Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q_iudknpyd7hqBZDIHFVp4uf9sQ.roa
File: q_iudknpyd7hqBZDIHFVp4uf9sQ.roa (raw, json)
Hash identifier: e9bEYqmmw6KWHv9PNTXQk/o/BJ4WP8YXFuMvnIADjrM=
Subject key identifier: AB:F8:AE:76:49:E9:C9:DE:E1:A8:16:43:20:71:55:A7:8B:9F:F6:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 70C81377
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q_iudknpyd7hqBZDIHFVp4uf9sQ.roa
Signing time: Tue 08 Mar 2022 13:09:00 +0000
ROA not before: Tue 08 Mar 2022 13:09:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1892160375 (0x70c81377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 13:09:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abf8ae7649e9c9dee1a81643207155a78b9ff6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:8d:f9:75:a6:1d:cb:a3:c5:34:34:05:cd:
9c:92:e2:1a:d2:b9:9a:f3:ac:dc:9d:43:4b:8b:38:
1f:5f:74:7f:7a:53:7b:78:ca:09:cc:7c:a3:7d:8a:
73:92:7a:72:ad:f4:3c:31:47:7b:3e:10:32:d8:63:
97:16:98:e4:95:ed:8a:79:c4:be:4d:0b:29:bc:4f:
e8:ed:d6:d5:47:b5:2c:74:33:8a:10:b9:7b:1c:8d:
06:66:5e:eb:d0:f1:b9:af:3b:e0:9f:66:8f:54:b0:
e3:58:55:e9:66:3d:ef:41:a3:11:73:71:09:ef:c0:
4a:79:9e:26:d9:e0:75:a8:1b:44:51:d8:14:69:03:
f5:1a:ea:0a:28:5e:d5:8f:3b:f6:63:26:66:d3:03:
dc:15:8d:df:f0:a4:de:38:1c:1b:9e:f5:3d:ca:92:
45:aa:80:bb:0a:cb:2f:00:09:cd:48:9e:ef:93:43:
65:df:fa:34:2d:72:75:c7:c7:16:63:2f:cb:7f:b7:
85:96:b6:5d:26:5c:de:ab:25:6c:cf:10:3c:f2:c5:
90:52:83:7b:05:2f:1a:4b:5a:f8:aa:56:60:9e:64:
65:01:70:d8:43:f8:85:40:7b:da:a3:c5:af:f3:4a:
a3:e5:36:40:d5:65:47:56:66:80:a0:67:b8:fc:cf:
4a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F8:AE:76:49:E9:C9:DE:E1:A8:16:43:20:71:55:A7:8B:9F:F6:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q_iudknpyd7hqBZDIHFVp4uf9sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:9c:38:a3:ca:c5:cd:fa:91:04:69:ad:18:36:3c:b9:05:dc:
18:c2:05:cc:9b:03:b8:97:c3:b7:ab:46:41:bd:de:68:1e:f0:
60:e4:50:be:cd:eb:9e:45:7a:a4:86:5b:49:bb:91:e4:0a:1f:
e9:2a:24:0a:ed:d6:43:d0:98:ec:b8:1f:d8:e7:fe:b2:ab:37:
a7:72:e8:01:b3:ce:f1:83:a1:bf:bc:51:60:2e:bf:f4:40:9d:
c8:a5:8a:ac:d7:29:2b:9a:06:4d:b5:6d:f0:b5:4f:68:6e:9b:
5c:76:52:ce:be:cf:c6:6d:cb:b8:0b:2c:a8:a3:ff:0a:ca:1a:
f1:f5:b4:12:3f:b6:01:50:17:8f:af:d7:41:fa:df:9a:81:91:
a0:12:82:ac:18:54:e5:32:a3:4c:6b:37:09:ab:d4:8b:a5:8c:
20:7e:2a:6e:83:05:4b:79:5a:48:0e:48:c2:b2:2b:08:52:54:
6d:73:d7:dc:4b:54:9e:48:94:3c:91:00:99:7b:6c:44:2c:25:
c6:2e:27:f3:8d:68:db:f6:2f:57:c1:4a:64:5b:8d:b3:bc:13:
e0:b5:0a:7d:0b:fa:57:21:a3:3f:d5:a4:3c:5f:b3:8e:97:5c:
4d:cb:f8:d0:ea:6b:63:ad:4e:43:a6:6c:64:55:ac:51:e7:d7:
a2:f0:91:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:24:48 2025 by rpki-client