Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q1_uqak-ta4v-DBg3coghUevYhY.roa
File: Q1_uqak-ta4v-DBg3coghUevYhY.roa (raw, json)
Hash identifier: 72x6nzCcbANv8YT/b6LSH2Sj+1DXjPfuaERRC1iSCuM=
Subject key identifier: 43:5F:EE:A9:A9:3E:B5:AE:2F:F8:30:60:DD:CA:20:85:47:AF:62:16
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018770A585E6755CCB9231146C762FE4D2F0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q1_uqak-ta4v-DBg3coghUevYhY.roa
Signing time: Tue 11 Apr 2023 14:08:28 +0000
ROA not before: Tue 11 Apr 2023 14:08:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:a5:85:e6:75:5c:cb:92:31:14:6c:76:2f:e4:d2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 11 14:08:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=435feea9a93eb5ae2ff83060ddca208547af6216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3a:3d:43:c6:06:8b:db:92:4f:fa:48:61:ef:
8e:fe:ae:ba:69:1f:a3:b5:6f:51:64:25:64:2e:d7:
2c:39:a5:60:5e:29:d9:b9:69:16:eb:a7:59:2a:b1:
02:0c:33:0d:7d:eb:c9:91:73:63:1f:0d:18:5f:fd:
31:cd:9b:c2:0d:2f:89:41:f6:83:40:e3:a6:77:3c:
35:95:01:ec:6b:fb:88:08:e7:31:a9:0e:9b:da:62:
65:b8:8f:00:70:57:99:b2:5b:2a:fc:6a:51:40:c2:
0c:24:7c:b9:49:bb:25:92:61:76:c4:72:cf:48:e4:
dd:5a:dc:b7:43:c9:3f:d3:1d:46:ad:f6:be:e3:0b:
dc:93:39:f0:ea:f3:63:8b:53:be:82:20:c2:d8:ab:
93:c4:98:7d:70:a8:5d:25:3b:06:33:ae:e9:f2:6b:
e3:a0:8f:3b:2d:6a:be:2d:fc:c0:30:bf:d5:18:71:
4d:a5:28:21:34:7b:6b:4b:56:97:fc:70:9a:48:b1:
4d:06:c6:14:da:37:ba:d5:0e:dd:e0:50:8d:d8:75:
e1:87:c9:4a:1c:e8:e9:b5:ba:ff:d0:15:8c:54:fc:
39:73:5e:40:29:64:a3:f0:f3:47:2e:34:cc:c3:69:
5d:91:27:af:37:c8:32:43:be:5a:c7:26:ae:ab:3a:
df:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5F:EE:A9:A9:3E:B5:AE:2F:F8:30:60:DD:CA:20:85:47:AF:62:16
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q1_uqak-ta4v-DBg3coghUevYhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:19:37:cc:1d:af:12:e2:b3:a6:2c:af:65:be:b6:fc:a6:d8:
ee:4b:a6:66:9b:53:d8:f2:d7:2d:fb:b5:2c:5b:53:a6:42:45:
7b:1b:e8:fe:05:2a:96:7f:88:4b:ad:48:23:b4:45:8c:49:0b:
a2:b1:ec:55:18:40:65:5d:c6:52:e3:c3:f6:50:2a:6c:66:a4:
19:1f:e3:ca:8c:e1:f5:ec:07:20:2f:1a:3f:29:23:75:83:9b:
07:fa:b9:78:2e:ea:66:6b:87:d9:c5:10:32:9c:87:e4:7f:56:
29:45:f5:cd:68:70:82:c3:ed:b8:21:b2:fc:40:fb:13:e6:c3:
80:a9:2f:4a:73:a3:0f:eb:58:6b:1d:f8:6c:82:c3:62:c9:a2:
bd:bc:ac:6d:d5:07:40:3e:e8:75:54:96:47:be:b1:fb:fa:2a:
cb:0f:53:c9:4d:9a:46:f8:92:2b:59:ed:1a:9a:77:67:e7:04:
2e:3b:a7:dd:81:67:08:f3:e1:1a:35:96:b5:8f:82:37:fb:19:
51:e7:e1:da:89:3e:50:6c:42:a6:0b:3f:b2:da:4e:dc:28:41:
a9:47:56:7f:c0:0a:b4:c0:4f:49:e7:d8:1e:13:90:93:09:4c:
6e:53:a4:cd:84:e6:2a:f1:45:c1:cd:c9:9b:94:b1:d7:f6:bf:
0b:0c:d4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:09:37 2025 by rpki-client