Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QiHEsqPLHbC99scP5hC696nJ8t8.roa
File: QiHEsqPLHbC99scP5hC696nJ8t8.roa (raw, json)
Hash identifier: Gqkq/thLpXjNMoR8ojsBZd2wk3n1P+Ylal6fQVqZbb4=
Subject key identifier: 42:21:C4:B2:A3:CB:1D:B0:BD:F6:C7:0F:E6:10:BA:F7:A9:C9:F2:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7CC8E470
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QiHEsqPLHbC99scP5hC696nJ8t8.roa
Signing time: Tue 19 Apr 2022 21:09:27 +0000
ROA not before: Tue 19 Apr 2022 21:09:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2093540464 (0x7cc8e470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 19 21:09:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4221c4b2a3cb1db0bdf6c70fe610baf7a9c9f2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:cb:fb:4e:77:d4:a3:39:d5:46:ba:6b:88:
2e:30:84:c3:fc:68:a2:b2:10:30:cd:40:e8:6f:48:
ac:88:f9:9d:51:d3:e1:6c:88:f2:99:33:21:db:43:
40:67:2e:c5:42:a4:86:5c:5b:96:bb:85:0d:35:69:
5f:f3:d5:d9:17:46:26:a2:d3:94:b0:6d:f6:2a:d4:
f7:27:42:78:da:73:3a:6d:10:af:b1:05:12:ca:c8:
c8:aa:91:ed:50:57:97:f2:d5:09:88:97:2a:42:3d:
ed:ee:4f:80:13:b5:31:1a:3c:42:e0:da:64:7d:6d:
99:b5:9e:ab:af:a3:04:68:b9:95:7a:06:16:18:05:
88:64:a8:22:89:85:37:45:68:ff:5b:4c:c8:b2:2a:
fb:0c:60:2d:b9:05:63:63:3b:aa:2a:d0:db:9d:75:
ee:25:da:db:64:e9:3a:84:49:c6:aa:ab:47:98:5a:
f6:58:ff:64:f1:48:9c:99:c3:ef:45:c3:7e:42:d9:
19:65:4f:58:3c:ce:d7:b5:3a:2f:44:4a:b9:3f:de:
c2:30:c5:04:0a:5b:83:12:61:4f:d5:0b:d6:34:55:
6d:d5:53:29:7c:36:84:ee:c7:a6:c4:83:d9:96:6d:
32:72:7e:3c:bb:f0:06:06:8c:98:d2:43:eb:e3:da:
f5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:21:C4:B2:A3:CB:1D:B0:BD:F6:C7:0F:E6:10:BA:F7:A9:C9:F2:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QiHEsqPLHbC99scP5hC696nJ8t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:61:06:60:b3:0c:d6:94:81:9d:10:60:95:b0:4e:eb:b7:93:
4f:93:d6:d7:2a:bc:b6:ac:c4:05:73:50:4b:cf:9d:2d:3e:a9:
14:47:4e:76:e8:ac:2e:14:d5:d7:39:a0:3b:b1:35:32:c3:cb:
c5:50:f1:43:54:ef:ce:f0:0a:e2:4e:c5:78:ea:b6:20:31:4d:
53:4e:1d:22:f2:99:30:00:bd:9f:7e:66:4d:24:83:1d:30:02:
cd:c9:fe:54:49:36:f3:36:01:2d:f9:7d:75:fa:82:1f:b1:41:
97:75:33:5a:eb:2e:f4:8e:68:79:fa:e2:43:e5:96:9a:4d:2a:
a8:80:52:4b:c8:7f:9c:4d:2b:da:ae:4f:e3:2b:a9:d2:a8:9e:
a4:7b:94:ed:4d:c0:9b:38:ae:ce:13:84:b3:88:8a:82:be:f2:
5d:80:57:15:e9:d2:c8:08:fc:f0:aa:97:c1:15:32:86:2a:52:
22:9d:ec:c3:ae:5c:30:a9:54:04:36:b9:76:1e:a7:7e:27:cd:
ba:2a:d9:f9:b5:ce:d7:09:b3:2d:a5:c7:9e:e8:3d:d5:c4:10:
01:92:a1:4c:51:e0:11:a8:0b:4d:63:ed:34:64:aa:ab:8b:7a:
ae:0e:75:c9:81:42:1b:ec:e1:39:59:69:ad:06:84:c1:f6:9e:
6a:8e:88:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:30:48 2025 by rpki-client