Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qVuA4vA08pwnOt6pe7me7ehPFvY.roa
File: qVuA4vA08pwnOt6pe7me7ehPFvY.roa (raw, json)
Hash identifier: AL+imLVc527efXWOaVk0YtKRKgKBuYZUrFwzsl46Ru8=
Subject key identifier: A9:5B:80:E2:F0:34:F2:9C:27:3A:DE:A9:7B:B9:9E:ED:E8:4F:16:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018677C4E3AAC820AA11B72FC0C5B22367EC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qVuA4vA08pwnOt6pe7me7ehPFvY.roa
Signing time: Wed 22 Feb 2023 06:17:17 +0000
ROA not before: Wed 22 Feb 2023 06:17:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:77:c4:e3:aa:c8:20:aa:11:b7:2f:c0:c5:b2:23:67:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 06:17:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a95b80e2f034f29c273adea97bb99eede84f16f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:26:87:82:5e:fd:55:5a:74:e1:a8:49:45:
6c:f3:1c:c9:68:6d:af:c7:a6:b0:ab:a3:2c:0e:90:
47:9b:68:8c:09:86:32:1a:44:46:10:b4:a4:50:61:
51:d1:0d:1e:2f:c9:ec:56:54:1e:29:43:e7:8c:d5:
98:72:85:39:30:50:43:6b:e0:5a:21:fa:e3:16:0c:
7a:3f:9d:4e:5a:47:97:4c:2c:cc:08:9c:fa:fd:86:
1c:22:67:dc:e4:95:4c:a5:99:74:e1:6f:4f:6a:7d:
4c:97:3b:ed:35:24:c2:2e:a7:66:56:3a:fb:14:c3:
5d:1f:86:07:70:6b:1e:f8:22:c6:ff:a6:48:d3:2c:
58:24:dc:d6:3a:53:44:99:1b:f4:da:52:9b:e7:1f:
3b:00:77:fb:8b:39:7f:24:c0:74:4c:09:50:12:50:
55:a4:6f:4c:f5:5d:79:2d:09:3c:2b:ba:1a:9b:be:
72:e8:69:a7:a0:8a:75:59:e0:2d:16:7b:82:db:64:
79:ad:d0:ff:8c:40:48:44:ff:54:9e:96:95:ac:4a:
bf:7b:3b:c8:e7:38:ae:fa:a2:69:32:c7:31:93:cc:
7b:40:2d:94:3f:63:93:a9:0c:0f:5f:7d:e1:39:b6:
b0:7d:70:7f:2b:99:a4:56:78:4b:d8:af:5b:53:44:
84:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5B:80:E2:F0:34:F2:9C:27:3A:DE:A9:7B:B9:9E:ED:E8:4F:16:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qVuA4vA08pwnOt6pe7me7ehPFvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:a1:61:9d:3f:1b:06:cb:e2:5d:9f:34:25:2a:3d:4b:2c:30:
a2:5b:48:83:4d:4a:97:3d:3c:ee:e7:97:11:d3:4d:16:05:8d:
08:ac:cc:3a:52:79:78:dd:11:6d:30:ad:4f:8b:a5:47:21:03:
62:c2:93:51:df:7e:34:d5:c8:18:2a:6b:48:cc:62:b3:61:7c:
55:f7:5b:10:4c:41:33:08:e5:ad:77:d0:46:71:96:fd:17:b9:
72:27:85:54:a4:67:0e:ee:ab:f7:a8:92:10:a3:97:db:05:fb:
de:51:b6:76:03:5c:51:a6:7f:ca:36:5a:de:83:4d:60:08:1b:
63:0a:f9:e5:7b:5b:e4:b8:a3:1e:47:b2:bc:74:4f:0e:f2:05:
89:b5:60:10:df:0f:42:f1:e4:00:b7:0d:f2:c0:5f:2a:9d:b9:
03:d4:80:e5:f9:82:12:f3:8a:9d:af:48:fa:85:4f:ee:1a:06:
d3:f3:0b:55:f6:49:b7:e4:ee:bd:1e:33:75:8b:bb:22:89:ff:
1f:3e:85:3d:9b:a3:ed:43:87:69:a5:b4:26:3c:d9:71:6d:66:
97:71:f7:99:8e:49:d0:15:95:17:b5:e0:25:74:6e:3b:3b:0a:
43:5d:ba:21:94:65:d4:c7:fc:53:01:d4:61:34:c2:b1:0d:b2:
b3:10:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:05 2025 by rpki-client