Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qRPs_EEhQBDWtgdj6RFc13pTR_Q.roa
File: qRPs_EEhQBDWtgdj6RFc13pTR_Q.roa (raw, json)
Hash identifier: rvcZIoGAEjW+JXstaJppE+L0XwJ6vUV0Tc4pBjgw3i8=
Subject key identifier: A9:13:EC:FC:41:21:40:10:D6:B6:07:63:E9:11:5C:D7:7A:53:47:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187718B554FF1D4D134EB5290C95D3AAD28
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qRPs_EEhQBDWtgdj6RFc13pTR_Q.roa
Signing time: Tue 11 Apr 2023 18:19:29 +0000
ROA not before: Tue 11 Apr 2023 18:19:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:71:8b:55:4f:f1:d4:d1:34:eb:52:90:c9:5d:3a:ad:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 11 18:19:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a913ecfc41214010d6b60763e9115cd77a5347f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:60:3d:17:47:7b:dd:42:0a:8b:99:76:87:
f1:24:66:71:10:c4:d7:5a:76:a0:8f:5a:ec:e4:13:
4c:05:d4:62:e7:7a:92:d0:84:6e:e6:2f:e2:d4:2d:
60:09:ee:54:82:c5:8c:10:cf:77:dc:4e:36:24:65:
f1:e5:ba:72:c3:c7:50:ef:c4:6a:d6:6c:17:b4:aa:
9a:32:d1:62:8d:cb:dc:1d:4f:0b:3b:da:32:5d:70:
ce:16:69:21:af:85:ca:f3:d6:79:6d:29:7b:39:46:
5e:bd:8d:d7:6c:ba:cb:f4:10:43:ec:7b:c5:04:13:
4f:3c:36:77:36:63:98:75:f8:e2:50:95:60:06:a2:
4d:9c:d1:8b:8d:5b:38:5d:62:f4:a7:10:c5:6b:8c:
7f:7d:4f:3d:85:e3:15:39:69:52:f7:11:70:09:63:
bd:86:f1:f0:53:07:c1:49:41:df:90:f3:cc:0f:90:
53:e9:97:de:ab:eb:f9:c3:53:fe:2c:c1:a0:a6:45:
57:b6:13:15:32:32:71:6a:d4:67:af:91:d4:d1:7a:
d5:e1:7f:95:3f:51:8a:47:b7:a8:9b:14:51:0a:1d:
c3:a6:32:19:1a:80:f1:f1:42:ec:28:07:33:d9:5f:
f2:bf:fa:f1:c6:fd:15:0a:b7:3d:ab:f9:41:dc:5f:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:13:EC:FC:41:21:40:10:D6:B6:07:63:E9:11:5C:D7:7A:53:47:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qRPs_EEhQBDWtgdj6RFc13pTR_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:8d:93:7a:b4:a2:9b:1e:2b:6f:3f:fb:16:d8:99:22:24:37:
62:1c:0c:a8:d6:67:a8:5d:f0:42:58:28:4b:7f:38:0c:85:c7:
c7:5e:fd:04:9d:12:8f:09:66:84:33:79:33:f7:ec:63:2f:83:
f9:8b:d5:b2:66:c8:51:80:e8:fd:ce:e5:8e:e2:84:76:00:8e:
96:2c:be:4f:6a:25:1b:ba:23:70:82:85:c6:b2:86:88:21:ef:
9d:47:12:df:75:0a:81:ae:07:07:eb:e9:24:1a:ed:01:57:96:
e3:8a:b8:9b:a7:a4:3d:b4:1a:a5:1a:bc:5c:5f:1e:0b:d1:24:
4b:9a:ba:e2:5f:31:7d:f5:e0:0c:82:b8:3d:ab:f9:9a:85:e5:
bc:13:8c:34:eb:2b:16:f2:23:24:0f:ee:07:03:eb:cf:07:2b:
4e:38:5d:c4:96:21:d4:ed:ce:7d:06:40:27:16:94:e2:34:ba:
92:69:58:ec:2d:81:8a:75:b8:4f:3e:07:a8:64:59:11:c8:c0:
01:34:a5:9f:ac:d2:c8:f8:a0:e0:3a:a7:a6:be:87:2b:fa:b5:
04:f1:90:d6:9f:10:c9:19:0c:80:21:a5:3e:9f:e2:39:ef:81:
d7:80:1e:2d:20:cc:01:12:26:eb:39:47:d7:ea:a9:09:f2:bc:
c0:79:0d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:35:37 2025 by rpki-client