Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-PQHKWj15xBqQMrUxOnbemQqHqc.roa
File: 1-PQHKWj15xBqQMrUxOnbemQqHqc.roa (raw, json)
Hash identifier: SKJISzWe4t0bO/7qRhpQmsARooDTZ221zqKC+XnckHw=
Subject key identifier: F8:F4:07:29:68:F5:E7:10:6A:40:CA:D4:C4:E9:DB:7A:64:2A:1E:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 867FB93E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-PQHKWj15xBqQMrUxOnbemQqHqc.roa
Signing time: Mon 23 May 2022 04:11:29 +0000
ROA not before: Mon 23 May 2022 04:11:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2256517438 (0x867fb93e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 23 04:11:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8f4072968f5e7106a40cad4c4e9db7a642a1ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:d4:64:94:44:3f:7e:ef:23:8d:71:87:63:
d1:1d:e8:dd:42:7d:7e:6b:7a:03:f3:45:09:96:a3:
7d:25:6a:1e:a3:77:e8:44:3a:e9:f5:ae:1a:3a:ba:
90:a1:cb:e6:0d:aa:82:45:ed:7f:32:8c:95:03:5d:
82:1e:e6:03:7a:7a:43:1f:84:2b:98:0b:b0:e7:63:
a1:64:01:5d:fc:36:81:01:53:eb:45:8b:13:22:3d:
4d:92:a3:14:03:77:6d:90:18:98:65:47:93:c9:a2:
a7:e4:37:52:2d:98:86:c5:13:c4:d4:5c:88:41:a5:
d3:d7:ca:0f:68:5a:be:be:96:1d:30:1d:aa:23:c3:
d6:a5:b4:73:71:ad:27:b8:66:1a:9d:81:9c:e8:4b:
71:10:41:58:cb:c8:73:1a:cb:35:ec:d7:a4:90:ca:
23:ae:00:c9:09:ca:23:67:9f:91:95:db:9b:c6:38:
01:9d:24:a9:05:57:e1:1a:58:3b:ab:23:c6:99:71:
c6:df:95:6b:09:c4:65:a7:a2:49:25:23:4f:36:5a:
26:3b:49:70:77:86:c9:90:dc:7a:c4:cb:74:13:76:
e8:b5:d4:3c:6b:2e:95:ec:ba:30:35:72:26:74:b7:
b5:fe:5b:65:16:20:38:4d:aa:36:b4:0f:95:17:8f:
4f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F4:07:29:68:F5:E7:10:6A:40:CA:D4:C4:E9:DB:7A:64:2A:1E:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-PQHKWj15xBqQMrUxOnbemQqHqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:85:01:b5:1d:e0:76:f0:f0:4d:27:e5:41:b7:24:81:06:bf:
50:02:3b:5f:3f:57:57:6c:e4:8f:5c:f7:68:5e:a7:fd:ba:3a:
d4:49:bb:7e:3d:38:d3:79:da:7e:d6:00:42:dc:c4:8b:b1:99:
2f:54:c5:81:3e:18:8b:2f:86:63:43:f3:6b:9b:2c:39:db:dc:
3f:fc:d8:15:5a:03:46:75:6b:5f:cd:ff:7c:7e:50:cf:c3:20:
8f:e6:9d:b1:bb:04:14:2f:17:7e:37:e5:a1:63:02:9b:2a:a0:
cf:52:6e:6c:b2:ea:74:b2:46:57:10:b5:b3:67:17:3e:cb:67:
98:6d:db:2d:4e:a0:d3:39:06:fb:9e:c5:b2:c6:be:bf:fc:d6:
28:a4:a8:73:c8:e0:6e:d9:65:4c:c2:5e:af:61:56:37:14:56:
94:7b:f0:75:7c:6f:12:ef:1d:68:96:f0:11:4e:6e:2a:76:fd:
83:9b:10:8d:a6:c2:a7:50:48:f9:2a:45:34:c6:87:b4:a9:59:
00:a8:f0:97:11:45:f1:08:48:7e:94:85:54:61:06:83:5e:8d:
81:01:6b:58:67:4b:1b:17:48:ad:23:cf:cb:6b:0e:20:29:94:
14:3e:12:1f:c1:39:af:96:7b:18:ed:b6:0e:1a:1f:85:0a:de:
bc:ce:9f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 20:39:33 2025 by rpki-client