Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qqhHZe8c0gZRVVvarkx0x5twhkQ.roa
File: qqhHZe8c0gZRVVvarkx0x5twhkQ.roa (raw, json)
Hash identifier: S8KuMgHQJkusEx/UgYB9tu/0h8t0cSb7ABEKWtofBjE=
Subject key identifier: AA:A8:47:65:EF:1C:D2:06:51:55:5B:DA:AE:4C:74:C7:9B:70:86:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018962E9B7E30B44CADC48849AFF96B209ED
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qqhHZe8c0gZRVVvarkx0x5twhkQ.roa
Signing time: Mon 17 Jul 2023 08:13:51 +0000
ROA not before: Mon 17 Jul 2023 08:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:62:e9:b7:e3:0b:44:ca:dc:48:84:9a:ff:96:b2:09:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 08:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaa84765ef1cd20651555bdaae4c74c79b708644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f0:f0:72:64:3e:28:e0:e7:a7:00:73:88:84:
cd:91:be:40:3f:6d:e8:10:9e:15:ef:b1:2e:0f:82:
c6:63:8b:51:03:6a:98:0e:e7:13:f0:1a:ec:48:5e:
d5:62:08:fc:f8:89:87:fa:f4:61:75:6b:27:19:6a:
ad:45:86:a5:01:1b:53:c4:13:7d:64:07:b3:46:d2:
0c:2f:fa:b2:c8:d2:ba:51:49:ae:ed:ba:e9:7b:2a:
17:a6:c4:6a:9a:31:d6:5a:6a:9f:57:8d:09:a0:e1:
7c:07:9a:ea:fc:a0:7d:36:4d:b2:10:a4:28:90:ad:
ac:ac:ba:92:e6:ce:cd:41:45:48:52:1c:cc:a3:1d:
97:fa:a0:d4:5e:58:fd:e8:10:d8:21:99:df:f1:b6:
7f:bc:da:24:47:ae:2c:f9:f3:cc:73:a3:bb:97:83:
02:fb:c3:73:40:91:e2:44:2b:a3:26:00:77:af:10:
70:7d:55:5e:18:55:8a:e1:99:0d:76:6a:35:71:e8:
13:db:ca:58:e9:99:89:ca:3d:37:92:a8:74:bb:f0:
23:39:1d:4e:27:b1:03:37:94:bd:cb:70:4a:95:0c:
40:ae:a2:39:64:94:a3:0c:b0:a1:42:8b:cc:0a:98:
bb:f0:4a:74:3b:e8:01:a3:c7:dd:35:18:22:1f:13:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A8:47:65:EF:1C:D2:06:51:55:5B:DA:AE:4C:74:C7:9B:70:86:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qqhHZe8c0gZRVVvarkx0x5twhkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:2c:21:9c:65:65:44:1c:8d:b0:ae:40:d5:3e:93:36:1e:37:
6c:d2:ea:c6:9f:5f:46:15:6b:c1:a9:a3:7f:c2:6a:38:56:2a:
53:2e:0e:af:00:d5:f0:9d:9d:c0:3a:6e:7b:d7:af:25:46:78:
53:05:46:2a:07:1a:98:8c:f1:a2:38:4d:2e:68:12:c1:ff:f1:
af:db:8e:ce:70:b3:0d:fa:6d:21:32:0c:86:7c:6c:36:a6:9c:
19:63:4a:52:94:87:ce:f6:6a:cd:ed:1e:84:6f:32:37:5e:de:
ec:9e:9d:51:d2:43:40:56:7a:6d:f6:4f:59:81:4d:3b:96:ce:
5c:11:91:77:09:7d:8a:2f:83:53:ef:ad:bf:67:a1:06:f4:d2:
6b:0a:3c:0f:29:97:c1:5d:d0:44:f5:12:18:ba:ef:80:c3:08:
e8:46:82:1f:92:ed:90:bd:ba:72:e8:81:15:1f:3d:33:c4:3a:
24:f2:c8:e7:a0:71:85:66:0b:9f:5b:50:cf:58:ec:2b:89:03:
ba:e8:58:16:85:c3:5f:95:9b:60:08:e4:4d:a0:c8:54:f4:17:
58:40:e4:c0:95:11:92:c1:4e:60:2c:4d:63:ea:07:af:6a:13:
fd:c7:03:df:ee:c9:e4:33:23:3f:c2:15:0b:5d:bf:8e:ee:6f:
42:b7:08:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:26 2025 by rpki-client