Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qWI92loM3vwJZ_JzTyHdPLRhCnE.roa
File: qWI92loM3vwJZ_JzTyHdPLRhCnE.roa (raw, json)
Hash identifier: USkjQPjP274GIp0KMVkVCKySG+QErcVmyfWgdLESv10=
Subject key identifier: A9:62:3D:DA:5A:0C:DE:FC:09:67:F2:73:4F:21:DD:3C:B4:61:0A:71
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018573AAF995F065019368318404769B4ADC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qWI92loM3vwJZ_JzTyHdPLRhCnE.roa
Signing time: Mon 02 Jan 2023 18:07:42 +0000
ROA not before: Mon 02 Jan 2023 18:07:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:aa:f9:95:f0:65:01:93:68:31:84:04:76:9b:4a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 2 18:07:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9623dda5a0cdefc0967f2734f21dd3cb4610a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:18:56:a2:f4:be:7f:fa:a0:b3:f7:ba:73:
fc:0c:65:ae:8d:76:9c:04:44:82:3c:ab:11:28:67:
80:3f:cb:c4:ec:f8:36:47:90:4f:24:e3:52:70:9e:
7e:5f:b5:34:da:db:2f:1b:40:b0:dc:44:db:74:e4:
8b:2d:ac:23:ce:7f:f9:7e:24:53:1a:65:2e:01:86:
ac:88:57:9a:6d:69:fc:5a:44:8a:0f:aa:3e:ff:29:
da:11:f0:21:fe:87:35:6e:e2:c4:98:f5:27:45:b4:
c1:5f:8f:15:29:f5:c4:37:a7:8d:44:1b:53:aa:fd:
9f:fe:b2:ef:2c:65:03:c5:00:68:9f:75:12:38:42:
67:e6:ec:9f:20:68:3f:07:dc:9a:58:f6:d0:52:01:
44:7a:d0:35:b0:f9:92:d5:0e:06:b5:95:e7:58:e6:
47:a4:59:d0:35:58:7c:61:2c:7f:8d:52:be:59:3b:
f8:45:b9:0a:b6:c7:ee:7e:78:d8:8e:24:7b:31:7c:
dc:c4:fe:75:77:62:3d:88:e6:99:30:fe:c6:ae:6c:
f4:4a:37:73:54:e2:73:07:ea:0e:0e:29:d8:22:c8:
dc:84:f1:fd:e6:03:a3:07:40:0c:15:cf:ed:9d:da:
d8:b4:ba:54:cb:d9:a0:df:e0:87:0a:ed:26:42:e5:
fb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:62:3D:DA:5A:0C:DE:FC:09:67:F2:73:4F:21:DD:3C:B4:61:0A:71
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qWI92loM3vwJZ_JzTyHdPLRhCnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:4a:48:fc:a0:58:70:d8:92:13:70:ce:4d:e4:5a:d0:d0:64:
1d:48:eb:09:24:8c:b3:bc:0e:04:5d:b6:c6:c0:8c:72:82:64:
cd:f9:ff:94:56:41:4f:b8:f9:e2:85:a4:1e:dc:f8:a0:4d:93:
65:f8:eb:58:e3:8d:a8:a2:29:4c:fa:9e:69:35:9e:60:fc:ac:
ef:9d:9a:df:f3:89:84:70:f3:60:25:25:75:59:61:05:dc:07:
65:89:50:87:ac:6e:6e:f8:57:cb:e0:c5:97:d4:54:e1:65:04:
49:c8:53:f4:00:fe:66:fb:36:bb:b1:02:79:4d:41:19:80:f1:
09:2a:e0:5c:58:b5:a0:50:bb:7d:d8:4a:e4:86:be:a4:8d:bf:
f0:44:a0:d0:67:c8:7f:9a:bf:6d:37:d1:f6:76:d7:43:dd:10:
98:16:a4:51:3f:4e:a0:a5:8f:f3:f5:d3:a7:1e:10:80:86:f8:
ff:27:a9:94:13:ee:b3:51:bb:98:b1:b9:05:47:05:80:bb:cf:
59:76:40:e1:a7:a4:67:0e:ac:03:86:e6:4a:91:4a:7a:5b:be:
68:13:6d:5c:b7:39:bc:57:16:71:c2:96:37:4e:c7:3e:34:00:
d4:1c:56:ed:ba:a3:77:67:f1:54:1c:89:5e:8d:dc:d9:57:72:
9e:91:aa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:38:56 2025 by rpki-client