Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cqFz8rQ2EHGZzsKLGkNO94bVZpY.roa
File: cqFz8rQ2EHGZzsKLGkNO94bVZpY.roa (raw, json)
Hash identifier: juk0NMMOsZO8IfAigHLojmhqiCLbzS57wYhAXnLV2EY=
Subject key identifier: 72:A1:73:F2:B4:36:10:71:99:CE:C2:8B:1A:43:4E:F7:86:D5:66:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01881ACEF05771E1700800488D3FD38C56CC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cqFz8rQ2EHGZzsKLGkNO94bVZpY.roa
Signing time: Sun 14 May 2023 15:09:09 +0000
ROA not before: Sun 14 May 2023 15:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1a:ce:f0:57:71:e1:70:08:00:48:8d:3f:d3:8c:56:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 14 15:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72a173f2b436107199cec28b1a434ef786d56696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b1:08:f1:10:80:89:f4:86:55:85:b6:2f:fe:
8e:88:a2:61:bc:e9:ea:fc:12:ef:3a:bf:a0:99:54:
2a:67:ea:3a:f9:56:d7:91:49:57:83:6a:1f:f6:b1:
cc:f3:df:e4:93:34:f0:07:d4:57:2d:53:4b:c0:31:
e2:8a:00:2e:b3:e6:76:3b:91:17:65:14:38:d7:47:
cb:8d:26:5e:7e:07:2e:98:e7:2e:3d:d7:b3:06:44:
fe:b0:e2:e7:69:39:6d:1c:1b:37:35:1c:1b:ef:e0:
a4:97:99:a1:c0:9c:26:d3:bb:90:52:ce:35:c3:d6:
e3:b1:a0:15:0f:fc:6d:d5:44:0d:0a:18:f5:20:8a:
36:bb:8f:db:27:b2:33:72:db:fd:75:72:09:6a:54:
5c:e7:a8:f6:36:af:89:cd:a4:b0:43:70:73:d6:c1:
ac:f5:e8:0d:11:50:84:02:5e:99:15:38:b3:d6:f4:
ec:b3:45:6d:80:5f:6d:86:7d:dd:e2:0b:71:51:ae:
0f:c6:cd:5b:10:d4:38:b1:db:11:a9:63:a2:76:ca:
da:9f:13:e5:79:fc:b1:c0:2b:89:fd:a9:d9:09:59:
b0:36:50:db:23:bd:43:b6:c3:23:03:9e:f4:54:0c:
f4:6e:bc:10:99:36:a0:bc:38:61:b2:d1:7f:af:33:
be:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A1:73:F2:B4:36:10:71:99:CE:C2:8B:1A:43:4E:F7:86:D5:66:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cqFz8rQ2EHGZzsKLGkNO94bVZpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:3b:1d:fc:11:2c:42:a1:0e:72:f1:8a:41:b2:7b:de:bc:56:
ca:48:45:4d:46:a3:51:20:36:04:eb:79:6a:e8:ba:a4:19:10:
02:d8:85:ba:63:e7:f8:10:f4:e8:76:d9:7a:ff:17:5a:da:3c:
35:4f:33:a2:b1:df:0d:f1:44:07:25:f4:50:4f:60:9d:3b:94:
2c:3d:31:1d:a4:46:3b:2e:48:25:01:9f:74:22:67:f0:f7:27:
55:75:11:2c:00:53:14:02:1e:11:ac:3a:b6:25:5f:9b:d3:62:
7f:ea:48:3e:d9:07:ee:f2:48:d3:cf:ff:3f:da:e5:e3:76:de:
89:c7:2c:b1:23:ba:40:ba:0b:4a:d2:a4:f1:32:90:e7:d5:d4:
f3:ed:b7:64:cc:bc:ac:04:13:0f:b8:3e:ac:79:f2:c8:c8:77:
8e:1c:7f:fb:a1:53:e9:16:61:52:c2:2f:55:26:fc:62:9f:86:
75:ed:41:58:b1:40:22:4b:bb:56:04:58:a2:e7:d0:b7:71:8b:
09:30:48:58:52:4e:a5:49:72:2a:10:60:ae:f5:43:ce:bd:c7:
be:39:c2:f0:dc:48:3e:48:aa:50:67:48:31:d3:30:67:2f:f0:
6e:6d:83:0f:4f:24:90:f6:7d:09:51:98:8b:36:52:0c:d5:ec:
29:8d:96:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:34:18 2025 by rpki-client