Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q1eTCkFU_RCjGq5RWzuy8u186p4.roa
File: q1eTCkFU_RCjGq5RWzuy8u186p4.roa (raw, json)
Hash identifier: bZh7KMY/GzATH/vDTGfUi/BCs5z0CFbm4rtupChm/7c=
Subject key identifier: AB:57:93:0A:41:54:FD:10:A3:1A:AE:51:5B:3B:B2:F2:ED:7C:EA:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2DB34AEFC8D19C714EE083F572281502
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q1eTCkFU_RCjGq5RWzuy8u186p4.roa
Signing time: Fri 25 Aug 2023 17:17:19 +0000
ROA not before: Fri 25 Aug 2023 17:17:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2d:b3:4a:ef:c8:d1:9c:71:4e:e0:83:f5:72:28:15:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 17:17:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab57930a4154fd10a31aae515b3bb2f2ed7cea9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:48:2a:92:1c:85:81:87:3e:86:28:6a:ca:
2c:ae:46:84:12:0c:c9:71:34:f5:38:08:32:fb:fd:
08:78:69:55:04:b8:8b:49:3a:7f:fc:8e:3c:c0:e1:
83:de:5a:cb:7d:a4:c5:d6:42:34:e9:f6:dd:69:c4:
bf:b0:6e:89:fd:a7:bb:39:0f:3b:36:b4:93:39:8c:
49:53:9d:68:d1:8f:2a:7e:04:84:2f:0c:ea:19:b9:
89:56:9a:60:7a:a1:a4:79:2c:1c:f6:e4:28:7d:30:
32:88:71:d4:3d:3c:a0:b2:f3:78:cf:1a:3f:ab:92:
b8:c6:36:81:05:92:0c:45:46:e1:60:fd:65:ae:e3:
fc:bd:3c:b7:93:01:a4:a6:38:9c:b8:09:2f:da:5c:
2e:4a:76:25:42:dc:98:cc:2f:0a:45:cb:cd:2e:23:
8e:1c:48:78:69:e1:98:14:7e:c7:fd:3e:5a:c9:e4:
2f:3d:1d:78:37:72:b2:30:84:c3:c5:95:dd:02:14:
ef:9c:71:65:24:64:14:cb:15:3b:f4:73:db:ba:d9:
d5:82:2a:3b:d4:63:c8:89:ea:cc:4d:b5:63:60:c4:
2e:2d:2b:1e:e9:3f:04:f2:af:00:e4:1a:47:98:78:
d9:b3:3e:08:f7:80:05:72:40:e9:7a:06:24:40:7f:
50:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:57:93:0A:41:54:FD:10:A3:1A:AE:51:5B:3B:B2:F2:ED:7C:EA:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q1eTCkFU_RCjGq5RWzuy8u186p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:4a:e0:a3:64:17:1a:6c:d5:4f:61:1a:74:1e:71:cf:c0:f3:
e6:27:8e:3b:0a:3b:ef:1d:2b:74:91:8e:65:01:cc:48:da:1e:
8e:6f:fb:2f:20:f7:85:f5:ef:3e:c6:21:2c:f7:32:9d:80:7a:
f3:44:e1:56:c2:91:2d:b3:8e:4a:eb:54:b5:da:74:2b:bb:3f:
2c:96:3b:9a:c1:e2:04:0b:d7:75:63:ab:dd:3f:46:cd:fa:c8:
8c:f9:1d:8e:6f:f4:eb:a0:36:9c:27:cd:c8:0e:9f:65:d7:ee:
b5:7b:13:20:e7:f7:e9:01:62:79:45:cc:32:da:d3:81:c8:b8:
34:56:c2:d9:6a:c5:9f:57:d8:60:4b:a6:4a:56:89:3e:c1:09:
bb:5c:27:14:c1:30:58:38:05:2f:61:15:2d:ac:ff:20:85:7e:
45:cc:fb:f9:c2:2c:cf:25:4f:73:98:a8:28:1e:76:a8:d0:92:
9b:5b:8f:df:8f:2b:1c:c5:ca:73:f7:3d:36:a9:d3:6c:75:6a:
ba:49:85:c8:54:bf:b5:f7:bb:ae:e6:67:a2:1f:9f:f9:00:db:
d9:c8:85:b8:bd:10:35:25:97:9f:de:f2:55:8c:73:13:84:46:
98:20:34:12:21:1c:43:05:98:3d:1b:dc:ae:2e:cd:93:96:00:
1a:09:80:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:35:54 2025 by rpki-client