Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sQW2ljUOAh7p7E3iHMf2XJ0gmrY.roa
File: sQW2ljUOAh7p7E3iHMf2XJ0gmrY.roa (raw, json)
Hash identifier: k1uScfnWyunnVCWE7ivock9Y0HdEB1p8JXBiwc/nSYo=
Subject key identifier: B1:05:B6:96:35:0E:02:1E:E9:EC:4D:E2:1C:C7:F6:5C:9D:20:9A:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187ACBF28901603BE67D60D1F452F45261B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sQW2ljUOAh7p7E3iHMf2XJ0gmrY.roa
Signing time: Sun 23 Apr 2023 06:13:41 +0000
ROA not before: Sun 23 Apr 2023 06:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ac:bf:28:90:16:03:be:67:d6:0d:1f:45:2f:45:26:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 23 06:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b105b696350e021ee9ec4de21cc7f65c9d209ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3f:0d:a3:58:4e:59:eb:79:28:08:2a:7d:9d:
bc:ed:29:8b:38:d5:6e:f0:89:b6:65:ed:c7:77:cf:
b8:36:aa:6b:88:5f:27:9a:11:8f:bc:c9:4c:26:73:
f2:5b:b5:e8:92:c6:41:ce:de:fc:ef:9b:de:44:52:
72:67:b7:a6:65:a8:77:20:8e:bd:c6:71:eb:53:27:
b9:68:70:7b:f4:31:70:2b:ef:9b:23:a1:ed:16:f8:
fd:cc:61:ba:f0:d7:35:ac:16:13:cf:0e:bd:ac:b3:
05:fe:36:9c:5a:7c:05:5d:80:61:c6:a6:d3:c6:7a:
a0:e0:d7:68:80:4c:b5:51:64:47:de:02:37:28:45:
38:a9:d9:b9:21:c5:ed:74:06:dd:9e:a3:2d:ce:19:
12:89:81:38:1a:de:d9:76:a1:cd:c1:4a:a8:50:30:
79:b5:aa:e0:d3:5d:ce:6d:f9:eb:d0:e8:9c:cd:c4:
81:84:5d:b8:d3:45:cc:55:ea:ec:65:1d:70:78:5c:
13:b7:d4:18:6e:3c:62:42:53:34:36:84:9b:0e:c8:
f3:5e:54:bd:e0:62:85:da:8b:3b:db:a9:12:47:1e:
61:6b:73:b9:ef:84:e6:04:8e:3d:00:bb:f4:8c:95:
67:27:61:7b:b4:96:c7:49:ac:1a:f1:56:68:d2:91:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:05:B6:96:35:0E:02:1E:E9:EC:4D:E2:1C:C7:F6:5C:9D:20:9A:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sQW2ljUOAh7p7E3iHMf2XJ0gmrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:ab:8e:d1:d0:cd:72:31:54:b3:35:b3:52:ab:19:1b:6b:94:
49:ba:56:42:f6:74:e3:13:0f:9c:12:bd:e3:10:d9:28:79:21:
8a:20:bd:0d:f0:38:f5:db:93:9c:41:3f:4c:27:c1:28:c7:ea:
b8:2f:9a:b5:26:e4:f0:09:24:b8:7e:72:78:d9:21:86:f3:57:
d5:e9:03:4e:03:b9:6b:37:ed:9d:6c:eb:85:b7:48:ad:5e:03:
7f:d9:6d:96:11:bb:dd:b4:e7:66:de:4d:76:71:06:df:b1:92:
37:21:24:e2:c2:84:95:41:9b:ee:d5:70:fb:88:5d:44:8a:bf:
09:ec:9a:24:58:bf:e0:93:bc:c7:cd:14:c5:8e:7f:ce:46:25:
bf:8a:e1:f1:b2:14:e8:17:3d:ff:e1:fd:f6:86:76:aa:2f:4b:
77:f9:3f:d3:bc:61:98:08:aa:81:64:50:ac:46:6b:4c:2b:ba:
a1:52:97:f0:14:98:13:9b:aa:44:ce:61:2a:92:f9:05:a4:94:
99:12:a3:78:16:18:9b:c7:a0:34:fd:6c:2e:fa:66:ab:bb:e6:
e3:ec:dc:cb:17:bf:28:0d:f6:a0:ef:fe:ea:f6:49:37:a3:bf:
22:af:8a:c3:c6:41:df:06:56:a8:00:36:a2:d2:37:8d:66:ef:
91:f7:e6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:05:24 2025 by rpki-client