Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QzD37YhPtKCZR6VHN4of5ZPg9wk.roa
File: QzD37YhPtKCZR6VHN4of5ZPg9wk.roa (raw, json)
Hash identifier: OuLu5p0wEKZvJKSWCmZwszWd7gGHRRnevSBwVabyxv4=
Subject key identifier: 43:30:F7:ED:88:4F:B4:A0:99:47:A5:47:37:8A:1F:E5:93:E0:F7:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018752674D691D03A984A5E65D3A6FD8F663
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QzD37YhPtKCZR6VHN4of5ZPg9wk.roa
Signing time: Wed 05 Apr 2023 17:11:54 +0000
ROA not before: Wed 05 Apr 2023 17:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:67:4d:69:1d:03:a9:84:a5:e6:5d:3a:6f:d8:f6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 5 17:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4330f7ed884fb4a09947a547378a1fe593e0f709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:83:7d:ba:ad:fa:f0:aa:13:4c:95:21:5f:
6d:32:9b:c6:25:33:2f:e7:9c:6d:27:f3:c2:ce:be:
89:c0:6c:b5:ae:79:b3:77:e2:46:81:30:e3:90:44:
33:d2:a7:1b:e5:61:b1:6f:20:6c:9a:d7:5d:01:90:
0a:d3:38:ec:0a:ef:28:f1:75:6e:84:9f:eb:b9:c7:
21:36:32:44:0d:1b:a2:51:ef:38:5d:2c:74:fc:2c:
2d:30:e0:13:da:72:48:f7:01:76:e3:aa:24:64:16:
75:7a:b3:41:32:2a:dc:3c:78:ef:6a:3f:79:87:4a:
17:00:79:ba:d8:27:fa:29:44:2a:e6:09:34:e6:70:
b9:fb:a8:81:e5:10:29:04:43:d8:c1:67:ef:9e:8e:
d2:4d:9d:26:f3:f5:03:a5:6c:00:84:43:29:f4:cd:
97:ff:68:9b:a6:4f:07:58:2e:e1:cc:ff:c8:75:05:
25:97:29:3b:48:13:b1:92:36:f7:77:61:1a:8f:3e:
2b:ae:98:9a:6e:88:ff:55:28:2a:a7:df:d1:77:e9:
47:8a:c8:b5:50:28:33:87:cf:21:71:0d:20:25:ee:
16:f1:01:d0:9e:70:eb:4b:94:ae:f8:a0:a8:d4:52:
05:7d:5d:9b:b2:61:39:07:25:ec:85:80:89:f8:2e:
2d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:30:F7:ED:88:4F:B4:A0:99:47:A5:47:37:8A:1F:E5:93:E0:F7:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QzD37YhPtKCZR6VHN4of5ZPg9wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:56:fd:b5:b8:df:56:09:62:2b:aa:b6:8f:0f:05:ed:60:1b:
8e:39:34:9b:9b:8f:67:65:f5:ef:2a:d2:d4:ef:ef:7e:95:97:
5f:06:be:7e:ff:fb:52:97:bf:e0:57:b3:32:24:05:cd:00:fb:
03:2f:37:85:2c:9a:dc:3b:af:13:64:a1:db:f4:24:c5:9c:d0:
5f:76:bb:6d:43:e3:09:5b:d5:2a:11:dd:8c:78:f3:67:76:fa:
a4:d8:12:be:92:11:fb:d9:12:68:44:8a:19:92:46:41:b9:87:
68:c9:6f:4d:7f:d2:d3:1a:d3:b3:17:fe:af:0c:41:f2:bd:82:
42:2f:f2:97:ec:36:c7:7c:99:1b:22:97:e5:f9:8e:ef:8e:20:
db:11:a3:fb:b3:b6:95:a1:a4:6a:5c:d6:8c:37:bd:64:74:d4:
60:39:34:e0:3b:7c:ab:67:f9:da:23:e7:4d:6c:a4:78:b8:8c:
e6:ef:78:c5:e7:19:38:ac:34:f9:ed:05:7b:f4:eb:ab:dc:df:
d8:65:9b:9a:e3:28:bf:3b:45:ad:3e:63:1f:0b:f3:8b:11:9c:
54:35:4b:e0:ae:d4:55:b0:25:bb:85:20:cc:99:b3:c9:bb:ed:
21:3f:8d:4d:80:1c:fe:07:d0:5b:98:75:38:60:28:a8:51:4c:
6a:dc:9c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:20:28 2025 by rpki-client