Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qWb9XpMKeqWxi9QlAnjFuxO_F4E.roa
File: qWb9XpMKeqWxi9QlAnjFuxO_F4E.roa (raw, json)
Hash identifier: 1EbjmlzXxBYxIMZfHIsuwAMq5HStToTG65E6nhKy6bY=
Subject key identifier: A9:66:FD:5E:93:0A:7A:A5:B1:8B:D4:25:02:78:C5:BB:13:BF:17:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3DCDEC024C5B03B93F9C2BDCD42A23B3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qWb9XpMKeqWxi9QlAnjFuxO_F4E.roa
Signing time: Mon 28 Aug 2023 20:20:19 +0000
ROA not before: Mon 28 Aug 2023 20:20:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3d:cd:ec:02:4c:5b:03:b9:3f:9c:2b:dc:d4:2a:23:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 20:20:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a966fd5e930a7aa5b18bd4250278c5bb13bf1781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:2f:2b:6e:ca:4a:1a:99:74:c9:81:60:58:
43:e8:ee:d6:fe:27:96:fe:af:eb:91:d3:bf:bf:ba:
bb:05:2f:5c:84:75:1f:da:ec:8f:fc:2a:c4:ff:ee:
47:45:22:d6:d3:7a:2e:8c:b3:14:fa:22:a8:95:9a:
b5:93:9d:3c:e0:56:26:a7:56:ed:22:0f:83:26:5a:
58:9b:66:16:14:f8:61:74:2f:5e:f7:61:99:6d:69:
9f:5a:08:84:d1:4c:f7:70:53:b1:d1:33:26:29:70:
eb:e5:c8:c1:2d:99:34:64:75:de:aa:36:40:49:cd:
a9:e7:cf:b3:f4:cc:18:1a:8b:4e:75:77:41:6f:6c:
83:15:f8:69:a7:e9:69:7a:2c:b4:e8:1e:a3:3a:f7:
ff:0d:12:55:32:6e:c8:1a:80:3a:e7:ab:51:2c:8e:
0d:ca:50:ae:83:bb:b9:e8:d9:64:89:7f:51:a3:ec:
7e:6b:6f:69:3b:15:28:78:dd:cd:e9:1b:23:7e:34:
84:9e:bf:e0:0d:ab:5b:60:cd:89:b7:04:80:17:ed:
80:80:2a:c1:2e:3d:d7:c4:9b:df:38:21:8f:e4:72:
1f:1f:27:ba:cb:2f:9c:cd:da:14:7e:8d:53:1b:a7:
60:95:0c:10:e1:3f:2a:a6:0c:6d:d2:32:9c:30:ce:
db:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:66:FD:5E:93:0A:7A:A5:B1:8B:D4:25:02:78:C5:BB:13:BF:17:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qWb9XpMKeqWxi9QlAnjFuxO_F4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:c1:06:74:2a:65:c8:07:d2:f0:95:d0:b3:85:10:f7:43:51:
20:25:62:ee:c6:73:c4:b8:40:8f:3d:c4:0e:2f:60:da:86:15:
f7:da:41:0a:53:7f:a2:81:1c:a8:b9:9b:ff:18:37:6a:9c:59:
f8:d6:41:23:38:a5:8b:e0:3f:ac:ae:67:d9:1b:00:79:3c:c6:
31:f9:d6:e3:93:59:20:06:d5:07:87:7e:c3:96:33:92:eb:16:
71:c1:c8:76:96:70:5b:df:d5:db:f0:61:5f:3b:bf:af:a6:bc:
ee:ac:cf:1e:01:58:8b:71:2e:b6:64:ea:cd:ea:bb:c6:11:bc:
86:13:22:68:37:4c:39:ac:e9:ac:90:44:9a:8c:f4:1c:3e:86:
6b:95:dd:b3:69:6e:18:1b:e0:30:59:20:7e:f8:ea:94:88:22:
5e:8b:2d:3a:87:02:aa:00:fe:be:5e:eb:0d:12:ee:93:ae:2b:
01:ef:a2:45:fb:62:20:0c:30:6e:c7:70:26:32:ae:59:7d:c4:
fe:35:e9:e3:ad:c9:3c:12:f5:e5:49:5c:29:eb:fb:25:c1:eb:
9a:64:87:f7:04:7e:94:ca:78:18:23:c9:9a:89:a1:1d:c9:63:
a9:a5:12:43:5f:fc:29:c1:c1:01:49:0c:a2:58:a7:2e:57:de:
84:4f:73:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:55:59 2025 by rpki-client