Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qWffbpPdJIT0gJRhATDmMveFxaU.roa
File: qWffbpPdJIT0gJRhATDmMveFxaU.roa (raw, json)
Hash identifier: zAJtFUttkc4B4sfy6wxwo3GUI36px7v0P3j1GkdoMkU=
Subject key identifier: A9:67:DF:6E:93:DD:24:84:F4:80:94:61:01:30:E6:32:F7:85:C5:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A032CD9C653ED05B36DFB45E2FE218EB3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qWffbpPdJIT0gJRhATDmMveFxaU.roa
Signing time: Thu 17 Aug 2023 11:06:25 +0000
ROA not before: Thu 17 Aug 2023 11:06:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:18a:32c:4d9d/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:2c:d9:c6:53:ed:05:b3:6d:fb:45:e2:fe:21:8e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 11:06:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a967df6e93dd2484f48094610130e632f785c5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f3:4e:87:a4:fd:c0:ff:9e:5a:f5:10:8b:dd:
59:cc:80:38:b8:1c:f3:7a:ce:fb:96:e3:cd:35:b6:
35:7f:b1:4e:fd:be:10:ad:c8:3f:23:c4:5b:22:bf:
cd:ee:42:8b:a8:19:7f:9f:0d:6a:f9:5c:5e:46:c2:
83:46:b3:02:44:14:b6:d5:69:ca:e1:55:76:61:34:
15:39:d2:29:ec:e8:39:2d:98:15:4f:81:e0:80:a3:
f1:da:05:3a:ae:29:9a:24:de:e8:89:36:83:91:e5:
6f:f8:55:5a:d1:0d:15:1b:6c:96:68:61:9c:43:b4:
2f:57:4e:6b:d8:b9:9f:fa:d7:1d:dc:16:51:a6:73:
bd:27:18:6d:51:63:95:aa:ac:16:b5:d2:c1:ce:a0:
e8:64:0a:83:81:d9:22:06:27:c6:67:e6:38:4b:4a:
b6:50:fe:6e:8a:ce:92:5f:b9:08:26:47:88:85:85:
29:bf:cc:da:e3:26:75:29:6c:6d:b2:0f:9d:9c:6b:
b1:f5:0a:3f:d5:f6:13:ee:db:25:60:bc:cf:3c:86:
d7:bc:52:78:38:2c:42:85:00:97:b8:04:77:88:59:
b8:54:d1:fc:eb:4d:29:c8:2e:5c:27:24:aa:ed:4c:
32:f3:26:08:4f:86:f0:34:9e:09:14:b0:ab:93:ec:
fa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:67:DF:6E:93:DD:24:84:F4:80:94:61:01:30:E6:32:F7:85:C5:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qWffbpPdJIT0gJRhATDmMveFxaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:7c:3c:f2:8e:8d:d9:8b:41:72:6d:1a:56:a2:ac:b2:21:05:
b6:09:7a:8f:22:3b:ce:2d:5f:27:f5:20:a0:00:bc:83:27:36:
08:40:77:3c:71:17:86:2a:dc:55:bc:83:c9:5a:dd:f3:64:95:
0e:3f:7b:2c:20:f3:11:02:8f:b9:d0:b8:ee:71:81:a1:fd:98:
ed:ad:68:65:ee:35:a7:03:a5:fc:da:7b:e8:13:dc:f8:cd:e0:
1d:04:52:5c:ee:77:73:79:b3:e8:3e:8a:46:35:0e:6b:b3:55:
31:fe:0e:5d:f3:ce:aa:74:7e:ff:cb:20:0e:a5:0e:37:6d:e6:
ae:bd:f4:96:ea:22:2c:e5:95:8f:e9:a1:73:ed:8f:3b:3b:dc:
4e:63:c3:a0:71:b0:ea:15:4c:88:c0:cf:9a:d1:95:6f:53:00:
c1:66:7a:58:e2:4d:a3:9b:e6:df:8a:e5:b0:1a:18:c5:07:47:
c6:67:1a:47:5d:e0:31:33:8e:fa:0c:fe:ef:d5:de:5b:fd:42:
da:31:fe:82:0a:4e:b6:58:84:21:91:5e:9b:ed:03:e9:8e:1d:
2e:d3:c3:75:93:e1:7d:0e:0e:db:d9:ee:15:ff:3c:af:6d:60:
d8:d5:8d:f8:7f:61:b5:fe:57:03:8a:94:dd:91:80:87:4c:2d:
ee:81:fa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:42:32 2025 by rpki-client