Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sqA9n4HLAzlOftRMPlgUcxEIHF8.roa
File: sqA9n4HLAzlOftRMPlgUcxEIHF8.roa (raw, json)
Hash identifier: 9Cp2icM0jXbjC1DLoHMOUnbadgbluRq2CbrUQJz8qic=
Subject key identifier: B2:A0:3D:9F:81:CB:03:39:4E:7E:D4:4C:3E:58:14:73:11:08:1C:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186334C11A5CE3142F31B6F2E45C325B307
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sqA9n4HLAzlOftRMPlgUcxEIHF8.roa
Signing time: Wed 08 Feb 2023 23:11:08 +0000
ROA not before: Wed 08 Feb 2023 23:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:33:4c:11:a5:ce:31:42:f3:1b:6f:2e:45:c3:25:b3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 8 23:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2a03d9f81cb03394e7ed44c3e58147311081c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c3:15:43:93:c2:97:8e:7b:39:46:d6:34:b4:
8b:d0:18:b3:4b:cd:ad:bf:4a:3c:58:2d:27:64:a6:
67:ae:de:13:c9:64:55:a2:de:5f:4d:64:24:f1:15:
fd:e5:9b:88:83:f3:b3:04:7f:51:ce:0c:95:8a:95:
ca:af:26:ea:29:ba:d5:6d:c7:75:5d:4b:db:d5:44:
61:bb:b9:77:c4:04:6c:ba:c8:62:ea:14:e2:f3:a6:
28:1a:46:93:d4:db:5c:d9:c0:66:ab:d4:6e:66:85:
dc:9f:a4:a4:a9:d3:c3:4f:d9:ed:d7:46:5f:44:72:
02:b2:40:13:4f:7f:b0:30:bf:c9:4a:fb:57:08:6d:
31:a8:53:95:07:79:15:26:0c:8a:08:66:31:75:08:
49:6b:75:28:66:76:f3:e2:6a:9a:2f:a1:e9:ed:51:
94:38:f6:6c:b4:3e:67:71:4d:3d:49:75:b3:cd:6b:
01:b6:a8:0d:81:df:7b:77:64:b9:05:ee:b3:96:d4:
8e:9b:28:7a:5f:70:a6:36:b4:ce:0a:cf:fe:01:94:
48:c6:ba:fc:0a:04:36:e1:39:8c:e5:ce:a8:60:00:
83:6e:37:14:9b:39:13:d3:d2:90:d7:f3:19:31:57:
1e:5f:83:af:84:ad:ea:06:2f:be:9b:c3:41:34:a6:
44:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A0:3D:9F:81:CB:03:39:4E:7E:D4:4C:3E:58:14:73:11:08:1C:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sqA9n4HLAzlOftRMPlgUcxEIHF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:56:67:24:82:99:04:a8:5a:65:36:bf:c1:12:52:66:a6:fa:
84:fe:53:f9:07:9a:5a:51:0a:1f:23:43:9e:db:f0:78:83:7d:
56:26:8a:89:b8:e3:12:68:05:21:dc:20:c5:ad:2f:45:77:10:
2c:ad:f2:98:8e:e4:fd:e3:db:f2:f2:9a:25:35:f3:ba:0a:d9:
bd:5d:2d:62:df:58:e5:fc:7a:a4:70:aa:7d:ff:4c:e8:fb:52:
53:3a:73:34:7e:27:83:ab:60:21:cc:49:e0:b4:0f:2e:91:ac:
de:bd:09:fa:ef:20:b0:ee:74:71:2c:9d:28:8d:97:61:cc:bf:
a3:22:88:a1:71:57:bc:ea:51:64:08:d2:c7:20:43:79:9f:64:
93:b6:f3:58:f7:05:73:ed:62:32:95:01:ef:1d:a9:06:9a:24:
29:ad:7e:3c:f7:11:cf:c6:bb:25:e7:d3:0d:05:6e:fa:67:99:
38:d6:e2:39:23:09:7c:66:21:69:31:36:25:01:d0:b8:37:66:
43:bd:6f:b2:f3:d7:a9:97:49:60:68:36:3a:72:95:b8:20:36:
a6:f7:92:39:b6:5f:3e:c6:61:20:25:65:c3:2b:4c:89:51:3c:
18:b4:2f:3c:82:15:ac:24:27:b2:3d:55:fa:a8:8d:8f:ed:89:
d8:19:0f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:30 2025 by rpki-client