Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qX-yEmiuLeJGTV7EdQE7jk-1JHE.roa
File: qX-yEmiuLeJGTV7EdQE7jk-1JHE.roa (raw, json)
Hash identifier: O++2zYT2AAWc5cvDahQRm7WZ8rsFqepcxb8xIoUNz2M=
Subject key identifier: A9:7F:B2:12:68:AE:2D:E2:46:4D:5E:C4:75:01:3B:8E:4F:B5:24:71
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01847F10E6301C057D0AD1543006B9284274
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qX-yEmiuLeJGTV7EdQE7jk-1JHE.roa
Signing time: Wed 16 Nov 2022 06:12:04 +0000
ROA not before: Wed 16 Nov 2022 06:12:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7f:10:e6:30:1c:05:7d:0a:d1:54:30:06:b9:28:42:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 16 06:12:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a97fb21268ae2de2464d5ec475013b8e4fb52471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:89:f8:a1:73:3b:b9:f7:87:c2:df:fd:13:
18:90:67:23:85:c9:a4:72:e0:47:ba:6e:a8:3e:de:
91:10:0b:18:66:46:0e:02:3b:6e:09:b4:5b:d7:68:
e7:df:5d:21:a3:7b:fa:c2:86:03:bd:1d:44:e9:ae:
63:cc:bf:19:79:7a:be:97:2a:d9:93:27:36:9d:34:
80:cb:a7:d3:a5:2e:3d:f4:45:25:8d:7a:48:fc:96:
99:ff:ff:ed:92:26:67:f4:e0:7d:19:73:3d:10:01:
38:9d:4c:4a:0e:6f:93:d8:1e:32:af:09:93:5c:68:
18:44:44:b2:0f:ad:4e:7c:c6:2d:e3:2b:39:59:27:
85:c4:2f:b6:79:d7:38:72:9b:fc:dd:04:c1:e9:14:
9d:47:bf:01:49:21:97:f5:0a:00:82:f3:d1:8f:5c:
7f:96:e9:01:41:0b:d3:25:91:68:e9:a1:a3:34:52:
b0:9a:fe:7a:1e:cc:10:0c:b6:62:84:4d:a3:c5:05:
cb:3c:af:a6:3d:c0:35:4e:72:6c:a2:2e:1d:f3:ca:
76:dc:96:7c:42:c7:c3:4c:09:29:d7:d6:a2:df:71:
1e:b1:4c:a0:ea:b8:f3:13:52:18:2f:80:7d:58:24:
e9:ef:c1:bd:6f:6d:da:32:bf:aa:b5:2b:53:e4:4b:
48:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7F:B2:12:68:AE:2D:E2:46:4D:5E:C4:75:01:3B:8E:4F:B5:24:71
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qX-yEmiuLeJGTV7EdQE7jk-1JHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:14:5e:11:6c:71:4f:3a:22:ee:29:79:97:c8:81:7c:8c:2d:
b1:a3:d6:2e:b8:0e:b8:1d:52:01:e5:4b:76:85:99:f9:10:85:
a5:b3:1a:dd:07:fb:62:8d:bf:31:25:b7:94:b7:1c:79:1c:0e:
b8:ad:87:d5:41:4d:9b:d8:b7:95:59:ad:50:9d:bf:9c:13:aa:
4d:89:b8:2f:53:bd:9d:61:e4:87:a8:a3:ce:dc:bc:2a:5d:b9:
88:e4:12:77:69:a3:79:01:a1:85:50:12:f3:88:39:65:72:de:
59:0e:5e:e3:d8:f6:3c:2c:a0:81:f7:ca:50:ff:fa:5f:ad:e4:
e2:47:17:d6:71:8f:f8:3c:aa:8b:52:86:4a:39:48:a9:c1:d1:
9e:70:d0:8a:d4:02:0b:c7:1e:5f:76:c4:0b:bd:f9:68:b9:39:
d6:39:f6:df:73:fe:02:66:3c:d3:cc:f0:8f:4c:c3:74:cb:b7:
3b:1f:82:10:e4:c2:e6:43:5f:a3:02:ae:c7:fa:f4:6a:81:73:
78:ed:d8:15:ad:12:63:83:f1:3b:c6:e6:d2:a4:87:96:e8:56:
9d:25:22:de:4b:56:c7:d4:07:d5:62:ca:ea:0c:2b:9e:9c:bf:
08:3b:00:73:6d:01:f6:77:b4:10:5a:37:18:23:2a:c5:bb:60:
50:9b:1c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:46 2025 by rpki-client