Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qPPwQvBBBqqRlsoYDj5JCrBJX30.roa
File: qPPwQvBBBqqRlsoYDj5JCrBJX30.roa (raw, json)
Hash identifier: AtpzoCd1Y4QT9624Ol84lA0G9cH4DukOEdKTFFGg+QI=
Subject key identifier: A8:F3:F0:42:F0:41:06:AA:91:96:CA:18:0E:3E:49:0A:B0:49:5F:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018735715D16C63605484D4474A83766A7D0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qPPwQvBBBqqRlsoYDj5JCrBJX30.roa
Signing time: Fri 31 Mar 2023 02:13:54 +0000
ROA not before: Fri 31 Mar 2023 02:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:35:71:5d:16:c6:36:05:48:4d:44:74:a8:37:66:a7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 31 02:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8f3f042f04106aa9196ca180e3e490ab0495f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:77:8c:ce:8c:b6:a2:ff:6a:25:9b:55:ab:
c5:7a:1d:65:27:3d:62:aa:47:99:e3:86:81:58:e4:
44:15:62:e5:5d:a5:42:b3:48:bf:a4:f7:40:c5:dd:
06:dc:30:47:9b:15:9e:62:79:72:fb:d3:87:e7:70:
84:63:17:75:a1:90:da:85:ff:ac:38:e3:0e:43:04:
48:36:25:c6:9d:09:00:51:2c:e3:e8:39:6a:7b:44:
1a:80:f8:f5:80:46:16:80:fb:26:db:c7:51:c3:94:
cc:bb:a3:8c:26:78:b8:61:5f:44:fd:cf:70:4a:0a:
ae:ed:22:0a:15:07:c5:0f:27:04:b0:ad:90:d9:73:
1b:7d:08:bb:34:35:e2:57:54:9b:a6:57:85:50:7e:
62:9e:31:2f:6f:cc:21:29:3c:df:cd:b2:46:bd:53:
8a:6f:66:16:31:e7:9d:58:7c:79:66:1f:32:d9:29:
be:b7:d6:69:19:fb:a5:9c:a0:58:71:5e:05:27:7a:
a6:f7:d7:3a:ca:ba:37:f1:36:5c:e3:08:13:e4:de:
d4:d6:b5:8d:99:ac:5e:04:eb:4f:4d:8e:cf:99:65:
8a:9a:85:f1:1d:5a:47:0d:bc:03:7c:a0:82:28:30:
d7:3c:c4:08:a5:d2:af:24:62:e2:4b:65:ae:7e:c5:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F3:F0:42:F0:41:06:AA:91:96:CA:18:0E:3E:49:0A:B0:49:5F:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qPPwQvBBBqqRlsoYDj5JCrBJX30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:c9:b9:c8:9f:2a:50:d1:74:62:06:11:d8:cd:c2:22:82:d0:
5d:f0:58:f5:3e:96:1e:b3:a0:69:ee:d1:d3:c0:a7:7e:d6:67:
f5:ab:fb:74:70:03:8f:93:e2:b5:59:7d:e2:fe:f8:00:04:d0:
48:79:42:66:34:cb:b6:08:27:d0:34:70:9d:66:0a:79:3d:00:
15:80:41:30:c3:39:a8:96:0f:36:22:ac:09:ea:29:20:72:5b:
22:e1:24:69:ed:7b:f1:d5:84:87:55:51:69:2d:4f:51:18:3c:
3e:12:46:0f:93:f7:9b:5b:1e:7b:8b:73:e2:c4:ad:6f:e5:13:
a7:95:9e:21:d2:45:b8:3e:94:c9:e6:ad:eb:23:36:46:c7:59:
e4:9d:99:e9:98:7a:b4:f9:9c:3d:3f:8e:d0:93:07:df:11:d5:
e7:4e:71:c1:4b:1d:0a:3d:f9:4a:31:e1:54:15:fa:9c:c5:ab:
0a:82:a0:23:1d:07:ba:56:81:79:cd:80:56:95:f4:e1:71:9c:
11:17:5c:c3:d8:7e:6f:28:e0:bb:46:ea:cd:97:27:17:af:be:
ec:33:70:f7:f7:4e:3f:ad:c9:07:43:23:a2:86:c3:e3:5c:c4:
4b:b7:a5:8f:a0:24:72:5d:eb:0a:20:5e:f2:09:80:ca:13:81:
62:84:8c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:38:17 2025 by rpki-client