Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qRKriYcF6J1lXmnA1pmFOvNMFVI.roa
File: qRKriYcF6J1lXmnA1pmFOvNMFVI.roa (raw, json)
Hash identifier: ae+t4Fux9MTOn6RvDwb2CKBE4WwQhHmJBmPixbFpqCw=
Subject key identifier: A9:12:AB:89:87:05:E8:9D:65:5E:69:C0:D6:99:85:3A:F3:4C:15:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018561D8E2C1F6DA7AAD4FDCCDA6094E78D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qRKriYcF6J1lXmnA1pmFOvNMFVI.roa
Signing time: Fri 30 Dec 2022 07:04:41 +0000
ROA not before: Fri 30 Dec 2022 07:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:61d8:928e/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:61:d8:e2:c1:f6:da:7a:ad:4f:dc:cd:a6:09:4e:78:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 30 07:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a912ab898705e89d655e69c0d699853af34c1552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:03:cb:8d:8b:57:70:fd:25:15:c0:cb:76:
04:94:6a:57:e3:95:e6:b2:d3:5e:f3:ab:9e:a2:6a:
90:84:e6:94:6f:44:75:19:89:ee:24:3f:c3:b3:4e:
56:a0:a0:f3:13:58:c6:07:4b:c8:15:c8:d9:f6:70:
c2:af:51:0c:70:fa:64:b5:80:5e:f3:88:c1:32:71:
cd:5b:16:8c:2a:16:e3:74:f0:c9:28:e0:a8:47:4f:
1f:42:81:5e:37:00:c7:be:ba:88:74:7c:36:a5:7f:
d1:d7:53:cc:12:75:5f:21:57:d2:52:41:de:9b:45:
3c:b0:98:fd:db:1a:ca:92:7e:c8:02:50:5d:75:c2:
df:79:84:57:8f:1e:79:05:a2:19:34:c2:a7:ba:83:
a8:50:08:24:c7:8b:ef:0e:e5:f9:6d:29:82:ea:1b:
e9:01:94:e3:af:f7:85:ca:2a:56:4f:0e:7c:97:26:
d4:44:b0:40:c4:e4:4f:b7:25:82:85:73:85:b9:fa:
31:b8:c4:2f:bd:ff:0a:15:24:91:55:c9:16:48:a2:
da:7b:f8:a7:f6:f7:a1:8b:12:dd:c0:0b:9d:49:a2:
6b:95:06:80:77:2d:86:16:d6:1c:77:d8:0b:7d:d4:
92:07:79:5a:a7:56:38:f9:66:50:35:d7:5b:d9:ff:
25:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:12:AB:89:87:05:E8:9D:65:5E:69:C0:D6:99:85:3A:F3:4C:15:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qRKriYcF6J1lXmnA1pmFOvNMFVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:df:f7:c6:26:d6:ed:73:20:74:70:b6:8c:26:be:00:dd:83:
20:5a:19:d4:ec:7d:9a:07:d0:62:6f:14:47:7f:0d:f1:a4:b8:
d2:84:84:88:e3:d3:8c:57:de:fd:91:4b:57:4b:43:de:c5:c4:
bb:50:ed:37:e3:f6:6c:b2:10:26:9b:57:61:51:ca:fe:da:96:
64:d5:9f:c0:42:4a:da:65:4a:57:fe:12:f4:94:6f:53:80:39:
37:ff:a1:1b:e0:bf:d6:f7:69:d0:c6:0e:46:92:e1:d0:71:ca:
03:43:68:8a:3a:f7:62:8a:22:4e:cf:5e:80:a7:1c:17:42:ce:
78:8a:50:3e:b7:a4:25:4d:93:66:eb:0c:ef:11:45:9b:e4:41:
b8:22:f0:75:d6:b1:fc:4c:10:49:cc:5f:53:72:12:1f:be:54:
14:0d:6b:a9:c9:10:11:60:83:11:bb:da:5d:60:26:9b:65:6c:
16:65:c5:fa:bc:08:7c:46:99:8f:4a:8d:a5:87:57:fb:5f:e3:
0e:23:c2:69:fa:06:c0:1b:89:dd:34:ca:fa:83:bf:2e:3c:56:
d8:8d:71:c2:e7:b5:2b:1a:d2:bb:6c:6e:48:43:14:98:cf:99:
34:8f:09:58:f6:9c:ad:48:4e:e4:49:f1:16:5f:9a:72:8f:de:
e6:c3:dd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:53:31 2025 by rpki-client