Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qZQA9vxe_7B6je0jYHPqADVC4-8.roa
File: qZQA9vxe_7B6je0jYHPqADVC4-8.roa (raw, json)
Hash identifier: 1ZrhHZBOocBlCZw653QVAJQKRcNOE7E2HxI1g3ukVv8=
Subject key identifier: A9:94:00:F6:FC:5E:FF:B0:7A:8D:ED:23:60:73:EA:00:35:42:E3:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C64418DFA2EBA930FA18931EED5B0651
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qZQA9vxe_7B6je0jYHPqADVC4-8.roa
Signing time: Sat 05 Aug 2023 15:14:58 +0000
ROA not before: Sat 05 Aug 2023 15:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c6:44:18:df:a2:eb:a9:30:fa:18:93:1e:ed:5b:06:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 15:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a99400f6fc5effb07a8ded236073ea003542e3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:05:40:96:7a:1a:67:36:04:b1:e0:dd:02:01:
29:37:85:36:0d:a7:93:c0:93:cf:cb:3c:c7:cc:c7:
e3:67:ed:1c:61:74:01:6f:10:00:71:02:6a:3f:3f:
a0:80:45:3e:d9:20:f4:c8:b3:a9:5e:4d:1f:99:26:
91:c6:d8:fa:19:4c:d9:db:ef:83:0e:ec:0c:a4:83:
db:3a:2e:ca:2b:ff:34:1b:99:6d:a3:ae:e0:cc:7f:
84:3a:18:84:ea:c1:b3:ba:9d:ee:2d:c5:0e:21:8d:
c0:04:9b:6c:9e:03:2e:d8:99:c7:7d:98:fb:67:e9:
28:e5:c3:f5:f3:fe:70:1b:7e:d3:b2:9e:03:0f:8e:
e2:18:9d:04:bf:a1:9f:07:f4:d6:81:b2:74:6a:28:
17:96:a2:e9:79:96:24:ed:8a:f5:78:45:65:0b:fb:
79:4a:c4:20:fb:93:7b:fb:bf:c8:a1:b6:d4:75:81:
92:40:ef:e4:f4:2d:78:65:54:5e:63:73:92:cf:cb:
76:3c:e7:0d:86:5e:e7:eb:a6:cb:23:cc:c0:20:e0:
86:b8:7e:89:b5:18:50:fd:c1:3d:b1:2f:22:fb:38:
3f:49:b5:93:6a:c5:99:af:9d:13:34:4f:ea:4c:a4:
f5:b6:c5:b0:a6:43:7c:9c:a4:dd:2f:bb:8d:f3:46:
16:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:94:00:F6:FC:5E:FF:B0:7A:8D:ED:23:60:73:EA:00:35:42:E3:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qZQA9vxe_7B6je0jYHPqADVC4-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:87:5f:ac:8c:a8:96:b7:81:6d:1d:09:01:ee:f1:78:60:c1:
42:01:6f:90:d6:02:f8:05:97:01:18:0e:b9:40:cf:08:4d:81:
8e:35:fa:3a:ac:25:72:a1:38:ce:0e:9b:6a:06:d8:15:40:02:
65:09:88:6a:ee:58:f2:8f:87:62:07:d1:d8:b2:4e:6c:72:12:
73:d7:ea:fd:16:2c:ab:f4:0c:e2:e3:72:27:8e:32:21:cc:5d:
c5:9d:4e:eb:7d:ac:70:57:ed:c7:d4:ce:e0:09:ef:85:c0:3a:
41:2d:55:0d:53:6e:7d:28:87:eb:aa:02:b1:09:99:0c:3f:d0:
f5:5f:b0:d3:9f:cf:b3:3d:95:58:8f:c8:fa:2f:f0:d0:10:37:
84:6a:bf:88:1b:6e:9f:f0:03:f0:01:61:30:2f:19:d2:8e:8b:
11:cf:4f:e0:af:55:14:42:fa:ae:5d:74:9b:82:96:b8:d0:e7:
a8:a6:61:01:f1:a0:eb:d8:01:79:5c:2e:2c:25:22:bc:42:69:
df:cf:4c:23:18:fd:f1:eb:77:93:44:ee:ea:c6:05:e5:01:53:
75:49:63:d0:b1:ec:3c:16:27:c2:a4:a8:b5:f6:e0:9d:be:23:
22:5e:b4:9b:97:df:73:77:5e:a6:25:2c:6f:35:20:31:8e:41:
de:e7:b9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:15:47 2025 by rpki-client