Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qmnhM9tmQQGpMErGozPCTUheJi0.roa
File: qmnhM9tmQQGpMErGozPCTUheJi0.roa (raw, json)
Hash identifier: +LajB5FSWoBcN+cmTXQit8YeVA8x0RSd887e4Ytr/l8=
Subject key identifier: AA:69:E1:33:DB:66:41:01:A9:30:4A:C6:A3:33:C2:4D:48:5E:26:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A443AE4154AC72CAA309B623D24FC4D9B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qmnhM9tmQQGpMErGozPCTUheJi0.roa
Signing time: Wed 30 Aug 2023 02:17:04 +0000
ROA not before: Wed 30 Aug 2023 02:17:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:44:3a:e4:15:4a:c7:2c:aa:30:9b:62:3d:24:fc:4d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 30 02:17:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa69e133db664101a9304ac6a333c24d485e262d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:b4:f3:29:18:56:83:b5:dd:2b:f7:6d:5d:
81:e2:48:c5:16:14:90:76:94:95:1c:da:ec:b3:b8:
4e:99:89:28:4b:f1:64:70:16:44:10:b9:66:95:92:
cd:4e:19:8a:0b:60:ee:3f:fb:e1:a0:79:15:4f:33:
4e:f2:6a:d5:9f:10:4c:02:3a:8d:44:f4:ed:64:e2:
64:a6:93:d3:79:ca:f9:8e:f4:85:17:fd:bb:30:21:
93:d5:12:2d:89:34:20:a5:f5:bd:a1:85:20:d4:fd:
77:7d:68:d5:97:1f:bd:85:d0:a2:dc:36:e0:db:10:
21:37:cf:01:63:de:0f:dc:22:bf:d2:65:05:97:a6:
f9:66:91:5c:b5:c4:48:48:3a:24:52:0b:6b:30:ee:
c2:92:78:84:5e:86:aa:6d:e3:96:a5:90:1d:4f:b7:
19:ff:8f:40:14:ff:ff:2a:2b:b7:22:f2:41:14:5f:
61:d9:c4:8a:dd:5c:be:cd:43:bc:66:33:b3:a0:e4:
ea:2f:cc:32:ae:89:ed:46:b4:5d:f9:48:0c:78:73:
73:7b:bf:09:59:06:d8:9b:b0:49:c5:0a:a6:03:ae:
58:93:0f:58:de:a5:4b:3d:d4:3b:00:41:a5:6f:31:
97:36:c8:bf:e7:8b:fe:be:cf:2c:96:a6:b1:7f:36:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:69:E1:33:DB:66:41:01:A9:30:4A:C6:A3:33:C2:4D:48:5E:26:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qmnhM9tmQQGpMErGozPCTUheJi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:28:e9:b5:e5:93:50:a8:9c:9f:32:0f:58:bd:57:70:0b:7d:
63:dd:1a:ff:4b:e6:68:84:5c:59:1d:35:db:99:3a:98:8e:f6:
d2:d4:d8:83:6d:80:21:ea:c0:a0:68:fd:b3:da:45:52:c2:99:
b3:6c:26:b7:2b:3a:f0:08:14:76:e8:7a:ab:d8:9d:00:df:a3:
ed:60:f5:64:5a:99:ec:39:d7:77:3f:73:b0:00:af:12:5a:90:
67:93:8d:23:20:cd:73:ab:17:97:94:b7:59:87:47:ac:d3:b2:
c3:7a:ac:e7:2f:8f:f4:dc:b1:8e:53:cf:33:52:8d:5c:07:4b:
5e:ed:29:a3:ea:da:88:69:b2:7a:a2:f3:7f:7f:0c:47:b2:ed:
61:50:d9:7a:de:6f:c3:9e:d9:4b:b3:cc:52:ef:04:43:4f:f3:
3c:1f:66:fe:32:8f:ff:63:52:45:5b:19:a2:52:fb:60:ae:a2:
c0:ec:5b:8e:b1:00:6e:92:31:76:74:15:09:22:38:a5:38:a5:
1f:8e:5d:0d:d8:86:dd:27:60:c2:73:1a:41:ef:5d:ba:12:37:
96:ff:79:4c:d7:3f:b4:03:3e:86:a0:ac:be:b6:38:c3:42:a1:
5d:b9:e7:48:9f:95:68:36:6f:9d:d3:b2:14:1f:84:bd:84:22:
42:13:c5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:57 2025 by rpki-client