Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qSNtDQK0BXgB1dR0jnvn0MRrEG8.roa
File: qSNtDQK0BXgB1dR0jnvn0MRrEG8.roa (raw, json)
Hash identifier: 2a8yC9dDf8m7UzkwxFk01dsc35VyoajaFrv6wM+BU8o=
Subject key identifier: A9:23:6D:0D:02:B4:05:78:01:D5:D4:74:8E:7B:E7:D0:C4:6B:10:6F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01833B0D39C4818DAD0DA7022CB641902325
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qSNtDQK0BXgB1dR0jnvn0MRrEG8.roa
Signing time: Wed 14 Sep 2022 08:11:05 +0000
ROA not before: Wed 14 Sep 2022 08:11:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:3b07:3be1/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3b:0d:39:c4:81:8d:ad:0d:a7:02:2c:b6:41:90:23:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 14 08:11:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9236d0d02b4057801d5d4748e7be7d0c46b106f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:cf:0f:fd:50:15:74:7a:2c:0a:ae:dd:04:
42:11:82:29:ac:f3:5b:61:da:c5:e3:27:92:4e:0f:
32:cb:e3:f9:c4:40:60:29:5c:fd:7f:04:e5:88:66:
c0:e2:c0:f7:97:a6:11:51:f2:25:8b:af:12:a6:62:
97:0b:0f:74:de:0e:a9:3a:7e:65:34:ad:83:e3:12:
e0:dd:08:41:52:ff:37:05:eb:3e:a7:1f:6f:ef:5d:
aa:ff:98:d3:75:a3:fc:fc:b5:af:18:eb:e4:16:9c:
ef:6c:e2:a8:ba:cd:9b:6c:ce:66:5b:9d:8c:86:ee:
53:40:bc:9d:30:a0:ac:2f:f3:dd:e9:6c:c6:9b:07:
0e:6f:92:3e:f7:57:e2:6f:2a:26:41:f2:60:df:78:
ee:7b:cb:9f:bd:42:22:a6:6e:df:7e:3f:d2:d5:8b:
5e:3b:b4:1b:11:04:34:eb:8b:ec:e1:f4:bb:a2:1e:
e5:84:70:ef:de:83:7c:97:3a:41:1f:4e:ce:65:2f:
27:3c:95:fd:b6:95:e7:f7:b7:4a:5c:ce:bf:15:61:
ff:f2:b2:a4:c3:94:e1:e3:bb:36:26:4f:04:e5:75:
b8:e2:26:db:98:75:b2:5b:df:7f:65:09:90:4d:c4:
fe:af:0f:5b:de:f1:79:cd:a1:ff:6e:0f:29:82:90:
46:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:23:6D:0D:02:B4:05:78:01:D5:D4:74:8E:7B:E7:D0:C4:6B:10:6F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qSNtDQK0BXgB1dR0jnvn0MRrEG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:8b:06:da:5f:75:44:4b:55:b7:61:76:cf:a3:01:64:01:71:
09:fe:36:d1:e6:68:1b:84:1e:1c:79:a4:0c:18:7b:2b:06:06:
fb:6d:10:58:fb:1b:7e:cf:f2:60:4a:ae:8d:8b:66:27:62:4e:
44:18:fe:d0:17:57:4c:6e:58:04:04:10:af:1b:f2:ee:63:9c:
58:f9:c2:b8:4c:73:7e:33:23:9b:cc:31:5f:a7:57:0d:e5:1f:
94:cf:8c:04:7a:f9:ff:a9:98:81:dc:15:28:28:6b:56:f9:2c:
a5:3c:24:a0:66:ea:93:c7:8e:6c:35:3a:40:4f:ea:01:d0:9c:
30:65:42:cb:98:f5:f6:47:e0:48:ff:5e:1c:0d:28:57:cc:ec:
ae:95:d9:4a:55:e8:69:ec:0e:31:0a:82:12:2e:c1:56:01:a6:
44:e7:7e:94:e7:14:c2:5c:c0:19:f1:70:39:2b:a2:63:e6:2e:
79:7d:d5:37:0a:f9:c3:04:7d:c5:18:d0:b8:ee:38:1e:96:54:
b6:3e:82:6e:c1:29:00:be:aa:28:ae:73:c1:09:41:9a:af:2c:
8b:d7:37:5b:0b:3b:82:1c:5f:4f:75:c6:5d:fd:e9:1a:a7:28:
3d:b8:cf:47:50:3e:8b:08:35:38:27:b7:86:99:90:c9:51:16:
bf:cb:1c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:12:40 2025 by rpki-client