Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q_REQf3nPorpPO4rwecJEWqdrSY.roa
File: Q_REQf3nPorpPO4rwecJEWqdrSY.roa (raw, json)
Hash identifier: t+XcOx/Cvlo+B8cwrCPqij4KUnQHFdVLugQDaaO5Zs0=
Subject key identifier: 43:F4:44:41:FD:E7:3E:8A:E9:3C:EE:2B:C1:E7:09:11:6A:9D:AD:26
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018213955582CCAEE8299D3DC0E6021BBE26
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q_REQf3nPorpPO4rwecJEWqdrSY.roa
Signing time: Mon 18 Jul 2022 23:12:10 +0000
ROA not before: Mon 18 Jul 2022 23:12:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:13:95:55:82:cc:ae:e8:29:9d:3d:c0:e6:02:1b:be:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 18 23:12:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43f44441fde73e8ae93cee2bc1e709116a9dad26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e1:d3:20:a4:bc:da:66:aa:4e:b4:1c:b6:2f:
32:d4:93:17:cc:09:72:2a:24:64:43:8f:f9:70:79:
63:ce:22:1f:7c:d6:87:c8:7b:82:47:34:69:69:80:
63:11:75:1e:62:ba:fa:c1:7b:38:9d:cc:ed:97:ab:
0f:e5:f3:1e:9c:34:60:de:34:81:16:82:28:23:e6:
9d:21:eb:53:75:2b:46:bd:07:c6:9f:97:d4:03:a9:
59:ba:0d:72:bc:9d:d0:c1:e2:01:3c:f2:0a:22:2a:
95:cc:b7:31:b4:90:ff:dd:e2:1c:d2:09:87:c5:c2:
45:6e:b5:33:6b:6a:cc:6a:79:30:9c:7d:5c:97:75:
83:eb:43:70:c9:7c:65:c8:ab:3e:4d:ea:89:07:d7:
21:7c:a9:3e:cf:d0:9d:27:b8:16:2c:98:61:3b:87:
f9:f7:38:22:9e:95:26:d4:08:fd:26:b0:b3:d6:29:
ee:f4:5e:1b:6e:53:f2:9b:b8:43:c0:21:de:6d:26:
ac:bc:78:01:b9:8a:f5:e3:74:1b:26:6a:5f:c8:19:
b4:f4:bf:4f:7d:ff:62:80:3b:76:4a:15:f6:14:8f:
6a:b7:7d:d8:a8:7d:30:07:bf:56:34:bc:71:67:19:
b5:b1:2d:34:cf:0a:6e:84:e3:c9:8e:11:d6:be:c0:
e6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F4:44:41:FD:E7:3E:8A:E9:3C:EE:2B:C1:E7:09:11:6A:9D:AD:26
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q_REQf3nPorpPO4rwecJEWqdrSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:52:c7:2e:46:8e:72:0c:9f:15:28:58:f8:46:38:31:c9:96:
48:8b:52:98:5b:b0:75:b6:e1:48:90:3b:a8:b7:e6:c8:04:dc:
f2:91:d8:37:72:53:ec:da:bb:72:76:67:57:dc:e0:8f:55:44:
15:f8:6a:b4:70:3a:3b:10:2d:b5:cd:fd:ed:b3:7a:8c:12:fc:
bf:37:5a:ae:ca:7d:52:11:e2:f2:c3:57:b7:67:8d:47:86:aa:
d4:5d:41:d9:26:57:c7:39:52:b2:6c:22:29:be:92:bd:77:db:
cc:f6:54:65:48:5f:63:ec:18:ea:3f:c2:ab:0c:29:38:d4:a1:
2f:c0:40:24:b8:33:75:3c:6c:9a:93:0f:eb:43:f8:2c:22:c6:
da:76:d2:dc:04:1e:6b:5b:c5:45:71:10:ec:4f:be:ef:4b:4f:
72:8a:79:e9:f0:98:a3:67:70:7d:ce:28:b8:60:f1:ab:5e:50:
d3:8a:98:9f:a7:e0:04:ff:21:8e:17:6c:a5:5a:79:fe:24:ea:
f6:44:44:05:38:d1:c1:d8:dd:b5:d3:8b:32:2f:77:20:44:7d:
2f:13:3d:98:17:7b:d6:3e:cf:2c:1f:64:2e:91:f8:20:6e:46:
c7:b3:ec:35:b8:12:05:9f:83:ac:ef:99:3b:e7:83:b1:51:4b:
3c:32:0f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:06:37 2025 by rpki-client