Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q4hhghyRAqYnjm4f74g61j4Mgdg.roa
File: Q4hhghyRAqYnjm4f74g61j4Mgdg.roa (raw, json)
Hash identifier: dq1S9FkGTV0MTfoyXGIVFHisYA3SewK65ZTqQCyO0i8=
Subject key identifier: 43:88:61:82:1C:91:02:A6:27:8E:6E:1F:EF:88:3A:D6:3E:0C:81:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018218BF8E0E26D396264A40B8BD2476A664
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q4hhghyRAqYnjm4f74g61j4Mgdg.roa
Signing time: Tue 19 Jul 2022 23:16:23 +0000
ROA not before: Tue 19 Jul 2022 23:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:18:bf:8e:0e:26:d3:96:26:4a:40:b8:bd:24:76:a6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 23:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=438861821c9102a6278e6e1fef883ad63e0c81d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a4:e4:c6:64:7b:c9:7c:a8:db:d6:bf:7e:27:
d7:bc:94:9d:7f:25:02:03:9d:51:bd:3c:1f:f2:27:
29:12:7a:80:9f:97:27:28:a2:14:d5:39:d4:99:fe:
37:5b:27:a5:d8:d8:ac:76:40:dd:e1:53:09:fc:b5:
ea:3e:5b:8c:b7:20:13:99:c5:aa:88:c2:ee:77:0c:
15:db:85:ed:30:22:af:4b:f5:1d:60:55:25:e4:02:
b4:5a:49:f0:10:a0:8f:8d:ce:74:ff:e4:90:50:f7:
ae:a8:b4:22:86:64:bc:ea:61:de:cd:5e:2d:04:b8:
8b:e0:e2:6c:38:16:b0:3b:27:0f:3d:16:f1:02:76:
98:44:f3:fe:05:b0:11:7d:ba:5e:fe:8c:a5:96:3c:
d7:fb:e4:f9:ee:e8:81:65:a1:a0:77:43:4a:8f:95:
21:b0:b6:64:2a:9d:87:e5:43:df:2b:46:00:4e:c9:
a3:f0:d4:91:fd:a6:90:c0:6b:ea:b2:af:3a:25:ed:
ed:d3:ab:1b:51:3a:8b:d3:c6:5f:11:3b:79:d4:09:
53:5d:91:60:af:eb:7f:2e:f3:36:cd:d4:d3:f5:4e:
60:88:00:4b:d3:b4:20:40:f0:ab:11:6a:b4:49:c7:
38:9a:d3:6c:36:98:60:ca:7e:0f:66:b4:03:3b:04:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:88:61:82:1C:91:02:A6:27:8E:6E:1F:EF:88:3A:D6:3E:0C:81:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q4hhghyRAqYnjm4f74g61j4Mgdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:ee:79:ff:eb:57:0b:08:be:6a:9b:e1:ab:df:71:f4:16:0a:
fa:92:47:af:af:a0:0c:9d:4d:ac:44:1e:dd:ff:8f:b4:ff:65:
0f:a0:98:ec:2f:99:43:c5:95:1f:a6:4b:25:96:67:4f:31:29:
31:56:71:12:f9:16:02:df:10:8f:7b:82:ba:5c:ee:ed:6e:e0:
fc:0e:aa:c4:95:df:44:84:c1:b5:d8:ab:90:c4:fb:7f:77:d0:
70:61:e2:9e:41:d8:63:82:80:9a:fe:55:1d:0a:aa:cc:3c:f5:
c7:ab:d8:b7:c4:98:e3:1d:5f:c3:c7:39:77:c2:ce:4f:56:54:
b4:9c:64:a7:38:4f:bb:d8:a0:9a:09:71:b4:06:82:81:0e:6c:
e5:8f:69:e2:26:44:fc:3a:09:9c:ae:9d:cd:2d:c8:f9:07:f9:
77:ed:0b:3b:d6:77:78:fa:3a:55:82:e9:62:85:bf:da:30:94:
51:15:ae:19:4a:01:e6:cc:29:7f:a0:21:d5:83:a0:3c:05:10:
91:ab:82:89:e5:61:28:23:52:14:0e:0a:27:a1:6b:db:fd:ba:
59:b6:de:f2:0e:01:93:46:26:dc:c3:24:c3:18:6d:4f:7d:44:
4b:a8:94:12:39:b0:b9:9e:b4:6c:b8:8d:89:8e:b3:bf:cf:3c:
46:81:8b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:30:39 2025 by rpki-client