Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qSC0TP5BTCCL28SdVRCuJBo8ErQ.roa
File: qSC0TP5BTCCL28SdVRCuJBo8ErQ.roa (raw, json)
Hash identifier: T2ymYiqmaU45sqQ5/QhkHZ1ncMMqZzQwgdbsAeuWP8Y=
Subject key identifier: A9:20:B4:4C:FE:41:4C:20:8B:DB:C4:9D:55:10:AE:24:1A:3C:12:B4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A15A00C8FA6E9B6FC679157B5AD569927
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qSC0TP5BTCCL28SdVRCuJBo8ErQ.roa
Signing time: Mon 21 Aug 2023 01:05:25 +0000
ROA not before: Mon 21 Aug 2023 01:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:159f:73f6/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:15:a0:0c:8f:a6:e9:b6:fc:67:91:57:b5:ad:56:99:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 01:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a920b44cfe414c208bdbc49d5510ae241a3c12b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:8a:da:81:80:4f:ba:e0:b8:cc:18:0b:77:
bb:bf:4e:94:44:d8:21:e2:72:b1:0d:c7:6c:ba:8e:
b2:5d:fd:ef:75:68:3c:24:26:04:83:fc:09:b7:f5:
fd:ba:b8:ff:ab:2a:2a:16:1a:16:80:b2:6f:90:e6:
0e:69:9c:79:20:ff:17:e9:94:d8:ea:21:20:19:e3:
41:96:46:de:e1:0a:e8:ce:7f:cc:f2:3b:02:fe:ed:
c0:c6:bb:b9:96:c9:32:c5:c6:90:5e:3f:66:11:af:
11:bb:a5:75:f7:b1:c3:cc:70:22:10:43:7c:b1:0b:
7e:e7:c5:ca:5e:af:a0:71:7b:62:b9:53:e1:cf:5a:
2a:80:65:22:1d:dd:df:5a:38:3f:80:e3:be:f3:ea:
2c:aa:03:bb:50:e6:29:55:45:4f:4c:d0:e6:1e:6f:
99:6b:6a:8f:86:7e:8f:d6:f2:03:8c:27:8f:7b:76:
75:5e:e9:c4:8b:24:8f:c7:ba:3f:1c:fb:7c:15:ee:
32:3a:d0:f0:f3:99:ff:74:2e:8b:0e:96:71:b1:a7:
37:ce:0e:86:f6:7e:04:d8:b4:fc:af:5e:76:09:71:
9b:4a:7e:eb:2b:49:7f:fa:8f:1e:4a:42:86:e9:98:
bf:41:50:fe:65:30:d4:1b:7a:56:f8:a6:bb:6e:91:
cb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:20:B4:4C:FE:41:4C:20:8B:DB:C4:9D:55:10:AE:24:1A:3C:12:B4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qSC0TP5BTCCL28SdVRCuJBo8ErQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:4f:b1:27:82:c2:b3:1a:9f:04:c7:2a:b0:11:be:73:c2:df:
68:be:49:6f:ff:c7:e0:c6:09:43:58:3e:ec:f2:38:0b:6d:7e:
35:17:2a:64:aa:10:af:63:c3:d3:4c:72:d8:dd:37:ef:00:58:
63:a5:0b:f4:09:d2:db:7d:16:9a:66:10:b9:ab:c0:85:e0:bb:
86:e5:5c:ff:56:a8:7a:7b:a8:75:40:89:65:3d:cf:d7:27:6d:
c1:37:a0:ef:1b:c2:38:32:0d:43:3f:bf:31:57:d4:09:bf:39:
6a:2e:8e:ac:ca:28:0d:bf:cc:f9:69:67:97:ed:9c:07:c0:63:
3b:88:b3:8a:f9:7b:4c:07:44:4b:53:06:5b:dd:b2:58:48:73:
5c:97:0f:d5:58:22:f4:bf:e1:c1:14:77:47:54:70:fa:02:28:
5f:62:a4:86:67:72:f6:4e:6d:6e:91:19:df:24:85:91:b8:50:
a9:50:ce:0c:e9:c2:df:cd:d4:13:bd:5e:ee:6c:7e:00:14:5d:
86:58:62:65:4c:80:1a:35:e1:0c:b4:29:84:85:3f:65:36:17:
8f:ed:bd:7b:af:03:a9:55:7e:08:a3:24:a5:bd:3f:b8:3d:90:
3d:bc:52:85:60:9d:02:c9:03:48:19:91:c2:ef:bd:46:73:e3:
32:5f:c8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:22 2025 by rpki-client