Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q4e_HaDqPX01MBgtd9ltPqixvk8.roa
File: q4e_HaDqPX01MBgtd9ltPqixvk8.roa (raw, json)
Hash identifier: LcYdWU4ve2dqaffmTH/pRiDN/gCq5KEXywX0Y1I4Jt4=
Subject key identifier: AB:87:BF:1D:A0:EA:3D:7D:35:30:18:2D:77:D9:6D:3E:A8:B1:BE:4F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182862B56A7A21919E6906BB4BFCA9A4951
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q4e_HaDqPX01MBgtd9ltPqixvk8.roa
Signing time: Wed 10 Aug 2022 05:12:43 +0000
ROA not before: Wed 10 Aug 2022 05:12:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:86:2b:56:a7:a2:19:19:e6:90:6b:b4:bf:ca:9a:49:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 05:12:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab87bf1da0ea3d7d3530182d77d96d3ea8b1be4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:f0:f0:83:04:7c:e7:d3:91:97:58:c2:1d:
4b:3a:1a:75:69:d6:be:de:03:57:ae:51:1b:e5:56:
3b:17:1a:9f:c4:42:41:64:c8:37:3c:34:11:59:80:
28:c3:d5:17:a2:4b:87:ba:2c:f0:be:eb:b6:f4:d7:
9b:22:22:af:43:95:c8:1e:06:6a:de:6a:cf:71:80:
16:13:17:a4:53:fd:39:50:f3:a5:b1:c3:be:04:85:
00:c9:09:8a:f7:76:97:33:2b:b9:a0:ae:16:b3:72:
15:6c:f6:c7:fb:9d:06:ce:b5:7d:ac:50:46:7d:9f:
b6:95:83:7a:35:2c:f4:30:d1:38:14:e6:7e:6e:d0:
11:e7:2e:69:25:c1:d4:19:2f:4f:bc:c0:13:c6:34:
91:83:e3:c1:37:2c:62:ce:f7:bb:51:ea:55:06:86:
cf:77:27:32:23:ed:6f:e7:47:cb:69:a0:18:33:85:
47:f5:18:98:2a:e5:ec:25:fa:4f:f4:53:09:4b:b3:
0c:7b:e6:aa:10:1a:77:f3:1f:fb:b8:0d:cb:17:66:
84:67:52:1a:b2:34:e7:92:c3:a0:a5:bd:c6:4d:45:
be:ad:01:8f:a2:f0:c5:15:ed:c2:b8:95:eb:3f:78:
49:34:38:8a:5e:1f:5e:db:ae:d3:0f:40:18:f6:a9:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:87:BF:1D:A0:EA:3D:7D:35:30:18:2D:77:D9:6D:3E:A8:B1:BE:4F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q4e_HaDqPX01MBgtd9ltPqixvk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:d3:dc:2a:a2:81:0a:82:d3:2f:25:a0:03:9b:f3:0b:7b:cd:
2c:0b:48:28:4f:6e:b9:0d:c5:2a:23:0f:ae:7d:a3:e4:7e:79:
46:aa:89:d4:63:ee:7a:46:0e:05:41:24:12:57:9b:7a:01:15:
33:d9:ed:ef:df:18:ab:27:50:a0:ae:95:50:a5:6c:36:cf:e8:
78:dc:0f:97:9a:84:4a:53:4d:cc:0e:a6:46:58:6f:79:ec:9f:
db:ab:00:c4:9c:e2:7c:5a:3a:4a:f4:2c:45:b6:89:ef:dd:ef:
dd:4d:ea:35:71:ae:04:a9:a4:ea:a1:a8:b8:be:0d:5e:47:5c:
f9:d6:45:4e:91:fe:5d:5c:22:36:21:3c:12:bf:c6:b1:24:c4:
5d:68:9f:84:76:b0:7d:02:54:78:13:a3:6f:64:c3:03:ac:9c:
82:c4:01:1e:a8:ca:eb:f5:0b:61:3b:d3:3a:6f:b4:17:7e:7a:
d8:64:40:b7:31:c7:b8:24:5c:0d:89:2b:93:7b:1f:40:9a:23:
fa:d9:35:c8:31:bc:ec:ed:7c:3f:fa:20:b0:26:66:32:af:e2:
be:40:84:85:e6:7c:3a:8c:7c:62:1c:23:39:f1:23:00:d0:a2:
7b:3f:b4:36:8c:2c:77:68:9d:44:23:d7:68:82:0d:17:f5:a9:
63:81:f9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:17:48 2025 by rpki-client