Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qUpXPkKlY00PH8hvKLg3M9pmZfQ.roa
File: qUpXPkKlY00PH8hvKLg3M9pmZfQ.roa (raw, json)
Hash identifier: 46BZpkiSIlwMr15B7W79uSO0pzL3v9RcUWYcE7JCGwc=
Subject key identifier: A9:4A:57:3E:42:A5:63:4D:0F:1F:C8:6F:28:B8:37:33:DA:66:65:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878E7BF77053836DD18A4349B308CE847B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qUpXPkKlY00PH8hvKLg3M9pmZfQ.roa
Signing time: Mon 17 Apr 2023 09:11:41 +0000
ROA not before: Mon 17 Apr 2023 09:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:7b:f7:70:53:83:6d:d1:8a:43:49:b3:08:ce:84:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 17 09:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a94a573e42a5634d0f1fc86f28b83733da6665f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:dd:4b:38:d2:ec:dc:28:fb:ec:f9:2e:14:
24:3a:95:35:b4:7d:5c:1c:79:f3:09:14:0a:d6:01:
81:43:b0:4b:1e:ce:2d:d7:87:cc:bb:3d:b0:34:3c:
78:14:05:6e:89:05:1e:8b:f3:a3:ce:f2:86:d4:84:
ff:d5:7a:fa:63:c5:10:99:f0:af:6d:5c:f1:b7:46:
6b:a9:3e:f8:8c:85:df:77:63:47:f3:d1:45:bf:a7:
9f:6a:0c:d9:34:b1:cb:5a:30:24:00:f2:25:dc:23:
cb:db:27:58:31:56:41:f0:b2:a5:79:d0:ed:bc:87:
ba:3e:93:57:81:08:0d:db:4c:2e:3a:95:82:33:fd:
03:6d:70:14:f4:da:3b:d8:b8:58:cd:33:fd:73:9a:
2a:e7:12:4d:65:26:9b:1c:cf:82:01:fa:6e:a7:ce:
58:d3:21:2e:de:db:59:f4:0a:1b:99:eb:e2:58:b5:
a9:9c:9b:02:0b:e8:37:61:26:d2:3d:17:90:ce:7d:
eb:7f:3c:9f:98:5f:d3:c3:a9:db:73:6c:34:30:6e:
79:40:4c:04:aa:34:ff:29:74:00:76:9c:bb:70:e7:
3f:ec:a0:a5:1c:b0:fe:b8:b7:83:7c:19:9a:b5:f1:
76:14:ff:a5:0d:96:4a:fc:59:11:e4:dd:18:74:e3:
43:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4A:57:3E:42:A5:63:4D:0F:1F:C8:6F:28:B8:37:33:DA:66:65:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qUpXPkKlY00PH8hvKLg3M9pmZfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:87:7b:dc:34:69:b5:2e:d9:0e:a3:aa:d4:dc:5b:3b:e2:a6:
52:d6:f7:c2:7e:7b:1b:e6:fd:2d:53:31:0f:45:e0:87:3c:59:
7d:cf:9f:71:27:0f:eb:34:27:29:81:32:eb:01:c3:92:9e:6a:
fe:93:c2:f2:b8:c9:84:c1:63:f3:6f:4e:64:ef:a1:72:8c:73:
80:72:02:97:85:fa:20:6b:f9:30:86:93:61:1e:44:6b:2b:03:
ce:1c:1f:5f:71:95:a1:97:a1:2e:0d:d7:26:b7:08:cc:73:fc:
5d:10:c6:5e:3a:43:9d:4a:76:48:2d:e7:5e:66:a0:2c:d5:c5:
4b:c2:6d:7a:42:64:a2:bb:ee:18:48:b1:7d:4c:9e:7b:50:38:
bf:8d:94:47:4e:f3:d0:56:0c:8e:f6:34:e2:0a:81:2d:ca:3a:
88:04:04:68:4c:af:df:2d:40:cf:c7:77:c1:6e:a4:1e:7f:50:
62:32:23:1a:93:2f:6c:b6:11:f1:35:9d:79:c2:b0:d3:6f:c1:
a7:9e:bd:d1:c3:ff:b7:08:e4:57:46:e0:cb:05:ef:61:05:68:
27:97:56:12:d1:c6:0a:89:da:a0:e5:a8:35:0f:0b:4a:0b:f6:
0a:68:cb:25:15:cd:f3:47:a3:38:7b:4f:fa:55:85:30:cf:a9:
fa:62:69:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:47:17 2025 by rpki-client