Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QiT2SkcjHUSU66VheeAX9AEih0w.roa
File: QiT2SkcjHUSU66VheeAX9AEih0w.roa (raw, json)
Hash identifier: 324UGSrETX/zxDyonLrpHPRVA3KKT+Bh2aYeAXTracw=
Subject key identifier: 42:24:F6:4A:47:23:1D:44:94:EB:A5:61:79:E0:17:F4:01:22:87:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6EDD09DC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QiT2SkcjHUSU66VheeAX9AEih0w.roa
Signing time: Tue 01 Mar 2022 22:08:27 +0000
ROA not before: Tue 01 Mar 2022 22:08:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1859979740 (0x6edd09dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 22:08:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4224f64a47231d4494eba56179e017f40122874c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:29:8c:6d:20:f1:90:5f:f9:5a:38:cf:80:
fd:fc:db:44:5a:4e:5a:a8:2f:06:6d:45:ed:b7:a6:
8b:12:7d:7d:9c:b5:c1:44:ba:55:57:6e:98:cb:f6:
d4:00:a3:5e:74:15:9c:96:56:3f:59:71:d1:60:37:
a7:1f:83:39:14:c1:c4:59:03:3a:9e:cc:68:e0:48:
5e:d6:08:a4:e6:58:dd:80:48:08:a2:1f:e8:44:69:
f5:da:89:a7:04:64:93:43:c5:71:3a:cd:19:dd:a3:
6f:18:22:89:4c:4c:22:89:39:98:56:19:85:eb:48:
38:51:8e:1f:24:76:75:2b:ff:5e:6c:d4:2b:83:76:
60:ed:9a:80:96:e5:ea:97:fb:17:88:e8:22:c6:3b:
21:33:b5:8d:12:54:88:60:e0:cd:23:09:93:a5:5c:
da:de:51:a3:9a:7d:78:e1:6a:6a:12:b6:ff:48:c4:
f3:b1:83:27:41:01:6d:dd:ba:ff:eb:3b:6d:3b:02:
06:c8:64:0d:49:db:1c:7c:d9:c5:c1:a2:50:f9:a2:
33:d1:33:d7:0c:db:bf:37:02:4f:7b:fd:e8:fa:ff:
0a:f3:ff:83:e8:56:5a:21:92:8a:18:e0:53:56:e4:
42:5a:b0:5f:ff:f6:66:58:5e:a3:02:09:14:44:e6:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:24:F6:4A:47:23:1D:44:94:EB:A5:61:79:E0:17:F4:01:22:87:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QiT2SkcjHUSU66VheeAX9AEih0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:25:be:96:5d:6c:b6:46:ce:e8:71:fe:99:25:ea:a9:ca:9a:
6f:be:44:da:79:e5:e1:1f:a3:42:f5:8e:65:0c:9e:e7:6c:7b:
0f:15:cb:52:3f:39:b6:62:b5:27:68:2b:8c:55:d9:90:e7:d3:
d0:12:cb:e5:1a:91:2e:26:fb:3b:0b:3b:5b:72:ae:91:eb:a9:
54:eb:9c:0a:46:1a:51:e4:95:a5:ae:ad:00:e8:ca:a7:86:97:
ff:2e:f7:e5:1d:fc:d6:bd:9c:60:2c:26:51:66:b5:90:a9:ed:
3d:fd:df:40:66:08:43:4d:48:18:37:d5:16:01:c3:d4:cd:d2:
b0:4e:6c:f9:b5:b2:49:f1:c8:3e:a1:33:39:06:66:0b:2c:12:
a3:1a:7c:d2:90:51:f2:54:b0:c5:67:7f:e0:81:06:ef:8e:79:
7e:7e:02:06:77:80:5c:17:5a:d7:f2:96:99:ad:7b:af:e7:13:
e7:29:d8:6a:98:fa:72:68:f4:c9:ed:ef:39:b9:3b:66:c5:41:
71:3d:6e:b9:fd:9f:b4:1e:0c:50:32:f6:5c:d3:0b:e2:76:90:
e3:1d:64:67:34:57:95:48:aa:68:cd:7e:77:82:56:39:d8:60:
1f:43:6d:29:8f:16:bd:89:e7:2e:d4:a3:df:0f:db:59:1e:56:
15:ac:09:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:13:43 2025 by rpki-client