Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Qet06U4uwM243xA5NltnqbPawA.roa
File: 2Qet06U4uwM243xA5NltnqbPawA.roa (raw, json)
Hash identifier: D85TUCPhDz7oCeqtXBCVFVCU2RSwtXoWCZ+IrKt34bs=
Subject key identifier: D9:07:AD:D3:A5:38:BB:03:36:E3:7C:40:E4:D9:6D:9E:A6:CF:6B:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 692AB4B3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Qet06U4uwM243xA5NltnqbPawA.roa
Signing time: Wed 09 Feb 2022 14:18:26 +0000
ROA not before: Wed 09 Feb 2022 14:18:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
2001:67c:64:ffff:0:17e:ddba:7b5e/128 maxlen: 128
2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
2001:67c:64:ffff:0:17e:dd83:3b9e/128 maxlen: 128
2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1764406451 (0x692ab4b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 9 14:18:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d907add3a538bb0336e37c40e4d96d9ea6cf6b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:4a:9f:15:e0:87:92:47:50:57:2a:ae:8b:
05:18:55:b0:a4:d8:a8:20:1c:f7:b8:21:99:f5:6d:
e1:93:43:02:3b:6f:4f:40:57:67:e0:68:4e:c3:e9:
50:0e:0d:35:ac:fa:3a:db:f5:34:8c:33:8a:c3:18:
d4:0d:7a:9f:31:86:27:2a:75:2c:f4:d7:cf:90:70:
10:95:91:bd:2b:52:e2:bb:65:e9:c9:28:39:24:95:
55:88:2d:40:03:c6:67:6c:ac:b8:ab:b9:c7:fa:fb:
0c:ca:a6:0c:8c:54:68:f5:89:dd:77:cd:71:56:db:
67:d9:06:4b:ad:7f:55:ff:95:4e:e0:9f:52:4b:46:
2b:8a:6b:0d:94:05:74:62:a6:f2:25:34:90:83:7b:
b0:e9:44:5e:90:cf:c2:56:d7:e1:bd:ff:b9:22:d0:
58:3c:24:15:3a:6f:c9:70:e8:80:49:6f:a3:c7:f1:
a9:13:5f:dd:7f:eb:e2:d2:58:03:88:1a:d5:00:1d:
e5:9e:0c:09:92:8e:98:32:cb:3b:df:0b:58:bf:51:
0c:13:7f:c4:a5:e9:f5:04:48:60:76:dc:f6:a6:4b:
2e:c9:88:f9:a2:e5:8f:9d:01:1f:aa:97:09:84:d8:
19:f4:fe:3c:76:e3:c8:5a:5a:60:ce:61:4f:3f:64:
e7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:07:AD:D3:A5:38:BB:03:36:E3:7C:40:E4:D9:6D:9E:A6:CF:6B:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Qet06U4uwM243xA5NltnqbPawA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:5c:bc:17:9e:8d:65:1d:01:93:13:2d:36:b4:2e:4d:2d:4b:
ab:d7:e2:8f:6f:81:00:b5:ed:8d:36:d2:58:8b:2b:19:82:ce:
b6:70:14:05:a9:26:18:67:85:8c:06:cd:4b:a2:ff:15:d8:c6:
6c:f0:6d:6a:27:6b:ff:e1:3e:27:ce:07:e6:a2:42:1e:f9:dc:
c8:73:55:84:6f:c2:4e:9d:29:a7:03:23:38:a0:e9:c5:46:ca:
d0:2f:cf:93:86:05:90:01:94:b6:da:c3:4b:ce:50:f3:ed:b3:
1d:54:af:5a:a8:49:0f:68:79:d2:45:09:79:2e:6b:5f:67:90:
d6:00:e9:df:34:17:56:b6:f9:c8:c1:6c:fd:cc:52:34:df:ae:
6b:fb:04:ae:14:ea:a7:34:68:4c:14:42:19:37:17:71:99:3e:
05:6d:fa:15:4f:c0:da:33:63:b1:5a:ed:fd:86:a1:77:d5:6f:
90:55:0b:36:16:89:9d:b4:81:61:2f:79:9f:ec:40:71:b0:63:
7c:b7:b3:b8:51:99:5d:60:85:60:5f:ca:27:60:e6:9e:00:4a:
08:47:06:8f:00:b8:ef:92:a3:5b:c4:c7:d3:4f:ab:2a:97:b8:
f8:7e:d7:91:a7:cb:35:5b:5d:37:7c:ac:ce:a0:80:6b:26:68:
93:26:b0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:04:34 2025 by rpki-client