Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_QJe3LvSMNLzzVKcLGZLXs4MDCI.roa
File: _QJe3LvSMNLzzVKcLGZLXs4MDCI.roa (raw, json)
Hash identifier: Av9y8HNgf43H5wxmbrqdXPsLFqE2iUUUOUjLaRjyfNA=
Subject key identifier: FD:02:5E:DC:BB:D2:30:D2:F3:CD:52:9C:2C:66:4B:5E:CE:0C:0C:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885FE2E840CD6A5C28C4E7AFAB4940A36D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_QJe3LvSMNLzzVKcLGZLXs4MDCI.roa
Signing time: Sun 28 May 2023 01:04:46 +0000
ROA not before: Sun 28 May 2023 01:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5f:e2:e8:40:cd:6a:5c:28:c4:e7:af:ab:49:40:a3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 28 01:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd025edcbbd230d2f3cd529c2c664b5ece0c0c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3c:29:bb:90:50:41:e4:cc:74:b5:e3:da:ca:
65:63:d8:67:b1:59:04:42:3b:02:3e:8f:50:c2:8b:
36:81:9a:fa:28:17:e3:f5:f5:e6:cf:e5:bb:05:5e:
15:e2:7f:58:4c:bd:d2:2a:bd:2b:c4:75:0b:41:49:
3d:b3:20:95:a7:3b:83:ff:71:44:c7:85:e9:bf:63:
f9:11:99:bd:b0:d6:28:9b:c9:2b:1d:e2:51:0b:5c:
51:57:28:e7:97:6e:77:21:5e:08:52:49:69:c7:1d:
b9:a5:4d:bf:21:07:13:bd:fb:4f:b1:5a:b6:17:41:
54:55:b5:92:06:6d:d1:ff:ba:f8:95:4a:4d:07:3a:
a6:68:f5:0d:c0:46:64:1a:96:d1:c4:2c:ef:bc:1c:
bf:ad:ea:d5:cc:9e:16:bd:f9:35:ef:9a:c8:ce:43:
0b:5f:be:4d:8b:20:b8:ca:8f:46:e6:51:42:fa:b9:
88:a3:a9:5f:eb:23:3f:7f:b2:e1:62:01:d3:2a:9b:
93:ba:0d:1b:b3:4d:b8:55:9e:24:99:29:9b:11:75:
33:c9:7a:65:e2:4f:9c:4e:ab:b8:03:a2:bc:89:18:
4d:e0:d8:43:de:8b:2d:53:10:b5:eb:0b:69:34:a4:
68:31:20:31:de:5c:e0:af:78:70:10:c1:76:41:a2:
3b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:02:5E:DC:BB:D2:30:D2:F3:CD:52:9C:2C:66:4B:5E:CE:0C:0C:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_QJe3LvSMNLzzVKcLGZLXs4MDCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:9c:38:92:d5:da:e4:9d:bb:1b:bd:97:9a:35:73:11:31:c8:
bf:e8:9f:56:98:06:15:47:2b:1f:64:17:2a:20:b5:17:65:6e:
1e:f1:29:44:c6:1d:4b:06:d9:77:91:0c:82:79:ed:17:eb:1d:
c4:5b:42:65:00:00:ab:da:7d:c9:f7:df:07:1d:be:75:5f:85:
d7:ae:22:61:4e:dd:59:dd:3a:98:52:b2:88:62:e0:f0:f8:d2:
c6:ea:dd:cc:71:eb:63:9c:1b:70:c1:57:fd:4e:d4:dc:72:e8:
2a:60:a6:bd:74:47:d4:92:78:bb:ec:d4:93:e0:09:c2:9b:64:
4d:76:0e:f8:4c:e3:c2:73:27:59:19:63:6a:68:2e:54:a3:a3:
d9:fe:82:3a:3f:61:51:42:d8:40:5b:af:08:04:02:af:67:0a:
d3:ac:17:99:13:88:f1:44:86:3a:85:d0:c2:61:43:ff:c3:94:
0c:e9:6c:4c:95:f8:06:1d:80:09:c2:76:fe:f6:99:d3:c6:a2:
70:3e:a0:6e:35:60:e2:68:c7:3c:c5:6d:15:b0:4b:6c:83:05:
00:9d:40:d2:af:9e:28:e9:6b:1d:5c:5f:a1:84:1d:ce:bc:c1:
26:d0:6b:9e:fc:41:5c:4f:90:30:71:3e:22:39:94:4d:cf:fd:
b7:01:25:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:42:51 2025 by rpki-client