Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sQ3XuLCKXBgbHDYMKqhOgNyQBLI.roa
File: sQ3XuLCKXBgbHDYMKqhOgNyQBLI.roa (raw, json)
Hash identifier: icbhkFJBHccJg6N2LpgU1Omnnuyuc9qE+MEmx+8m+ZM=
Subject key identifier: B1:0D:D7:B8:B0:8A:5C:18:1B:1C:36:0C:2A:A8:4E:80:DC:90:04:B2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018984C84D8367B59898C42C5B6D954B1703
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sQ3XuLCKXBgbHDYMKqhOgNyQBLI.roa
Signing time: Sun 23 Jul 2023 22:04:26 +0000
ROA not before: Sun 23 Jul 2023 22:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:189:84c8:2c76/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:84:c8:4d:83:67:b5:98:98:c4:2c:5b:6d:95:4b:17:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 23 22:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b10dd7b8b08a5c181b1c360c2aa84e80dc9004b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:4e:ad:e5:ee:19:d7:db:8f:e6:12:f4:41:
fc:3e:4e:5d:ae:9e:64:0a:ea:d2:9a:7e:cf:ce:70:
c7:4c:03:a3:fe:13:aa:69:35:a8:65:0b:70:d2:82:
01:b1:d0:ab:1e:24:60:77:eb:0f:17:f4:bc:93:5c:
e6:d7:94:1c:de:26:4b:75:bc:9f:b2:06:04:a4:80:
69:a2:59:7f:8c:38:02:a6:30:00:0c:92:33:8f:1d:
76:a8:c4:c0:74:a2:36:cd:d5:f7:5c:ee:74:44:7f:
5e:4e:01:b5:f1:78:8a:1a:0c:97:ba:33:90:a7:ab:
04:d9:40:a5:ce:8f:81:6f:0d:92:65:37:7e:6f:3a:
0e:67:5e:41:69:0d:0c:3b:aa:30:45:6e:6c:83:4f:
ea:56:3d:16:52:8e:83:01:c5:fc:b5:0f:5b:48:5b:
11:e8:9b:ec:4f:08:cb:9c:8e:3d:ee:7d:df:1d:1e:
65:55:08:b8:83:fd:c1:ed:65:92:de:db:78:6a:31:
5e:ae:c2:aa:6f:35:86:86:3e:5e:5d:08:e7:d9:8e:
24:e9:11:95:53:e9:f9:bf:2d:65:fa:b9:f0:04:25:
bc:b3:c2:46:9c:ce:51:4b:73:fb:de:94:6b:a2:a0:
77:2c:50:00:14:f1:d1:e7:a5:11:ee:7e:28:63:3f:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0D:D7:B8:B0:8A:5C:18:1B:1C:36:0C:2A:A8:4E:80:DC:90:04:B2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sQ3XuLCKXBgbHDYMKqhOgNyQBLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:60:a3:e3:2a:99:7a:61:00:18:de:44:19:16:50:42:9d:95:
5d:42:5e:46:82:07:a1:33:50:a3:8f:85:ab:fa:a8:b8:ba:15:
10:65:5b:59:1e:3d:9e:79:50:45:a1:db:98:4e:53:ad:33:bc:
71:aa:ff:28:bd:53:1a:b9:35:4e:04:46:b0:ba:47:4c:a6:1e:
be:3d:99:c5:d2:b4:ac:c5:ea:8f:32:69:42:34:86:40:15:24:
a9:b5:53:d9:e0:7a:44:78:46:65:1f:e7:b0:f1:a8:2b:b3:38:
24:dc:d9:ea:e2:c1:38:11:61:ba:61:f5:04:68:7b:78:59:6d:
7b:11:ba:7c:9e:5e:b3:7f:6d:cf:f2:2a:58:de:d2:44:70:ef:
e3:bf:7a:87:67:a2:41:f9:f0:bd:5c:35:f8:33:e3:ad:74:96:
d2:34:7f:54:63:a3:c7:c7:36:1b:c9:96:d1:a9:73:33:3f:82:
09:65:dd:6c:9f:ac:ef:03:66:b7:46:df:91:9d:fa:6f:3e:64:
3f:02:a0:f0:33:b7:e2:42:4f:3d:e2:38:49:1e:13:e0:14:87:
be:cb:11:41:38:85:18:bd:25:23:88:6f:ba:49:6b:5b:76:fb:
2d:c0:f6:4a:72:45:24:c1:82:a5:6d:f3:ee:be:f8:03:93:3c:
64:24:7e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:41:43 2025 by rpki-client