Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qM5T1oQWCb2EwBd-MeDV8XlDYO0.roa
File: qM5T1oQWCb2EwBd-MeDV8XlDYO0.roa (raw, json)
Hash identifier: cLjeKgDzOTY/IxonWzFf4afYq2CTrO6q+bEo/dgzrR4=
Subject key identifier: A8:CE:53:D6:84:16:09:BD:84:C0:17:7E:31:E0:D5:F1:79:43:60:ED
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186044CCE42199190302D1D19879965BCA0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qM5T1oQWCb2EwBd-MeDV8XlDYO0.roa
Signing time: Mon 30 Jan 2023 20:09:47 +0000
ROA not before: Mon 30 Jan 2023 20:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:04:4c:ce:42:19:91:90:30:2d:1d:19:87:99:65:bc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 20:09:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8ce53d6841609bd84c0177e31e0d5f1794360ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:3b:18:42:b8:24:9a:47:bd:f2:8b:89:2e:
01:e0:36:f8:89:01:f8:cf:04:74:cb:38:35:1a:a5:
73:db:aa:3e:9f:59:f6:cb:b7:66:88:04:16:b1:e9:
99:ca:64:11:49:a5:71:73:2d:19:90:5b:eb:68:b6:
a4:d1:af:e7:d0:9e:ea:cd:dd:4e:25:24:0f:11:43:
b1:c5:16:ee:1c:e2:5b:1d:77:90:0e:19:09:26:bd:
00:e4:6f:e2:17:e2:95:99:cd:7a:cd:49:7a:e8:e8:
4f:2e:fb:ab:aa:50:06:64:b2:ea:7c:af:97:da:5c:
01:8d:46:9a:9f:8a:57:a9:cc:98:a8:f3:ce:d8:57:
bb:a5:01:e8:13:93:55:8c:7e:7a:f6:e1:87:57:8e:
03:19:74:a4:7d:e4:f5:d1:54:e7:c3:e6:2e:a8:d5:
25:23:28:2c:f8:8f:f6:16:df:c5:d9:1f:db:f6:0e:
ea:8f:dd:f3:0d:5b:70:68:ef:ac:e6:b6:97:2a:a0:
ce:f2:70:a7:b3:44:15:b6:f1:89:d0:55:60:61:29:
b4:35:5d:18:1e:b8:d2:ba:69:8c:8d:b4:52:3a:30:
89:69:a4:0f:5a:e1:c4:2a:5e:81:f8:36:1d:91:1e:
d8:a3:39:7d:1c:6c:3f:b9:24:58:1f:57:8e:6d:6d:
9e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CE:53:D6:84:16:09:BD:84:C0:17:7E:31:E0:D5:F1:79:43:60:ED
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qM5T1oQWCb2EwBd-MeDV8XlDYO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:49:46:35:97:22:72:28:c3:35:46:2c:3f:da:bc:0c:b3:73:
7f:c1:ab:7b:ba:ae:5d:4d:0d:55:ab:18:ca:73:64:06:b5:f6:
89:66:d1:d4:a4:3c:00:ae:60:86:72:c3:84:0f:a3:e6:62:d0:
6c:23:87:fc:ec:ab:05:ce:b7:60:cd:56:d5:25:59:aa:04:6a:
89:13:94:93:60:a1:33:7e:4d:c2:04:74:f4:89:5d:e0:15:c6:
5e:b0:03:a5:7c:3e:4e:9c:2c:36:a8:55:a7:8a:9e:c8:17:0b:
7c:61:c2:38:1c:65:d8:81:c2:3d:38:76:a0:24:83:59:44:3d:
9d:a2:92:31:47:7f:5b:7f:1c:6a:b9:ff:5b:cb:9e:53:07:9f:
00:30:c5:fa:9a:48:79:97:16:f9:e8:40:de:0d:26:8d:19:00:
a0:bd:e2:cb:29:7b:5c:44:97:58:35:01:11:f0:d8:2a:05:6b:
d6:e9:92:79:a1:bc:76:ba:c7:8b:73:e9:d7:4f:48:ea:d8:b7:
76:42:5b:8a:be:f4:d3:3e:fd:17:00:d8:08:13:5d:7e:69:69:
a5:12:b6:b6:5e:a8:b9:09:dd:96:66:b9:28:48:f3:7a:8e:e7:
10:33:d8:45:5a:02:23:e6:e0:3b:5d:2c:20:fd:89:c8:27:23:
40:ef:53:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:24:50 2025 by rpki-client