Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q9evsmxkXNM_NiLup05l1UmHPNc.roa
File: q9evsmxkXNM_NiLup05l1UmHPNc.roa (raw, json)
Hash identifier: /oZk2LPeuwI4iAlXPQhkYldfhNTLTZegO/LmsK2MhZA=
Subject key identifier: AB:D7:AF:B2:6C:64:5C:D3:3F:36:22:EE:A7:4E:65:D5:49:87:3C:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873B04AD62C0042AEC423D58D0C82B7A5A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q9evsmxkXNM_NiLup05l1UmHPNc.roa
Signing time: Sat 01 Apr 2023 04:12:54 +0000
ROA not before: Sat 01 Apr 2023 04:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3b:04:ad:62:c0:04:2a:ec:42:3d:58:d0:c8:2b:7a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 1 04:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abd7afb26c645cd33f3622eea74e65d549873cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:1c:06:a6:f8:6d:6d:ed:be:ac:35:d2:f0:
bf:2c:be:da:f3:c2:16:ab:9e:89:1c:cd:7d:59:42:
97:fd:f8:a8:f4:82:f4:80:67:f4:03:69:a5:93:53:
8d:d2:fc:1d:eb:4c:64:6f:a0:5f:12:26:45:92:fa:
ee:8e:bb:5a:e1:99:14:63:a0:a8:ec:ab:4f:79:b2:
53:90:59:e5:87:6b:25:8f:19:0e:75:f9:f3:e3:c1:
e5:e4:1b:9b:b7:de:fc:d8:2c:08:9a:4f:8a:83:8c:
38:fc:d0:fc:ec:ad:3d:e8:c1:8d:14:5c:fb:0b:e9:
d9:08:77:e3:34:f4:34:c0:b6:f4:6c:ba:c8:85:23:
8e:f5:8b:db:e2:df:8f:21:7f:0c:40:2c:e1:8c:92:
c1:7f:d6:e1:47:0e:ab:83:66:17:0b:10:02:84:51:
a9:b1:33:06:9b:32:c3:fd:bc:4c:72:8a:aa:3a:fa:
34:6d:a8:a1:60:32:78:97:04:17:b6:c8:45:33:3c:
af:38:aa:1c:35:68:60:6c:ec:b4:5e:87:1d:63:0f:
3d:ab:3a:23:59:05:62:bd:99:1e:d2:9a:58:26:8c:
e8:72:18:b4:03:91:73:dc:58:42:82:ba:20:20:ca:
fa:6d:98:01:2f:7f:ae:c1:e6:f2:11:e1:bb:5b:b2:
09:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D7:AF:B2:6C:64:5C:D3:3F:36:22:EE:A7:4E:65:D5:49:87:3C:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q9evsmxkXNM_NiLup05l1UmHPNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:fc:16:96:a3:cb:48:05:28:0e:d2:23:cb:d6:f5:87:50:b7:
e8:0f:4c:51:62:86:2d:a3:f2:b4:1d:ab:c5:ec:78:5e:b9:cf:
59:cc:4f:9b:b7:28:ed:f0:27:dd:ca:e7:2f:b0:56:8a:b5:eb:
fa:9e:42:44:f3:75:e2:01:40:bd:d3:4f:e5:15:04:f1:4d:6c:
53:ab:95:bd:46:5b:90:32:29:a4:25:0f:af:43:79:7a:53:db:
a2:15:b6:32:4b:d1:6a:52:83:25:46:2f:e3:ec:9d:15:73:c6:
ec:47:5f:c1:59:0b:53:9a:a0:ec:e8:8b:b2:b8:68:12:b7:ba:
71:8b:0e:07:e9:13:cf:5a:c5:bb:79:74:94:37:9c:c2:4a:4a:
cc:0b:a2:db:2e:1a:ae:06:3b:12:85:bc:e3:86:b1:35:ff:be:
86:50:27:9c:94:83:1c:76:ca:70:6b:c6:d9:d5:59:15:c3:11:
2b:07:81:54:db:a6:e3:4e:33:c8:e2:93:08:d9:1b:cc:92:bb:
1f:56:69:f6:43:6a:24:75:f0:84:da:31:df:08:bd:16:d2:8a:
50:30:ff:90:0a:3c:22:38:80:d2:8f:c5:12:e4:2b:8a:1f:c2:
f7:85:1b:30:e0:58:e2:8a:9e:14:f0:50:86:7c:bf:c7:f8:f5:
01:2c:3c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:38 2025 by rpki-client