Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qJ3Hkc4qx9fJhAVe1Ga3OEAy1e4.roa
File: qJ3Hkc4qx9fJhAVe1Ga3OEAy1e4.roa (raw, json)
Hash identifier: XH15jjQmclZ7bnvjr96ZXlLzmyv184bViXL3Po1DoGQ=
Subject key identifier: A8:9D:C7:91:CE:2A:C7:D7:C9:84:05:5E:D4:66:B7:38:40:32:D5:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187470183F6C1957B3A9F3060DBCF0E34AB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qJ3Hkc4qx9fJhAVe1Ga3OEAy1e4.roa
Signing time: Mon 03 Apr 2023 12:04:54 +0000
ROA not before: Mon 03 Apr 2023 12:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:4701:3a3e/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:47:01:83:f6:c1:95:7b:3a:9f:30:60:db:cf:0e:34:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 12:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a89dc791ce2ac7d7c984055ed466b7384032d5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:43:58:77:36:98:1b:50:2d:23:5b:2b:0b:d7:
22:8b:a8:a3:96:0b:fb:af:65:54:e5:55:e1:7c:6f:
0c:09:be:34:10:73:07:95:07:c7:71:3d:91:a8:96:
ab:1c:63:81:e2:72:89:11:a4:13:f5:10:6b:4b:2f:
1a:d0:0b:f6:cd:1b:ca:55:7a:a5:8b:a7:47:ff:0f:
4a:96:d0:b8:43:eb:24:fe:cd:bf:27:7f:32:d1:bf:
eb:7f:a1:71:c3:f2:be:13:4c:7e:91:95:fe:82:52:
09:ac:dd:85:ea:91:6e:8f:5d:7d:53:1d:32:2d:83:
57:8e:9e:15:2a:b6:11:ff:68:2d:b8:ca:cc:73:a9:
4a:13:02:9c:d0:ab:65:c9:20:01:6f:ff:12:e5:e4:
d6:a1:40:eb:70:53:08:cf:21:92:84:33:cd:c4:4c:
95:0a:64:85:53:c8:62:e9:3b:da:8e:d2:0d:e0:88:
83:30:31:39:71:62:e3:3e:33:af:f3:3c:95:7c:f9:
da:a5:7f:79:39:f7:71:6b:3d:68:f5:18:07:e7:0d:
60:68:b2:b9:79:d8:89:0d:0c:31:d2:db:94:c5:07:
51:18:fa:6f:12:13:ca:54:e8:d9:06:85:77:e1:a4:
1f:83:23:cd:4c:05:0f:7f:c4:87:84:47:00:3a:5f:
db:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9D:C7:91:CE:2A:C7:D7:C9:84:05:5E:D4:66:B7:38:40:32:D5:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qJ3Hkc4qx9fJhAVe1Ga3OEAy1e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:ef:cf:e4:0c:71:bb:8e:27:7d:c6:c0:55:ec:52:92:3d:b1:
91:8a:8f:c4:69:ff:94:50:61:67:fc:32:55:50:a3:0d:46:09:
4b:d2:33:6b:f7:d6:6c:05:81:8f:7e:64:a7:e0:6d:7c:ea:92:
d9:0e:10:72:d8:f5:56:cb:d1:f1:93:62:98:24:b1:05:f2:d7:
bd:26:26:ed:17:07:0f:d8:30:d0:f7:84:cd:1e:c9:71:d8:7c:
a6:df:fe:88:33:20:c1:8e:74:76:69:1f:ae:5a:c3:f9:df:94:
66:2c:67:db:35:ea:8e:63:84:be:90:c1:2d:f2:ec:e4:51:ac:
fe:7a:17:05:58:09:24:7f:c8:f1:85:e2:0c:a9:9a:1e:3f:53:
8b:a2:a0:92:a1:96:78:57:5c:8b:82:ee:72:9e:d5:a0:bf:43:
0b:92:1d:07:a2:e4:e0:82:b0:52:de:6b:ee:00:da:1e:cc:9e:
c0:92:02:a2:12:a8:1f:d1:e0:42:ef:36:be:db:62:6f:8c:50:
84:a8:97:b1:18:40:0f:b1:5e:7d:5d:f6:96:a5:0f:df:48:a8:
a0:63:54:9e:01:12:8d:e7:31:56:b1:78:34:6f:ab:d3:5c:b7:
c3:56:5f:62:1c:3e:ee:13:fe:36:45:57:37:b6:8f:7e:7d:4f:
c8:73:5b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:13:17 2025 by rpki-client