Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ih_qhyjz98zmKfmz4bW1KSYu1Pk.roa
File: ih_qhyjz98zmKfmz4bW1KSYu1Pk.roa (raw, json)
Hash identifier: dFY8c+oT6P8DVXrz/AgSWYfNBiHLZGYnZcFuA4K2qBY=
Subject key identifier: 8A:1F:EA:87:28:F3:F7:CC:E6:29:F9:B3:E1:B5:B5:29:26:2E:D4:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D849151F80AB39DC0744A767F713F115
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ih_qhyjz98zmKfmz4bW1KSYu1Pk.roa
Signing time: Mon 13 Mar 2023 00:05:13 +0000
ROA not before: Mon 13 Mar 2023 00:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:d848:3617/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d8:49:15:1f:80:ab:39:dc:07:44:a7:67:f7:13:f1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 00:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a1fea8728f3f7cce629f9b3e1b5b529262ed4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f1:5a:47:fb:23:3f:64:7e:67:8c:d5:c2:11:
d2:da:12:7e:be:98:14:40:43:f4:72:47:e6:5a:07:
c6:9c:13:ab:e1:4c:0a:e9:03:8e:5e:e2:68:20:40:
4f:e8:a2:49:b8:78:dd:31:76:8d:dd:a2:5a:0d:e7:
34:0e:33:b2:6d:29:a3:71:d9:f5:7b:dd:b9:1a:ac:
09:5e:18:cc:bb:6c:08:fc:84:4e:b6:27:ea:22:63:
e4:77:87:f1:5c:89:f5:c7:09:1a:fe:04:5a:2f:c1:
8e:91:0f:61:c4:54:0d:8b:f2:dd:1b:c9:99:95:63:
a9:6d:ec:8d:eb:ab:a7:e2:a5:12:41:80:4b:b1:1f:
5b:d5:48:d6:e7:d0:f1:b6:84:a0:93:38:a1:03:6b:
fb:47:35:64:33:d3:ec:23:b7:90:9e:2e:1f:f6:5b:
e5:c0:00:2b:d2:27:30:35:2b:6b:bc:11:4a:2a:bf:
31:04:f4:17:0e:84:23:d4:31:06:ed:7d:96:c4:24:
cd:97:d0:dd:20:11:fa:df:b0:e0:a7:f8:73:68:ac:
71:45:67:0e:a1:f3:e1:08:02:68:47:c9:8d:7c:b1:
1a:f2:65:96:e2:af:6c:e2:7f:b8:48:75:f3:9e:2e:
bc:ac:34:46:a2:f7:13:2c:0d:82:13:2e:cc:7b:21:
f4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1F:EA:87:28:F3:F7:CC:E6:29:F9:B3:E1:B5:B5:29:26:2E:D4:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ih_qhyjz98zmKfmz4bW1KSYu1Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:d2:56:54:be:6f:51:26:58:1e:fd:49:c3:c8:7c:46:ae:cd:
2e:c1:05:3e:2c:ec:e6:d0:fb:b5:5b:10:85:ed:b5:c6:c7:48:
4c:ee:74:18:d2:72:e6:63:d0:12:0c:38:ef:a8:37:33:5a:29:
20:4e:a0:35:cd:ab:32:9a:9e:ed:1d:08:19:c1:5b:f3:81:b3:
31:4b:06:a6:b2:1a:3f:b8:df:eb:5f:99:1b:e9:ac:41:98:70:
8d:a3:67:e5:5a:b1:d0:4a:6a:1b:ba:c2:95:80:bb:a2:8c:7f:
18:d3:20:d1:a9:64:66:7a:f6:76:aa:13:f4:1a:0a:f4:41:a6:
31:da:e8:94:ad:0a:65:95:b9:04:1d:65:3e:b4:de:03:d0:e5:
ca:72:50:3a:09:9d:8a:74:f4:f8:b6:6a:1a:6f:c0:ea:be:2b:
7f:fe:11:79:55:db:17:58:3a:c2:12:3d:f9:19:5c:e5:97:4b:
7b:89:29:05:dc:3e:18:b9:76:90:a6:3a:24:c8:03:ff:c4:b2:
9f:ff:58:1f:ba:91:fa:97:44:f2:0e:23:31:ac:b9:69:3a:e7:
03:5d:22:34:04:86:35:7f:34:2f:e7:70:6f:3c:a3:9d:ea:3c:
77:95:bd:66:be:11:be:b8:23:f5:f3:c0:c1:1f:58:9a:7d:57:
38:33:d2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:15:26 2025 by rpki-client