Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q1yhtmkKK61qtqnduUfu8Mu_JHI.roa
File: Q1yhtmkKK61qtqnduUfu8Mu_JHI.roa (raw, json)
Hash identifier: KpyZf9Z78B2syUr29vDVU8kWKv0sEUIB0VDsC+5mkVQ=
Subject key identifier: 43:5C:A1:B6:69:0A:2B:AD:6A:B6:A9:DD:B9:47:EE:F0:CB:BF:24:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187CB32DF4E39D27608D1E09A0757025490
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q1yhtmkKK61qtqnduUfu8Mu_JHI.roa
Signing time: Sat 29 Apr 2023 04:08:41 +0000
ROA not before: Sat 29 Apr 2023 04:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:cb:32:df:4e:39:d2:76:08:d1:e0:9a:07:57:02:54:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 29 04:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=435ca1b6690a2bad6ab6a9ddb947eef0cbbf2472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4a:08:d4:92:7a:0c:fd:ba:49:e7:0a:08:dc:
c9:f6:b7:42:77:00:ff:b2:5d:7f:6f:7f:4a:1f:49:
28:69:6b:e1:55:58:0f:4a:c6:7c:dc:9d:c4:f3:fa:
a2:d2:06:33:1c:e2:d7:c4:73:9d:d3:6b:05:e7:ff:
c0:c3:b6:86:cb:b9:b8:66:56:dc:8f:66:7f:df:3f:
fb:53:2a:fc:ff:37:6b:c1:79:ba:84:fc:da:a8:a2:
bc:3b:3d:2a:71:09:c6:b5:f0:98:bf:a3:34:50:42:
73:6c:96:57:e0:54:95:08:1a:d2:64:db:5d:37:0d:
ac:23:35:56:3a:e3:02:bc:60:f9:6d:a4:56:ab:ca:
3a:4d:6a:e3:42:44:9e:b2:95:6d:fb:d9:99:b4:ff:
96:2d:86:70:8e:c9:ff:85:72:b0:59:25:9a:14:b0:
8c:a0:32:4f:4a:5f:91:f4:3c:4d:7a:de:8f:a1:d3:
30:fc:5c:66:90:f6:e2:b7:10:60:df:45:cc:6c:bc:
8e:d4:e6:30:5e:b3:f1:b3:d0:d3:5f:ea:7d:86:61:
63:37:a7:e7:25:80:75:52:52:ec:27:38:2e:eb:de:
90:c1:08:ff:fd:95:c2:8e:29:20:79:84:6f:5a:df:
2a:c0:f0:24:62:4b:3c:eb:33:ff:00:61:d3:6f:af:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5C:A1:B6:69:0A:2B:AD:6A:B6:A9:DD:B9:47:EE:F0:CB:BF:24:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q1yhtmkKK61qtqnduUfu8Mu_JHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:6c:ec:94:0f:6c:78:6c:9f:2f:a1:79:fc:78:69:fd:48:6d:
95:92:3b:fc:08:07:61:03:d2:39:04:8f:8c:bf:9d:70:3c:03:
a2:be:51:8e:28:2e:4f:f1:26:71:d1:6d:d3:78:8a:58:12:43:
f7:f8:8f:31:4f:61:bb:3e:ab:95:08:c3:30:c3:42:18:de:4e:
fb:d5:84:a5:1e:db:13:a9:71:b9:63:45:9c:55:a9:60:06:4d:
d9:99:b1:c4:0d:05:f2:63:68:88:e6:44:67:d9:39:7c:80:b7:
ed:bd:72:e9:e9:3e:bb:99:22:0d:28:09:dd:50:22:21:f6:be:
8d:1a:8d:23:81:bf:5e:b6:22:05:6e:49:7d:0f:4b:b9:3a:57:
f0:fa:88:32:35:6d:e4:55:2d:eb:d2:51:83:c3:e2:15:1d:7d:
ca:0e:b5:fc:f4:34:e3:79:d6:27:1b:b0:c2:0d:db:df:80:c6:
48:fe:47:fe:b3:17:c3:03:cd:25:1c:e8:9e:3b:4f:09:20:cb:
17:04:96:f4:69:a9:a4:4e:e9:1f:a5:4e:93:0b:e2:9b:d5:5b:
51:41:f3:ef:6a:53:fd:90:0b:6e:9e:e5:24:87:5a:e3:1d:55:
8a:49:33:84:3c:e3:a3:29:22:f6:af:82:ad:5a:07:ac:cf:96:
ed:c1:14:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 05:11:12 2025 by rpki-client