Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qkvUsKg7gC7Uc7h9O2J585cQtcc.roa
File: qkvUsKg7gC7Uc7h9O2J585cQtcc.roa (raw, json)
Hash identifier: j1YIJNbabxXAYaD9xVx8CV2hy3IzePVbZJTfS1LQa2c=
Subject key identifier: AA:4B:D4:B0:A8:3B:80:2E:D4:73:B8:7D:3B:62:79:F3:97:10:B5:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188DC2358F781F4D11A4C1FAC8C7A9BDF39
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qkvUsKg7gC7Uc7h9O2J585cQtcc.roa
Signing time: Wed 21 Jun 2023 04:08:03 +0000
ROA not before: Wed 21 Jun 2023 04:08:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dc:23:58:f7:81:f4:d1:1a:4c:1f:ac:8c:7a:9b:df:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 04:08:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa4bd4b0a83b802ed473b87d3b6279f39710b5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:32:01:fb:78:22:8b:e3:d8:88:05:9d:b6:49:
d3:0f:4c:e6:e3:63:0e:ec:2c:04:80:32:76:4a:d5:
85:69:4c:b5:d7:63:bd:6c:0e:52:89:49:49:66:3a:
15:dd:ba:af:1d:3c:16:87:4b:af:4c:18:7b:56:4c:
71:92:3b:8b:45:58:ea:32:c5:3f:63:10:b6:70:9d:
bb:c1:0f:81:4f:26:ee:0d:15:a1:b3:24:95:8d:4b:
bf:56:80:da:d5:76:8c:79:9b:75:07:fc:65:94:72:
ee:d5:f5:9e:c8:a3:bf:94:7c:a2:8d:87:f1:ad:39:
d6:de:9a:26:ec:48:85:4a:39:3f:29:d1:4a:8c:71:
f4:54:74:32:d6:aa:3f:68:6d:66:13:2f:f7:47:a0:
e4:77:5a:1c:de:80:d1:37:a8:46:25:43:77:73:c5:
42:85:87:bd:ea:89:12:b2:56:0d:48:19:b0:25:de:
67:34:cf:ae:48:8c:6c:77:a8:44:89:0b:1e:29:b6:
fa:e7:cb:61:48:39:74:07:6b:e9:1e:6b:89:16:66:
9f:02:9c:e9:26:1d:a2:3c:f7:25:58:9c:71:d5:a2:
c8:a4:a4:fa:3d:c1:e3:6f:2d:70:b5:ae:97:6c:4d:
fb:62:23:72:e7:ac:a3:ee:c5:b5:98:01:2d:dc:36:
09:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4B:D4:B0:A8:3B:80:2E:D4:73:B8:7D:3B:62:79:F3:97:10:B5:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qkvUsKg7gC7Uc7h9O2J585cQtcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:47:39:f9:8f:f1:77:8d:cc:ff:ea:b5:93:9e:34:9e:55:66:
fa:06:3a:45:a7:52:8f:3a:a6:94:5d:0a:f5:9b:e5:d9:5c:95:
ea:b8:f3:64:fa:0f:33:65:ca:df:65:44:66:96:f6:fb:4b:9c:
b8:bd:22:13:5e:87:d6:21:e2:43:d4:31:6e:16:03:89:8c:4b:
f2:23:f0:a2:bf:78:88:1f:d5:e9:f1:91:8a:04:a1:5c:6a:00:
b2:30:50:10:ea:61:a6:50:21:5d:b7:c9:01:e2:54:c8:6b:6a:
d3:a5:cc:3d:87:48:30:e6:28:88:7c:93:50:6a:dc:32:ea:62:
4e:ac:9f:d7:94:44:f7:c1:ee:e8:44:e4:c5:fb:23:7a:dc:81:
79:80:e5:58:db:26:6e:d1:e5:c2:b9:9b:5c:d3:0b:0e:a5:19:
91:f5:b7:83:d4:f6:47:0b:16:6a:33:03:e6:e9:8a:7f:05:f0:
4e:65:7a:3e:cd:28:41:99:6b:ea:c5:c1:5d:ab:a1:19:da:17:
76:11:10:cb:c2:73:e5:9e:15:d5:c7:f4:75:a8:f6:7f:cf:ad:
a4:07:c3:95:66:51:eb:fe:4e:ab:23:2f:33:14:a7:20:de:5c:
37:6b:74:9a:cc:7e:2b:6f:51:c9:be:20:fb:2d:31:4a:c0:92:
82:d9:ff:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:26:31 2025 by rpki-client