Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QcyOWhoMaIo9EZ79mo2LwC6SBYw.roa
File: QcyOWhoMaIo9EZ79mo2LwC6SBYw.roa (raw, json)
Hash identifier: FZS2rCjSpQLz2CqslFCZ4qNo02y1L/zQSxnVKmHx91g=
Subject key identifier: 41:CC:8E:5A:1A:0C:68:8A:3D:11:9E:FD:9A:8D:8B:C0:2E:92:05:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8256A03F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QcyOWhoMaIo9EZ79mo2LwC6SBYw.roa
Signing time: Sun 08 May 2022 23:09:29 +0000
ROA not before: Sun 08 May 2022 23:09:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2186715199 (0x8256a03f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 8 23:09:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41cc8e5a1a0c688a3d119efd9a8d8bc02e92058c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:d8:d6:e7:4e:24:37:fb:e5:ea:3e:34:4f:
dd:a3:6f:52:de:cd:46:33:07:6c:88:88:82:fa:92:
77:a8:e2:c0:e9:a4:04:44:36:56:8b:06:69:1e:c8:
08:5f:2e:d7:bc:12:59:62:cc:c8:5c:b0:65:9d:ec:
3f:a0:3e:08:5e:4e:b1:eb:30:6e:70:93:2a:1d:40:
bb:4d:b1:fa:65:33:94:da:f3:00:46:6f:ea:40:a6:
f3:4a:29:68:1e:fd:96:b2:24:4e:76:68:f5:4a:f9:
89:32:42:77:1c:5d:9b:f1:f9:87:05:86:b1:6d:43:
cb:8e:49:2b:f1:59:09:68:b5:af:96:3c:f1:5e:bc:
10:11:30:ad:8d:c8:ac:c9:b9:93:85:e4:70:33:ec:
81:31:e3:a7:92:fa:5b:a2:4b:32:69:43:e4:56:66:
ab:07:7c:04:69:94:1a:be:01:2b:2d:42:03:44:8a:
89:96:47:c4:0c:57:15:d3:29:71:e8:ce:82:e1:ab:
68:8c:5b:1b:3d:64:cc:30:62:70:fb:89:0a:9d:fc:
11:22:2a:99:b7:7f:f2:94:8e:88:24:7c:52:e4:e8:
65:44:56:7a:5d:6c:8f:c2:35:62:b4:cf:ef:a3:04:
28:db:b6:8d:86:78:80:86:59:19:21:9a:02:b7:9f:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CC:8E:5A:1A:0C:68:8A:3D:11:9E:FD:9A:8D:8B:C0:2E:92:05:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QcyOWhoMaIo9EZ79mo2LwC6SBYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:64:af:16:ee:c4:4e:a4:18:81:25:4a:44:11:1d:a8:fc:51:
ae:f8:e5:61:73:30:88:9c:e7:5e:f1:62:88:ac:17:31:fe:2e:
89:23:3b:a2:62:ff:98:f6:be:ac:dd:26:2e:da:39:f5:0b:c4:
de:57:fb:30:8f:d8:df:60:8e:33:a3:75:0c:89:eb:ff:3c:c1:
f5:25:4c:86:6b:0e:67:a2:4f:f3:68:37:f6:5c:fb:06:e8:0d:
17:88:5b:70:36:e5:33:6b:81:e1:65:53:b9:e5:4e:c0:32:88:
86:61:da:13:d7:08:1b:9f:a6:c6:59:53:a5:00:10:37:35:ea:
bd:34:29:b8:7c:84:53:eb:6c:d6:aa:c9:34:c0:06:1f:b0:07:
a2:a5:3b:e0:bc:f7:55:9c:56:f4:67:e6:da:1f:95:8a:60:08:
c4:76:36:a1:da:ea:57:30:42:40:2e:1e:d9:05:d9:3c:23:2e:
09:5c:f2:05:18:6b:1c:0e:af:b0:10:05:24:ff:1e:e6:d3:93:
e2:4c:08:b9:0f:28:64:60:16:1e:14:de:d6:91:c3:d1:52:8c:
9c:34:7c:a3:7b:c3:08:18:19:27:1e:92:1d:84:01:4c:be:00:
ea:f3:64:31:b8:3f:e9:0d:92:98:20:04:dc:07:5b:10:cd:9a:
3d:5d:a3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:37:55 2025 by rpki-client