Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IQOHwJYW7GWXmCjq0-d2_QqxlF4.roa
File: IQOHwJYW7GWXmCjq0-d2_QqxlF4.roa (raw, json)
Hash identifier: /Y3dpmXv64z2oJ4bLWJDtgUwA/uoemSy4WaAJuVHkcw=
Subject key identifier: 21:03:87:C0:96:16:EC:65:97:98:28:EA:D3:E7:76:FD:0A:B1:94:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 804298DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IQOHwJYW7GWXmCjq0-d2_QqxlF4.roa
Signing time: Sun 01 May 2022 23:10:45 +0000
ROA not before: Sun 01 May 2022 23:10:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2151848155 (0x804298db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 1 23:10:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=210387c09616ec65979828ead3e776fd0ab1945e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:2e:0b:a9:e9:70:75:e0:82:13:c7:18:23:
9d:4f:f0:6f:b5:ad:96:03:25:b1:f8:32:9f:0c:d1:
2b:3b:ea:fe:95:4c:dd:f2:6c:fd:6b:c3:34:a6:6c:
01:c1:8e:ac:a7:c6:e9:a2:c3:67:a3:64:07:cd:db:
63:ea:8b:74:de:a9:a1:cb:50:c4:83:77:b6:cb:c7:
54:95:78:0f:a2:46:e3:d6:7d:06:b7:19:96:83:0a:
e3:d4:50:cd:ba:88:a5:9e:97:6e:39:21:7a:11:0b:
e7:54:e4:e1:3a:84:c7:e0:5d:71:76:cf:17:b9:67:
f3:d0:4b:7b:e9:5f:f6:57:bb:ae:8e:a2:cd:91:9c:
fd:1c:14:8a:07:a2:d5:1c:40:d5:8d:70:4d:0c:c3:
a2:2c:39:77:29:30:76:14:7f:4f:24:50:8e:fe:9e:
16:ae:ce:58:4b:65:79:08:1a:cf:e9:c2:91:a8:6a:
e8:7f:e8:b3:c4:8a:30:bd:1e:48:88:0c:46:d1:0f:
6b:6a:8c:80:9b:da:bf:8a:33:f0:9d:4b:5e:a2:7c:
ec:90:d9:59:17:64:f8:cb:13:48:80:d4:ca:ac:f6:
15:50:8e:fb:e1:e9:d2:0b:1f:09:4b:fe:f5:b6:dd:
00:25:5a:c8:39:38:d0:a3:99:92:05:df:ea:f0:7e:
a3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:03:87:C0:96:16:EC:65:97:98:28:EA:D3:E7:76:FD:0A:B1:94:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IQOHwJYW7GWXmCjq0-d2_QqxlF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:fe:91:d3:22:00:33:f7:b1:a6:e0:15:83:f9:62:0d:c0:e9:
b1:34:ca:2f:79:ed:ca:31:cb:e3:d5:c7:6b:a5:cc:b0:99:bd:
21:b5:72:55:ce:9c:af:1b:0a:e4:f3:b4:d1:39:79:9b:16:43:
66:11:fb:42:62:6c:ca:91:85:2c:8c:93:25:3f:49:4d:ca:7a:
cf:2b:c1:1d:71:32:2b:c3:4c:ad:d8:cf:36:06:0f:fe:f8:fe:
36:e6:4d:f0:49:a2:7b:0c:cb:4b:40:21:51:8b:c0:d0:e9:d3:
05:71:4a:39:b5:5d:5a:99:33:56:68:1f:ae:bc:e8:a2:9f:1e:
e1:71:5d:65:7f:2b:4c:e6:df:68:83:62:2a:94:ad:52:bc:db:
72:fb:f7:cc:57:ed:8b:17:9f:bc:7b:47:cc:10:b1:82:89:71:
42:02:63:fa:b9:ff:c5:23:14:da:74:f1:39:70:4d:63:78:a7:
a0:06:a3:28:77:93:6e:df:05:8f:e6:ab:8f:83:42:dd:96:07:
0e:a7:8a:9d:ac:5a:a8:be:e9:55:7c:27:16:2b:b7:82:3c:f7:
af:85:f0:53:15:88:e7:9a:fe:c3:27:1c:87:a7:62:ab:d4:aa:
29:bc:37:96:e2:23:af:b5:b5:b1:50:5d:e9:06:69:58:5b:be:
75:bd:ed:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 17:08:22 2025 by rpki-client