Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qZILljHSs-r0GHaZssojJBsb8u4.roa
File: qZILljHSs-r0GHaZssojJBsb8u4.roa (raw, json)
Hash identifier: otyFcnEKGHtNrkNFhpXDdr+ilAZoZPK9ROWapw5OBbQ=
Subject key identifier: A9:92:0B:96:31:D2:B3:EA:F4:18:76:99:B2:CA:23:24:1B:1B:F2:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018863200E382DAB541D6B8644152F7E1DF6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qZILljHSs-r0GHaZssojJBsb8u4.roa
Signing time: Sun 28 May 2023 16:10:25 +0000
ROA not before: Sun 28 May 2023 16:10:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:63:20:0e:38:2d:ab:54:1d:6b:86:44:15:2f:7e:1d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 28 16:10:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9920b9631d2b3eaf4187699b2ca23241b1bf2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:d4:5a:5e:79:5a:20:07:25:82:2f:c2:62:
e8:41:ba:99:74:39:fc:49:a7:65:a1:14:cb:b5:e6:
f0:f6:f3:69:56:32:94:c2:f3:93:37:fe:08:73:38:
08:eb:97:2b:b1:eb:ea:60:d9:1f:94:c7:dd:82:95:
4f:a4:f1:59:b9:be:04:fb:fb:c5:2b:9a:db:bb:9d:
17:18:49:ce:6a:53:53:21:d7:13:fd:4f:ef:ca:b1:
88:16:f8:c1:87:44:db:7c:f6:ca:3f:5f:27:d3:9c:
19:8f:3c:ad:39:7f:7f:c2:c7:d1:95:3e:0f:93:ef:
97:cc:f1:c5:48:83:9b:8e:2e:03:3b:bd:35:4a:fc:
55:ab:13:13:6e:3f:a0:c9:c0:30:35:18:54:8f:ec:
5d:52:a9:99:70:d7:62:9c:76:06:c0:87:52:49:8d:
cd:db:f9:a4:7a:68:de:4d:51:03:96:a0:f7:4a:75:
cb:22:53:02:15:6e:80:95:16:cc:b6:f8:7e:4d:cc:
87:56:c3:8d:cc:c7:14:1e:ba:19:70:40:17:3a:de:
76:a8:bc:5f:14:f2:e1:63:35:e5:22:53:d3:71:0d:
a5:53:63:c1:54:22:76:e4:ea:1c:b1:b6:fe:f4:96:
bd:24:35:3d:31:1f:a1:ab:36:ff:02:82:22:eb:30:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:92:0B:96:31:D2:B3:EA:F4:18:76:99:B2:CA:23:24:1B:1B:F2:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qZILljHSs-r0GHaZssojJBsb8u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:2e:43:ed:d4:50:c4:4d:05:a3:aa:c2:08:ef:05:cd:c0:ef:
20:a9:27:ba:84:df:93:78:56:1d:97:a6:b0:7a:5f:e5:57:f5:
02:37:7f:cb:1b:b2:d1:f0:f2:87:1d:e6:12:b8:87:ab:ad:0d:
18:40:ec:ea:03:6b:12:4a:96:5a:d1:8c:77:18:ce:98:b1:cb:
81:b2:bd:be:e7:62:2a:f2:4f:47:5f:77:3f:b7:2a:72:04:24:
d1:09:e0:23:3a:d0:a9:34:ec:11:52:96:70:be:f1:bf:ef:07:
d4:80:65:a4:48:39:0b:4f:c9:e6:d5:2c:e1:81:15:be:47:a7:
ce:84:36:3a:db:84:21:3c:6b:29:c8:fa:18:d2:01:67:63:88:
1a:6d:89:7d:b0:72:e6:8d:b0:11:bd:f2:51:95:a5:4d:91:91:
a9:d0:7c:20:af:f4:51:f1:46:a9:31:bd:83:65:de:c3:c9:8d:
37:86:6c:87:53:ed:27:5e:43:c9:e6:2e:b3:0c:f5:a6:f2:ee:
5d:60:60:39:e5:c0:2a:e3:95:e8:92:cc:2a:3a:e9:94:80:e2:
1c:65:e6:34:35:19:c2:55:84:79:30:d9:88:cb:66:f6:fb:6d:
7b:1d:65:52:d3:14:97:e2:4e:0e:56:20:4d:5b:0f:61:80:a1:
8b:67:34:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:47 2025 by rpki-client