Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qybEWaLlYV5hD8S_DZDjoiL6oVU.roa
File: qybEWaLlYV5hD8S_DZDjoiL6oVU.roa (raw, json)
Hash identifier: dMexj65eA/nC3IKati9Y1Hec7CaMn25CUFvRr8HrMh0=
Subject key identifier: AB:26:C4:59:A2:E5:61:5E:61:0F:C4:BF:0D:90:E3:A2:22:FA:A1:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01831DAAE942EE5F47ED2C4E2B4FAC2E5CD5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qybEWaLlYV5hD8S_DZDjoiL6oVU.roa
Signing time: Thu 08 Sep 2022 15:14:43 +0000
ROA not before: Thu 08 Sep 2022 15:14:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1d:aa:e9:42:ee:5f:47:ed:2c:4e:2b:4f:ac:2e:5c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 8 15:14:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab26c459a2e5615e610fc4bf0d90e3a222faa155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0d:16:cb:63:e3:1f:78:91:30:78:78:2e:48:
01:6b:ec:77:55:c3:74:52:6a:47:f3:da:c9:c6:34:
80:58:c1:09:69:27:28:3a:82:78:3a:39:e1:ae:db:
20:5d:91:63:f5:54:11:51:d3:14:f0:10:b7:af:df:
c4:d0:2e:b9:5d:c6:de:d8:fc:65:04:07:cb:b7:d6:
5f:cb:60:87:a5:c7:b2:da:17:88:69:1d:37:bf:50:
a2:f0:1b:2f:e5:71:7f:38:d9:72:f1:2e:0e:e3:c5:
8d:a3:0b:6f:ce:4c:de:40:84:b4:1e:34:19:96:e1:
68:bb:92:6d:13:c2:6b:59:ce:a5:87:08:9d:94:d0:
ec:7a:95:d1:da:9c:b9:ab:44:0a:de:73:74:4b:db:
09:4f:68:21:7f:fe:08:aa:11:94:9a:8d:db:cc:e1:
33:11:40:e9:e5:34:8f:59:34:77:2d:0c:76:66:90:
fb:b3:9a:08:c6:6a:9e:d3:5d:8c:28:37:95:a2:ce:
b4:48:02:56:ac:17:68:b8:bc:aa:bb:be:af:4f:1a:
d0:b3:d2:dd:30:8e:ec:e6:c0:85:ba:c1:c6:dc:88:
5b:81:a5:a9:49:ef:25:65:7f:cf:59:6e:09:d4:f2:
62:6d:7b:a9:79:c6:06:54:cd:b8:e7:98:8a:c9:20:
f6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:26:C4:59:A2:E5:61:5E:61:0F:C4:BF:0D:90:E3:A2:22:FA:A1:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qybEWaLlYV5hD8S_DZDjoiL6oVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:19:7f:ab:06:3c:cf:b9:f1:95:79:ea:b9:0b:72:d3:d6:5d:
24:1e:e2:19:c6:aa:ac:1f:4f:70:35:1a:9b:35:79:ef:c7:0e:
62:65:d8:7b:24:52:9f:b3:f1:0d:33:ea:fd:a8:70:fd:0e:d5:
68:a6:93:dc:93:c4:4a:e7:12:a0:bc:4c:1c:b3:5e:89:3b:84:
89:e2:d8:eb:71:33:dd:98:05:e7:a9:07:f5:53:71:94:3f:44:
34:5b:b1:17:d3:d1:51:cc:c1:71:ef:73:62:2d:08:07:3c:3e:
1a:17:2e:3b:1c:ad:c2:57:61:bc:8a:9b:9f:b3:12:ea:4d:62:
d1:91:91:0e:f3:03:f3:53:dd:82:c9:54:5f:c8:ad:da:04:f6:
7d:e3:30:96:cd:4d:4d:2e:94:3c:e1:98:f6:ac:61:7c:8d:de:
0d:42:c3:27:cb:f1:f6:a9:31:50:c4:95:d4:6a:a3:d9:8e:af:
6c:e1:82:6a:47:16:66:67:a4:5c:ee:d0:1b:64:23:59:fd:d6:
2d:dd:a0:1f:14:9b:bd:b0:f0:74:83:84:6e:71:dd:af:05:71:
20:f7:bb:94:09:21:da:d5:94:20:96:6f:26:55:21:aa:ea:5c:
ba:be:2e:9c:c4:fe:ae:4f:8c:b8:90:98:9c:3b:b2:e6:ec:f4:
ce:17:24:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:44 2025 by rpki-client