Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rqm28ZOQJGKR2-w63SDJLWM6V_c.roa
File: rqm28ZOQJGKR2-w63SDJLWM6V_c.roa (raw, json)
Hash identifier: PSTGp76bS16qZbNm2RQbblsCRoxaxRaFwrEygcMraos=
Subject key identifier: AE:A9:B6:F1:93:90:24:62:91:DB:EC:3A:DD:20:C9:2D:63:3A:57:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E60B3955DDE397E1A81468FFFA70AED7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rqm28ZOQJGKR2-w63SDJLWM6V_c.roa
Signing time: Tue 24 Jan 2023 23:09:33 +0000
ROA not before: Tue 24 Jan 2023 23:09:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e6:0b:39:55:dd:e3:97:e1:a8:14:68:ff:fa:70:ae:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 24 23:09:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aea9b6f19390246291dbec3add20c92d633a57f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:00:a1:b4:8e:e0:e2:75:aa:c8:5f:d7:54:
7a:71:26:14:e1:80:41:13:a4:41:d1:c6:3d:c7:87:
2e:95:40:55:76:8e:ea:e8:36:7e:a2:c6:ab:e2:5c:
66:dc:8d:93:81:4b:27:1b:e0:e5:20:85:02:8c:6e:
24:d7:31:2e:0c:61:85:da:a9:34:77:65:1a:40:0c:
05:28:e4:40:68:8f:55:6e:30:a8:1f:a8:6b:7f:a4:
cf:aa:68:eb:2e:24:ea:5a:88:45:5e:93:f3:90:e1:
92:bf:06:bf:b1:cb:6e:d2:d9:4d:c8:2f:99:27:24:
be:44:81:e8:49:58:b5:16:5c:a2:9b:c6:e2:8b:cf:
2c:4f:46:e8:88:2f:b0:de:b0:7f:77:b1:9a:89:f0:
3a:97:ad:1f:35:f2:84:9d:96:4b:02:62:7d:4d:8f:
bd:a1:73:97:9f:bc:fd:e9:44:ca:e6:4b:f7:7f:b7:
39:f1:dd:9d:bf:96:a1:a4:ef:1d:7b:ab:01:7f:19:
12:73:25:2f:c4:e9:64:0f:41:a0:d7:c2:3f:db:43:
58:47:b1:a1:57:3e:d8:44:a8:5c:46:3e:a6:bc:13:
71:cf:6c:7d:1c:d5:73:8c:48:a7:94:e1:cd:6b:73:
2f:89:19:ae:71:7d:43:c4:a7:8e:a8:d3:4b:85:4f:
c3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A9:B6:F1:93:90:24:62:91:DB:EC:3A:DD:20:C9:2D:63:3A:57:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rqm28ZOQJGKR2-w63SDJLWM6V_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:b2:4b:4d:a3:1a:a3:71:87:af:70:5a:12:c5:d9:ff:a3:78:
4b:de:7d:58:dd:b8:86:50:fd:45:11:9b:e0:64:7f:a2:3d:35:
ee:45:6f:44:f2:39:be:57:83:37:c9:d2:ef:66:6e:fe:95:69:
31:9a:59:61:4a:70:7b:44:89:81:0e:77:82:3e:7e:03:b3:81:
a4:70:fb:70:de:0c:d2:7d:99:34:f6:d7:b0:01:8e:f2:92:84:
c5:e8:37:38:81:f9:7e:d4:b3:11:fe:cb:5d:76:a5:d0:fe:79:
21:d2:86:27:d6:2c:8c:93:94:27:de:3d:2f:7e:8e:7b:bd:5f:
64:72:b3:73:43:b9:99:e2:f7:9f:18:b2:06:db:25:86:ca:27:
61:1f:9d:e2:14:ae:3a:d7:d9:36:c3:c6:65:80:e0:67:4d:52:
17:aa:89:5e:e2:04:d9:95:2a:cd:07:3e:54:fe:15:fb:2e:74:
21:5a:9c:82:2a:2c:35:c6:fa:1d:9a:35:09:b8:14:87:d4:7d:
36:02:6e:6c:4b:f2:a0:5e:28:9c:a6:0a:9a:22:a2:24:59:fe:
82:46:ac:1f:b3:84:12:3f:37:78:92:e6:bc:09:80:3d:54:ce:
e1:f6:03:53:e5:bc:d7:4a:dc:2c:47:35:59:62:ba:75:58:cd:
aa:1f:48:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:08:16 2025 by rpki-client