Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q7uAGRsWjE-rY0t4S-Or0I46vqo.roa
File: Q7uAGRsWjE-rY0t4S-Or0I46vqo.roa (raw, json)
Hash identifier: SJLR0jOLKGR/Qn9mLdJ/AJUR+OcbAk/1cRYFYXrkhVA=
Subject key identifier: 43:BB:80:19:1B:16:8C:4F:AB:63:4B:78:4B:E3:AB:D0:8E:3A:BE:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01822C72483B9792C028194AE5E87994D97D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q7uAGRsWjE-rY0t4S-Or0I46vqo.roa
Signing time: Sat 23 Jul 2022 19:04:23 +0000
ROA not before: Sat 23 Jul 2022 19:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:2c72:2917/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2c:72:48:3b:97:92:c0:28:19:4a:e5:e8:79:94:d9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 23 19:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43bb80191b168c4fab634b784be3abd08e3abeaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0b:eb:d8:ab:c9:3c:aa:30:ed:23:1b:51:f2:
bd:d4:c2:7d:25:af:14:8c:9d:bd:c6:e1:bc:73:4b:
27:ba:f4:35:a9:84:6a:65:ff:d9:db:21:d5:b7:4b:
45:d1:48:09:00:04:d4:06:3a:c9:97:0c:2d:47:1b:
3b:1d:dc:a4:a5:3e:e5:f1:f9:e7:a4:e8:f1:8c:6d:
87:ac:e7:27:01:5b:a6:06:cc:01:78:5b:55:a8:2c:
92:37:af:15:72:04:63:de:c5:3e:9d:f2:2c:ae:18:
5f:a1:ce:87:98:30:cc:6c:20:f8:6d:c0:d2:23:4f:
5c:09:78:7e:a0:3d:52:56:bb:2a:9a:41:c9:0c:f0:
0b:f2:5e:08:c8:69:3d:f3:e2:00:b1:6e:2d:6f:96:
19:17:b9:37:8f:6e:8c:96:de:53:7a:15:75:33:79:
ca:f9:0d:89:4f:42:95:6c:42:3a:7e:7b:87:07:d3:
58:19:1d:0f:6a:5a:3b:bd:99:cb:38:63:bf:78:46:
ff:6c:8f:98:57:6f:ff:f3:47:f4:e0:35:51:50:fa:
40:30:bd:46:ec:a4:9b:dd:92:a4:03:73:ee:32:22:
57:a2:dd:bb:cb:39:12:ed:83:9d:62:49:9b:20:06:
99:27:b0:94:cf:d3:85:da:f1:d1:70:1f:82:ed:c9:
72:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BB:80:19:1B:16:8C:4F:AB:63:4B:78:4B:E3:AB:D0:8E:3A:BE:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q7uAGRsWjE-rY0t4S-Or0I46vqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:52:4d:0d:e5:5c:e1:45:02:a1:c0:c6:a0:a6:d3:24:4b:c7:
d0:c2:51:5e:36:f8:95:b1:9e:ad:f0:c2:f2:0e:17:8f:e0:0e:
03:9a:02:00:d7:94:81:cb:ad:6d:76:05:e4:90:5c:dd:0f:c9:
63:6b:6b:4d:f5:7e:48:0d:38:34:50:18:6f:35:66:63:6d:15:
7d:8a:77:e2:62:09:ea:f6:e0:a8:37:d4:b4:be:35:6a:84:a0:
e0:35:48:f1:71:d5:19:d2:04:4d:af:39:1d:b9:40:b5:b5:75:
da:bc:92:a7:de:16:53:26:e0:1d:27:c4:9f:0a:dc:47:00:b9:
c4:da:da:bc:f2:24:ef:71:ed:7d:a3:81:d7:02:5d:b7:fa:44:
24:75:8f:21:c2:0f:75:92:a1:7b:6d:1a:30:24:98:2f:38:b8:
74:10:8d:3b:7c:59:79:36:63:3d:13:d7:6a:3a:ad:5a:2f:1f:
d2:c3:e4:bf:4c:c7:81:68:1e:d9:ac:05:77:6f:56:f0:e9:da:
a6:eb:61:d8:04:be:1e:d3:65:ff:f3:4a:d3:03:8d:43:7f:16:
dd:8b:03:72:e8:76:d6:d3:05:87:27:4c:ee:f8:bd:87:7b:e9:
2d:85:6a:87:35:bd:1e:43:41:ad:a9:ce:e6:1b:26:73:80:ea:
a7:79:4c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:48:16 2025 by rpki-client