Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qsaQI1M-NFPq8T_UQJThvoLmfaA.roa
File: qsaQI1M-NFPq8T_UQJThvoLmfaA.roa (raw, json)
Hash identifier: ttrk4Ls4alti/bWZAxJ9cDYreRu6Iyx4FrSh0yyWIIU=
Subject key identifier: AA:C6:90:23:53:3E:34:53:EA:F1:3F:D4:40:94:E1:BE:82:E6:7D:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885D8AE8BA0F4526AB796F2910D4C5F58E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qsaQI1M-NFPq8T_UQJThvoLmfaA.roa
Signing time: Sat 27 May 2023 14:09:24 +0000
ROA not before: Sat 27 May 2023 14:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5d:8a:e8:ba:0f:45:26:ab:79:6f:29:10:d4:c5:f5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 14:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aac69023533e3453eaf13fd44094e1be82e67da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:4a:de:3c:ba:00:31:f6:27:e7:1c:12:c9:
d2:74:aa:8a:57:95:87:1f:9f:ff:38:ed:1b:c9:b2:
d2:5b:1e:f1:f0:7b:bc:05:3b:61:55:df:be:df:d9:
49:53:81:66:15:fd:6d:2f:54:26:71:6e:6a:21:18:
63:c4:aa:00:2e:b2:60:7b:32:af:ee:c8:c0:7d:98:
2c:ce:6a:c5:08:6a:1f:60:1a:e1:de:3f:1b:d8:ed:
31:b7:76:6a:ad:f0:7c:43:59:8c:d1:7a:38:4b:a7:
a3:b7:e3:22:7b:09:af:b0:83:e1:a6:7b:e9:18:cb:
8e:ea:f8:77:ff:47:44:e4:1f:80:8a:92:d0:0d:45:
10:9e:91:6a:a0:73:f9:0a:d3:99:08:4e:ab:b1:a8:
d0:e3:8e:3d:05:5a:da:6d:12:3c:d7:27:fa:35:3a:
a9:39:83:d0:3a:88:77:e8:6d:13:5d:be:a8:90:64:
f7:b1:99:3d:5c:57:bd:90:66:55:63:34:ce:8f:80:
92:1f:ee:8d:24:45:ea:27:8b:c6:9d:77:83:ac:3b:
92:15:3b:ce:b0:b1:e0:fb:cd:2e:50:01:28:9c:f4:
46:c9:39:b6:c7:3d:49:54:59:c3:21:46:58:0f:cf:
6f:03:69:93:78:56:95:ca:a5:02:c3:82:0c:c3:ee:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C6:90:23:53:3E:34:53:EA:F1:3F:D4:40:94:E1:BE:82:E6:7D:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qsaQI1M-NFPq8T_UQJThvoLmfaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:d7:71:c3:0d:97:8d:13:40:cb:83:b0:bc:87:de:e4:3a:9c:
14:81:e5:8d:18:e3:66:54:86:31:5c:86:17:53:5a:23:25:d1:
51:48:86:5c:d5:96:59:3e:9e:c6:02:6f:06:c1:f3:ba:2d:ba:
90:6e:2b:f7:5b:62:c2:56:4c:9a:6b:ef:12:08:ae:b9:85:ea:
c9:2a:e2:48:e1:67:63:88:b0:82:7f:1e:32:a7:87:97:60:90:
97:75:2f:68:8b:27:30:3d:0c:36:e4:8f:67:7c:2c:0f:49:7d:
2e:77:cc:73:e7:8d:10:28:88:ba:b4:3e:b7:10:e9:45:b6:eb:
60:55:87:66:63:f2:15:9b:a5:50:63:8b:19:df:44:93:45:37:
b6:58:c6:8b:68:a7:eb:fd:bf:d8:b2:46:18:72:3e:ec:9a:b3:
5e:20:43:84:cd:a7:a5:54:52:e7:73:90:9a:85:d2:70:c4:82:
c0:00:62:35:0c:7e:cc:f5:6a:67:3a:8e:b6:63:a1:1b:3d:94:
61:1d:55:b0:b2:68:82:8c:ef:01:58:36:c6:df:0e:15:c8:77:
4e:77:ed:41:ff:e4:cd:b8:15:c0:7f:f3:ef:65:ec:38:14:87:
4a:09:04:54:eb:75:74:55:98:58:5f:c8:61:69:42:1c:24:c3:
75:5f:5e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:08:06 2025 by rpki-client