Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qQcr4dZdLn34QJQKXsZtfeRwI3Y.roa
File: qQcr4dZdLn34QJQKXsZtfeRwI3Y.roa (raw, json)
Hash identifier: eIJ15MhM0QsWFeRIn7ZYNuG2k9uF3rgB/oQTwCGRvS4=
Subject key identifier: A9:07:2B:E1:D6:5D:2E:7D:F8:40:94:0A:5E:C6:6D:7D:E4:70:23:76
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8DE6BA92
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qQcr4dZdLn34QJQKXsZtfeRwI3Y.roa
Signing time: Sat 18 Jun 2022 21:09:44 +0000
ROA not before: Sat 18 Jun 2022 21:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2380708498 (0x8de6ba92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 18 21:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9072be1d65d2e7df840940a5ec66d7de4702376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:ed:d9:a3:0a:75:b0:ac:08:96:ce:a8:12:
02:35:e4:a6:cd:fe:2b:0f:32:d7:98:0e:e6:ec:06:
43:87:98:e7:8f:14:51:7d:f0:9e:8c:ba:76:a6:81:
1f:86:c8:54:0e:1a:9d:97:44:c5:25:3c:dd:a5:df:
08:25:16:e0:c0:bb:c6:12:99:84:5d:53:b2:71:d7:
63:3a:c1:fc:ca:cb:9f:07:b4:17:53:93:6e:c8:fa:
f4:ab:a0:14:0c:0a:5a:af:51:fd:8f:57:90:a8:81:
73:ed:6a:19:dc:2c:e4:c9:56:ff:73:6a:2a:ab:a5:
95:eb:ab:7d:ee:f4:fe:50:08:c5:00:29:d7:9f:d4:
ab:b7:4a:53:f1:2b:85:0c:82:e1:bf:ef:aa:a0:a2:
29:b3:45:17:6f:90:64:45:46:e2:8b:97:d6:f1:96:
01:3e:e2:4f:92:0b:e0:e4:b1:28:d6:8b:dc:9f:fd:
f3:ee:99:9a:62:76:f3:5f:2f:fb:61:b6:1f:5a:2d:
87:1c:f9:f0:b0:eb:a8:70:5e:29:85:2d:65:d1:be:
e7:f9:c2:f5:99:96:19:5f:51:9d:18:60:f8:f1:bb:
0f:40:9a:fb:22:87:bb:58:b7:88:25:3b:81:f0:79:
95:12:05:82:b1:25:fc:5a:61:6f:3a:76:5b:f7:af:
66:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:07:2B:E1:D6:5D:2E:7D:F8:40:94:0A:5E:C6:6D:7D:E4:70:23:76
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qQcr4dZdLn34QJQKXsZtfeRwI3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:96:4d:08:2a:96:6f:83:fd:89:f5:09:a3:e3:74:3f:ce:d0:
4d:34:3a:82:1e:f0:2f:ee:34:7b:89:e7:50:56:14:09:2d:b1:
af:2e:5a:d8:5b:b2:2c:c6:b8:b0:a4:98:94:c1:b5:7c:bf:1b:
97:75:0f:1a:09:6d:d9:be:cc:3c:ec:f5:be:a6:d2:0a:25:eb:
e7:88:93:c0:c6:c2:cc:9c:86:c6:61:79:5d:df:bd:31:c2:ec:
65:d6:71:5d:02:6c:df:4d:3a:36:8b:be:ee:28:1a:b3:94:ad:
c0:78:26:f1:99:1a:bb:7b:45:ca:72:65:37:62:e8:35:31:84:
16:0d:b7:98:9a:f4:57:04:c0:5a:43:1f:59:c9:e2:88:ad:2f:
2f:0d:b5:a4:40:4a:01:3e:6b:a4:de:95:2e:d0:ee:1b:17:d0:
b5:ff:3b:16:26:ac:3e:bd:39:3e:78:6d:50:e7:cc:79:cc:b4:
7f:a2:a0:84:b1:07:b6:fb:aa:7d:db:80:a3:fb:7b:23:b1:c4:
b4:dd:b3:ce:1e:cd:7f:aa:f7:b5:45:f7:d0:05:01:45:2d:c3:
a9:54:2f:4b:45:9f:29:d9:29:96:7f:1e:49:bd:1e:46:86:20:
33:8c:48:10:7d:01:8b:3a:35:3c:93:ac:29:75:f2:e4:66:b8:
52:c0:b5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:38:46 2025 by rpki-client