Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qKwpyEf1cChrkTpGMvJG5zyDyBU.roa
File: qKwpyEf1cChrkTpGMvJG5zyDyBU.roa (raw, json)
Hash identifier: U9K9i7wYNLPSfWfDDc6xWkYURX7fFW6C+Wv9zZcI/Fs=
Subject key identifier: A8:AC:29:C8:47:F5:70:28:6B:91:3A:46:32:F2:46:E7:3C:83:C8:15
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018985A40AD6BBB74479E901AD19619E32D4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qKwpyEf1cChrkTpGMvJG5zyDyBU.roa
Signing time: Mon 24 Jul 2023 02:04:27 +0000
ROA not before: Mon 24 Jul 2023 02:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:189:85a3:e8e4/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:85:a4:0a:d6:bb:b7:44:79:e9:01:ad:19:61:9e:32:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 02:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8ac29c847f570286b913a4632f246e73c83c815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:24:23:63:39:3c:64:e6:66:9a:5f:f6:75:e4:
1d:64:1e:80:a6:b3:d5:53:0f:a2:63:2b:16:da:58:
38:24:84:0d:74:88:20:4f:b4:6f:aa:61:52:de:aa:
09:7e:b1:13:93:d0:67:7a:97:d7:65:ba:bd:a5:6e:
6f:2a:1d:d8:ec:b8:0b:2f:25:3c:d0:81:e2:fa:8a:
11:fe:d6:4a:d8:5e:e6:7c:7a:31:19:66:13:66:bc:
01:0d:3e:1f:bd:40:ad:4a:d3:d0:73:9e:fb:57:ea:
40:41:f2:36:a5:26:12:98:2e:ac:ba:2b:06:dc:74:
c1:15:94:c6:6e:ad:c9:a6:53:94:a1:c2:a3:a6:48:
3f:8c:5e:3f:5c:7a:52:13:9e:ba:5c:09:af:fc:34:
6f:16:ec:0a:57:e5:aa:89:b9:ee:84:df:2e:a4:f3:
3d:1d:94:d6:3c:52:be:d1:fa:19:30:18:ba:4a:39:
a5:1b:44:a6:5a:ef:c2:6d:ba:52:e2:41:05:1d:a3:
ae:a0:fc:53:f0:6d:a0:b6:29:86:e2:5d:82:f6:89:
23:6a:a3:d1:37:43:0e:91:41:04:7f:44:b3:47:11:
d8:a9:03:3d:01:92:d0:a7:b8:cd:8b:f6:d0:4b:3c:
74:70:5e:ff:32:25:b8:15:13:6e:57:7b:6e:53:02:
43:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AC:29:C8:47:F5:70:28:6B:91:3A:46:32:F2:46:E7:3C:83:C8:15
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qKwpyEf1cChrkTpGMvJG5zyDyBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:d9:bc:15:50:10:2a:1e:c7:71:88:6a:0c:b6:4a:35:1f:50:
d7:2c:15:c5:65:d7:df:8f:6b:5c:ac:cf:5a:e3:49:d0:6d:a3:
33:60:4b:27:00:f5:73:ec:40:ec:3c:a2:58:9c:14:5a:52:1a:
b9:f8:0b:aa:1a:f0:c0:8e:d6:42:cf:a2:17:6b:43:db:d0:67:
b2:5f:16:99:04:fd:4a:9f:97:b2:5f:aa:8a:94:9e:02:3d:b8:
b3:42:58:a3:87:1f:9d:82:3e:92:d2:8f:3e:18:5f:c8:c2:88:
d2:ea:59:4c:81:60:77:b6:dd:0c:b5:18:c6:a8:e1:c4:8c:6a:
98:e5:f8:21:6d:22:a5:14:cd:b9:6a:5d:b6:58:1e:35:dc:e3:
11:8e:ff:55:b3:97:25:ea:cd:4b:21:4b:b8:8a:c5:09:a2:fc:
55:27:8e:af:87:94:56:9a:dd:74:b1:eb:2c:84:99:15:a9:7c:
e1:bc:33:00:a0:f4:92:1e:e5:29:2a:9a:1a:b1:ba:8d:1e:45:
2e:fa:4c:fd:8b:b6:de:18:7b:58:5e:40:85:18:f3:1e:72:11:
9e:ed:4f:e2:28:b4:5a:89:29:44:e3:5f:28:5b:d2:5d:96:a6:
41:45:9e:54:c6:31:d9:78:06:a5:86:06:2a:dd:cf:ba:d4:02:
de:7c:99:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:48:51 2025 by rpki-client