_40ycuU.roa (raw, json)
Hash identifier: HeFQpVgEaVvI9R1l+3gyjaZnMiW6SyZakfHU1EH0Jco=
Subject key identifier: A8:8D:4B:53:3F:15:6A:EB:24:5B:67:32:11:3A:CE:FF:8D:32:72:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018971EDA46767B5DEBABFB43F7009761E93
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qI1LUz8VauskW2cyETrO_40ycuU.roa
Signing time: Thu 20 Jul 2023 06:12:26 +0000
ROA not before: Thu 20 Jul 2023 06:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:71:ed:a4:67:67:b5:de:ba:bf:b4:3f:70:09:76:1e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 06:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a88d4b533f156aeb245b6732113aceff8d3272e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:3f:7a:b4:7b:24:d9:bb:cd:46:0f:17:d7:
9c:a6:b5:d0:9a:bf:67:e5:e0:54:01:6e:9e:c7:90:
49:78:26:51:b7:05:7e:17:b5:a6:03:e9:e9:9a:f6:
9a:6b:d7:dc:44:16:0b:7f:32:10:b7:94:23:31:c3:
40:0e:ad:59:b2:2b:b5:05:6c:00:da:47:36:36:b5:
ee:64:75:41:5c:d6:93:62:4e:0b:08:dc:27:74:d2:
b7:06:68:79:8c:f2:fa:d0:bf:f0:4c:34:eb:1b:41:
92:60:f1:71:9f:dc:db:3f:09:ff:0f:74:59:50:58:
87:eb:a7:c7:d7:cb:62:41:d8:60:af:c8:d7:c1:52:
90:9c:7b:94:38:60:26:21:81:d8:aa:0a:42:51:51:
f4:31:a4:c5:f7:b5:c0:46:ad:88:34:b7:3b:57:f3:
d9:b8:64:2a:cf:a4:8b:47:7e:4b:92:8d:ff:36:b9:
a0:c2:15:b5:b2:45:71:65:75:21:24:e2:4d:fe:df:
14:d5:af:8d:76:d5:af:e5:6d:a7:69:84:5d:94:f9:
16:ac:5d:16:58:12:49:91:ea:40:4a:4b:69:db:e2:
73:5c:55:ed:d9:9c:f7:80:73:02:1c:a9:26:3e:24:
16:1c:6e:de:0c:77:c1:e9:5d:c0:87:b9:fe:41:fb:
1c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8D:4B:53:3F:15:6A:EB:24:5B:67:32:11:3A:CE:FF:8D:32:72:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qI1LUz8VauskW2cyETrO_40ycuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:93:25:72:27:fc:da:08:41:42:ff:73:43:7e:59:c9:85:bc:
40:92:e4:62:f7:40:24:4f:50:29:db:67:27:87:0b:97:3c:ed:
aa:ac:64:ab:2a:04:85:0c:09:ee:44:06:16:b1:72:67:f3:e2:
dc:ba:df:3d:b2:97:0f:5d:b7:9b:6c:e5:82:1a:87:43:93:5b:
09:1c:16:cc:e8:51:2c:1c:4c:c0:e5:82:f5:1e:12:f7:3c:ce:
88:5b:33:33:e2:a3:4e:67:bf:a7:37:33:f0:12:66:3d:c5:b1:
ad:0d:52:b8:e8:ba:7c:c9:9e:97:3e:ec:7d:f5:ed:a2:66:e4:
76:57:66:f0:69:90:d8:6d:9a:3c:74:af:72:9d:ab:b7:9a:f8:
27:cf:9e:3e:d6:69:79:23:74:ca:16:91:38:09:4d:d6:aa:c7:
e4:3e:31:8c:68:90:58:f4:cd:d8:a3:5d:6a:10:ac:35:b9:48:
57:fe:39:e6:53:39:a2:b6:c7:ab:39:98:67:0f:c4:e3:e8:50:
19:3a:47:c2:e8:e6:91:49:1d:46:9b:d5:2c:1e:b5:e5:13:41:
b9:27:db:06:01:4d:c7:e0:a0:7d:d0:82:78:e1:e5:0d:e9:93:
41:bd:33:dd:1e:fd:85:d4:89:d1:2c:22:a0:91:13:d6:d2:43:
71:db:46:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:07:02 2025 by rpki-client