Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qLW0jg75vHXofQMSfmWkQ3suNi4.roa
File: qLW0jg75vHXofQMSfmWkQ3suNi4.roa (raw, json)
Hash identifier: nFmAph8HMG10IYYTGZOvyRmRiK1fW1TzN62ylAVxZfE=
Subject key identifier: A8:B5:B4:8E:0E:F9:BC:75:E8:7D:03:12:7E:65:A4:43:7B:2E:36:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186424BCC6210B253697A3373E5DB239A8C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qLW0jg75vHXofQMSfmWkQ3suNi4.roa
Signing time: Sat 11 Feb 2023 21:05:09 +0000
ROA not before: Sat 11 Feb 2023 21:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:424a:e4f0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:42:4b:cc:62:10:b2:53:69:7a:33:73:e5:db:23:9a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 21:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8b5b48e0ef9bc75e87d03127e65a4437b2e362e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a6:14:63:ad:09:b6:5a:f2:b4:a3:0e:cd:e1:
88:f4:9a:55:07:2f:43:7e:44:5e:d4:1a:1b:ff:b3:
48:0f:86:65:b0:2d:03:39:60:1a:e7:7c:5e:aa:07:
8d:04:ef:1e:56:89:1f:34:a5:de:90:43:61:e2:a8:
21:88:54:23:5d:8d:6b:9e:3e:03:a8:b9:16:16:f3:
ae:39:95:6a:47:41:3e:7e:f3:1b:77:62:c1:8d:b5:
e6:9d:cb:e5:75:90:5b:21:05:10:14:9a:ba:5b:02:
69:6c:fe:00:71:92:e3:b6:24:d6:c8:90:53:17:a6:
a2:3f:07:44:26:2d:ac:2e:80:9d:45:8a:7a:48:42:
dc:97:b9:d9:15:be:09:6d:4c:6b:d1:e5:ed:0e:c4:
bd:d8:21:ea:9c:54:27:a7:59:02:93:d5:c1:e7:bd:
ea:f9:5d:ee:a6:81:e0:c7:97:64:51:b0:6b:8f:67:
d3:77:d5:2f:d3:d6:c1:49:f0:c3:92:ba:26:63:9b:
2e:88:e4:ba:ce:91:45:67:05:f8:e5:0a:61:4f:66:
fe:7e:e1:11:8b:30:1b:25:c1:65:0a:bc:4f:ea:9e:
b9:c0:78:42:c8:57:df:7f:5c:5e:77:79:95:b0:91:
a2:66:3b:88:17:4a:32:75:81:94:7d:d5:7d:c0:ee:
22:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B5:B4:8E:0E:F9:BC:75:E8:7D:03:12:7E:65:A4:43:7B:2E:36:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qLW0jg75vHXofQMSfmWkQ3suNi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:7b:51:58:e3:21:2f:4b:ae:b4:c7:9e:e4:c6:bb:40:2d:56:
a3:7f:6f:07:5d:3c:3c:93:35:3c:64:cb:e1:1e:8c:ca:53:c8:
73:48:c8:78:29:5d:aa:d7:9c:82:f5:d0:73:c9:c4:9b:e1:88:
12:0b:7b:a0:04:60:31:34:23:b2:be:5c:36:50:0b:c2:9b:83:
a1:ed:0d:5d:7a:88:49:2d:66:d3:18:ad:29:fb:da:98:48:22:
a4:81:c5:84:08:66:d9:5a:74:b9:f9:51:24:a1:52:97:9d:63:
2f:87:03:d7:64:1e:9b:b5:3d:91:de:4e:e6:ad:0b:a7:7c:3e:
67:72:05:5c:74:a4:4d:49:31:57:f4:e9:5e:c5:30:1c:bd:17:
1d:bb:b8:df:ff:3e:36:5d:c1:27:34:46:06:36:7d:da:72:1c:
e0:76:c8:62:1f:25:bf:c0:9c:2f:82:e1:75:78:d6:c0:91:c2:
0d:e8:e2:0f:ba:35:e8:25:b4:4e:c3:52:a8:03:f9:e7:b3:e4:
a5:9d:eb:b2:8e:b7:72:4e:7a:3d:ae:54:5d:ac:26:71:eb:a2:
ed:f5:bc:0f:c5:6a:f1:39:f9:22:74:34:d2:42:73:0b:9a:1e:
ba:2f:12:f0:a7:53:88:5f:10:c6:df:0e:8f:72:4e:52:c1:e9:
5a:1a:bc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:01:00 2025 by rpki-client