Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qkNUwm8jOZx-qn18JtbdGS1a29s.roa
File: qkNUwm8jOZx-qn18JtbdGS1a29s.roa (raw, json)
Hash identifier: nUSGnBDwJUECNLP+M35pgSA7/rlc5Fnu2VfUj7V5/Z0=
Subject key identifier: AA:43:54:C2:6F:23:39:9C:7E:AA:7D:7C:26:D6:DD:19:2D:5A:DB:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018306101D2B997D6FB164B6A47684606A6A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qkNUwm8jOZx-qn18JtbdGS1a29s.roa
Signing time: Sun 04 Sep 2022 01:14:22 +0000
ROA not before: Sun 04 Sep 2022 01:14:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:06:10:1d:2b:99:7d:6f:b1:64:b6:a4:76:84:60:6a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 4 01:14:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa4354c26f23399c7eaa7d7c26d6dd192d5adbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:29:f8:4f:24:c0:74:0f:c4:10:28:2f:60:10:
f7:94:87:c1:b1:f7:f7:d8:22:ba:78:e5:e5:75:59:
fe:89:fc:7e:d7:62:21:80:ba:f0:fd:1e:cd:99:fb:
01:2c:4f:0b:fb:f8:61:25:d2:e9:82:7d:3d:e9:60:
d1:61:bb:8e:34:07:48:4b:d8:89:d7:9f:ae:a7:cf:
0c:ab:52:0c:ab:d0:d7:0a:10:a5:90:11:9e:f2:82:
e7:8a:71:99:ce:24:08:19:4a:8f:44:90:8d:d9:e5:
10:77:4e:57:eb:fb:26:2a:aa:21:d9:d2:7e:a5:0a:
0a:00:1c:db:4a:a0:fc:eb:18:0d:f2:4b:a6:a3:42:
ed:bf:0e:c0:6b:c0:37:4e:1b:3f:f8:b1:fa:65:0e:
67:6f:24:33:ae:62:4c:41:18:41:c0:dc:81:ed:92:
1d:ae:5c:c7:3e:c0:ac:b0:21:70:b7:c3:22:34:27:
21:82:c4:dc:8a:f4:67:3c:63:f8:53:87:59:ec:96:
84:9b:5a:ba:f0:8a:dc:79:16:39:55:80:9d:61:02:
f1:e1:ba:7e:78:22:40:d2:9a:95:29:bd:8d:f1:3e:
93:3d:92:9e:9c:56:8c:72:f3:a3:3f:7b:00:50:98:
33:a4:da:a2:e7:a0:0d:13:cd:12:5f:4e:0d:a7:47:
12:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:43:54:C2:6F:23:39:9C:7E:AA:7D:7C:26:D6:DD:19:2D:5A:DB:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qkNUwm8jOZx-qn18JtbdGS1a29s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:f4:97:bf:87:bb:f6:3c:bd:cf:17:45:31:50:81:8e:c5:71:
4d:5b:66:43:ed:80:a9:ba:72:f5:2e:f6:8c:ed:44:fc:47:9c:
27:03:43:cc:d9:99:ee:02:f8:68:49:74:38:82:f1:6c:a9:2a:
d5:62:6e:86:7e:d0:ca:f9:d8:30:d2:89:6a:85:87:6a:5b:fb:
0c:51:d9:72:8a:e3:37:ea:80:6b:14:3f:ee:60:12:45:46:11:
16:e8:c5:26:cc:9d:e7:63:ec:06:ba:2c:e2:ca:98:f3:c2:e0:
36:87:a4:54:bd:73:da:b9:34:5e:bc:1a:7d:72:c6:33:4f:2c:
c0:bf:c0:9d:aa:13:c4:7b:85:03:48:51:0c:4a:34:a9:16:60:
cf:89:e1:83:1e:b8:24:14:81:d5:d8:9c:bb:7f:9c:19:0c:89:
b6:d2:57:d6:ad:1e:6d:fa:94:9a:c8:fb:b5:63:e7:c9:5c:61:
a2:3f:c7:e1:cb:52:a3:c6:d5:c5:7c:eb:d2:25:86:c6:84:cf:
af:e5:9f:47:f0:03:4f:67:4e:21:c2:c6:23:2b:26:20:74:c4:
7f:92:20:0c:de:b9:ad:a4:ab:6d:4f:81:11:3b:87:b1:54:2e:
f8:4b:11:c1:68:5c:c7:7f:f3:ab:b9:55:8f:01:15:95:34:47:
b0:4c:07:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:38:55 2025 by rpki-client