Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qmQO51v3_IHcSF2A8JIzPtaAeXE.roa
File: qmQO51v3_IHcSF2A8JIzPtaAeXE.roa (raw, json)
Hash identifier: XIXDTieQZKutFwOiG2jkKZsJarTcWzMbHJT+4lj7/1w=
Subject key identifier: AA:64:0E:E7:5B:F7:FC:81:DC:48:5D:80:F0:92:33:3E:D6:80:79:71
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854F69563A2BF829142D4182D2B12F10BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qmQO51v3_IHcSF2A8JIzPtaAeXE.roa
Signing time: Mon 26 Dec 2022 17:09:41 +0000
ROA not before: Mon 26 Dec 2022 17:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4f:69:56:3a:2b:f8:29:14:2d:41:82:d2:b1:2f:10:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 17:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa640ee75bf7fc81dc485d80f092333ed6807971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b1:8c:78:43:b8:c3:87:6f:c6:e3:a0:3b:5f:
64:92:1d:6a:ba:60:8d:23:af:e7:c0:31:1d:e7:3a:
06:12:72:63:1d:43:12:a1:92:cc:38:55:9c:01:af:
64:cf:62:2e:63:fa:17:48:f9:2c:d8:59:a5:01:fd:
c9:d4:6f:87:5d:ce:c5:ea:08:52:da:80:2f:09:2e:
39:01:34:4e:de:bf:96:f4:0e:cd:db:f3:21:de:f0:
72:bb:59:1e:86:f9:64:24:c9:a5:40:18:ed:bd:42:
13:95:de:f2:cd:bc:a3:85:76:b5:16:5c:ad:82:6e:
a9:f9:98:32:d2:81:c6:5d:9c:f0:9b:05:9a:6a:03:
fc:9f:13:d8:91:47:11:2d:78:31:b8:6c:83:84:0c:
fc:cc:8e:39:66:94:83:57:32:ad:04:c0:bf:7f:12:
75:21:c7:fa:5e:8e:45:2a:66:90:21:11:7a:ed:85:
ce:e2:0f:3a:54:06:de:2c:27:11:ca:31:af:7b:90:
9c:3e:f5:b2:22:ea:be:a2:25:11:d0:52:35:e1:ad:
3c:f5:ba:34:90:46:39:94:e0:fb:ee:e2:d8:5c:96:
2e:32:ad:a3:05:d2:3b:c1:7b:9f:e4:86:e6:02:5c:
46:5b:18:76:15:38:b2:96:d4:87:2c:64:92:cb:46:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:64:0E:E7:5B:F7:FC:81:DC:48:5D:80:F0:92:33:3E:D6:80:79:71
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qmQO51v3_IHcSF2A8JIzPtaAeXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:e3:56:5e:70:6c:bd:f3:60:d7:20:23:bd:f4:3f:af:9d:a5:
26:8f:11:46:5f:ed:ba:de:e6:86:51:ca:77:1a:f8:d3:05:b5:
33:a7:ed:a5:39:1f:8b:ca:1e:38:90:80:20:4c:47:3e:de:1a:
37:c9:4e:a3:58:59:22:c6:20:5e:90:e8:c9:8f:5a:3b:cc:ea:
9d:80:b4:f8:15:b5:e0:bd:c3:2b:9b:e6:cb:06:56:d2:45:36:
93:e3:cf:af:92:f1:f7:ca:6f:cc:44:cd:62:be:a6:6b:2f:3c:
0a:3a:26:5e:8c:b4:d9:a7:23:04:91:02:1a:f6:3a:0f:28:97:
64:38:25:f5:64:91:7f:26:67:d9:c5:96:be:92:33:4a:f7:f0:
25:0f:da:de:d0:74:16:cf:ea:81:46:2e:43:28:3d:80:56:5d:
e3:56:45:b9:30:ba:dd:a0:88:4b:63:6d:af:fb:57:9f:df:6e:
a8:3c:25:4b:90:35:6d:fc:32:44:a1:d6:d4:56:04:9a:79:86:
7b:39:a8:86:ef:e5:b7:a7:57:0f:dd:7a:a3:8a:dc:ff:36:09:
92:16:9e:53:6a:85:e4:3d:db:ef:71:69:c9:67:f8:46:27:2e:
49:46:ba:c0:20:b4:a1:69:12:f9:5c:a3:08:e2:f9:59:69:7d:
af:e5:7d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:06:33 2025 by rpki-client