Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qZTV2Rb9p1FLNsIOheam9H08BRc.roa
File: qZTV2Rb9p1FLNsIOheam9H08BRc.roa (raw, json)
Hash identifier: rkhQq4Qq6rcJT4qJffXkS3+3Hxq2DrOsTiMQKzvMVTI=
Subject key identifier: A9:94:D5:D9:16:FD:A7:51:4B:36:C2:0E:85:E6:A6:F4:7D:3C:05:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187AD2A462FBF8D9794AFC20EE8CB091F18
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qZTV2Rb9p1FLNsIOheam9H08BRc.roa
Signing time: Sun 23 Apr 2023 08:10:41 +0000
ROA not before: Sun 23 Apr 2023 08:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ad:2a:46:2f:bf:8d:97:94:af:c2:0e:e8:cb:09:1f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 23 08:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a994d5d916fda7514b36c20e85e6a6f47d3c0517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:89:36:25:01:14:6f:70:38:07:b0:6a:b8:32:
5e:fb:89:72:c8:ff:90:1c:b9:0f:b3:03:eb:05:2f:
e1:e0:1e:36:1e:7b:d8:d0:48:1a:18:48:54:19:ce:
ab:aa:e5:31:4d:83:dc:72:d7:fc:7f:b9:d9:a7:c9:
a0:5e:14:e6:07:8f:82:77:dd:72:59:66:45:2b:09:
59:d1:db:57:8a:ef:2a:80:69:3a:52:b1:ac:20:28:
76:2f:2c:00:da:81:8b:31:33:74:de:ad:46:19:7c:
fb:c2:73:c2:0f:54:df:63:f9:04:55:08:57:d5:19:
4e:df:2f:2f:a9:91:56:94:ef:aa:26:da:fd:ba:f4:
0c:0c:0f:3c:44:ab:6a:27:28:e0:5d:43:00:cc:82:
61:b6:03:57:4e:ab:de:1f:5f:3f:40:a5:95:4b:90:
9d:ec:64:f2:28:e1:7f:4c:d2:3f:56:44:40:61:a3:
14:20:4a:63:b6:f4:fc:b0:8c:62:09:ae:7a:e8:61:
13:d0:5f:ab:69:38:cd:8b:48:38:14:bb:54:ae:6c:
a2:99:ef:4c:7f:68:bf:df:46:19:2a:12:ff:a1:b4:
99:2e:a0:6f:a5:20:f1:dd:de:fe:45:08:73:ee:0c:
14:07:0f:8d:7e:97:50:a1:55:5e:b0:9d:2a:f1:93:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:94:D5:D9:16:FD:A7:51:4B:36:C2:0E:85:E6:A6:F4:7D:3C:05:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qZTV2Rb9p1FLNsIOheam9H08BRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:2b:95:a2:70:5c:b8:26:d2:ce:de:a3:c3:4a:08:1c:d9:cc:
33:1d:e2:83:59:ba:d7:6b:dd:0b:d1:c7:17:6c:c9:02:a7:ab:
e1:12:f1:68:d4:2a:b5:c9:31:5b:da:c9:60:b3:bd:b6:8b:78:
e0:86:ee:03:53:ce:39:fe:19:74:f9:91:74:ef:8a:cb:14:df:
2d:8c:78:16:cc:16:16:e7:db:c7:97:16:e9:2f:c0:eb:5e:a5:
9b:2c:89:e8:d5:63:5e:6a:dc:c8:a7:3b:3c:6c:82:ca:19:a3:
94:d5:6b:f4:3a:bd:e0:11:7a:df:c5:6a:3b:06:de:2d:ed:c5:
2e:e5:6d:23:d8:29:8c:f9:7f:52:c3:04:cc:9f:c2:43:d6:2a:
4c:bb:c7:54:3c:b9:a7:97:5d:2a:33:95:7e:ad:bb:1d:9e:04:
d4:b5:af:93:3b:71:9f:fb:50:cf:c1:58:90:3d:84:65:fd:36:
e3:0f:ac:b1:16:fd:34:e4:2b:14:70:1f:83:6f:6b:49:3e:c2:
a2:2a:fe:8f:21:18:9c:c4:3f:1e:77:ed:cb:63:ac:a1:56:3a:
a0:57:ba:a0:f4:30:b9:b8:f6:62:40:29:fa:6a:79:ac:e0:d0:
25:c5:e7:96:f0:ab:9b:e0:ca:49:4c:a1:5c:b7:03:90:2c:2a:
5e:87:a5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:08 2025 by rpki-client