Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qpQxFHR5V5_2LqqqoCySjQ4Rb1o.roa
File: qpQxFHR5V5_2LqqqoCySjQ4Rb1o.roa (raw, json)
Hash identifier: +tc8sijaVoOCFgqa/bI96Rq3MeXuh/3QDHYTeBYEBNc=
Subject key identifier: AA:94:31:14:74:79:57:9F:F6:2E:AA:AA:A0:2C:92:8D:0E:11:6F:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B46B4980248F4822182B85D415A6AE88
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qpQxFHR5V5_2LqqqoCySjQ4Rb1o.roa
Signing time: Wed 02 Aug 2023 04:04:37 +0000
ROA not before: Wed 02 Aug 2023 04:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:b46b:3e45/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b4:6b:49:80:24:8f:48:22:18:2b:85:d4:15:a6:ae:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 04:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa9431147479579ff62eaaaaa02c928d0e116f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1a:d1:2f:be:65:1d:02:cc:e1:ea:b8:a4:43:
2f:20:3e:f2:3f:90:54:62:2b:5c:ce:8b:4b:c4:41:
69:19:32:f6:16:97:0a:2c:26:a1:08:27:b7:16:2d:
60:f7:47:ce:c1:88:c2:ff:13:28:87:30:21:55:43:
31:43:84:80:e5:d7:28:6f:7e:41:16:ae:c2:cd:66:
18:4e:2a:02:60:7e:b9:da:3d:1d:b3:05:c0:5b:0a:
ce:3f:42:b5:f1:f6:ca:25:a5:29:99:a7:b3:85:ef:
31:d1:f4:0f:f0:ca:ac:03:48:d6:f6:d4:c3:09:f8:
9a:fa:80:fb:25:dd:bb:aa:f0:f8:f0:b7:fe:b1:c5:
0c:9c:53:cb:90:10:8a:7b:04:12:48:20:d1:42:04:
b1:41:3d:a4:28:ea:33:6e:b5:50:5f:42:67:a4:90:
56:de:bc:10:b6:b0:93:26:48:da:a7:43:07:69:ee:
57:c4:7c:b3:44:94:73:57:24:80:18:34:80:3f:f1:
57:7d:eb:39:82:40:fc:28:0e:00:ec:95:e2:4b:27:
e2:e6:36:d2:f2:54:b6:fc:c9:d2:a1:63:ec:7c:3e:
53:f4:35:df:1f:be:db:eb:fa:30:7d:4c:a2:ee:82:
7a:e7:51:37:70:55:9b:97:b5:16:eb:06:30:13:c9:
d0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:94:31:14:74:79:57:9F:F6:2E:AA:AA:A0:2C:92:8D:0E:11:6F:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qpQxFHR5V5_2LqqqoCySjQ4Rb1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:c5:15:0a:54:3f:79:e3:ab:fe:20:99:cf:43:ef:82:e3:e6:
83:45:61:ca:ea:7c:00:24:b7:bd:1c:89:9a:d2:28:1d:48:ff:
fb:87:86:31:99:eb:f6:0c:59:3e:c9:d0:82:35:ae:34:eb:a4:
84:54:da:d4:14:da:2c:65:f3:f1:33:92:6e:50:2d:5c:fa:21:
01:8e:fe:7d:21:aa:92:10:0f:ee:62:ca:4e:b4:57:6f:7d:26:
22:18:ca:b1:37:57:56:a3:c4:e6:ba:88:22:1a:1a:87:90:10:
32:49:68:04:f1:7f:bf:1c:7f:ba:95:f9:ae:f5:63:56:8f:e1:
fc:64:b8:ba:aa:d0:84:e1:57:c6:c7:3c:79:a8:82:3e:cb:dd:
99:88:c3:0c:c9:2c:12:12:ee:2b:a6:cd:9d:16:d1:75:a2:1a:
26:82:9c:69:06:45:56:e3:d2:89:21:0e:0f:78:15:b8:81:39:
f1:bb:12:25:60:05:cc:a5:4a:5d:2d:40:bb:8a:b5:e7:d4:d2:
4e:64:83:6a:9b:d0:80:de:aa:20:3b:89:0d:2a:f6:98:cd:1f:
a2:d2:46:fc:89:00:21:72:33:43:d2:57:15:80:0a:f0:36:7f:
47:4b:05:4f:01:4d:1d:64:f6:c1:b7:ad:27:1e:2e:68:80:b0:
31:4e:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 18:33:19 2025 by rpki-client