Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QjjjwtvpJTV6OwIvKAt52gLf_G8.roa
File: QjjjwtvpJTV6OwIvKAt52gLf_G8.roa (raw, json)
Hash identifier: FX3yF97Ub+K1tOJ9rhnzlXZ+kxPjVtuHBTqrP4iJaHo=
Subject key identifier: 42:38:E3:C2:DB:E9:25:35:7A:3B:02:2F:28:0B:79:DA:02:DF:FC:6F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01859DBA6F2F5A9191FA80AF8ACCB7D76CFB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QjjjwtvpJTV6OwIvKAt52gLf_G8.roa
Signing time: Tue 10 Jan 2023 22:08:39 +0000
ROA not before: Tue 10 Jan 2023 22:08:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9d:ba:6f:2f:5a:91:91:fa:80:af:8a:cc:b7:d7:6c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 10 22:08:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4238e3c2dbe925357a3b022f280b79da02dffc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:11:97:27:79:8e:2f:57:cb:28:5d:2d:77:
0f:5e:27:9a:d1:78:73:f5:f1:50:ee:84:e6:cc:5f:
45:fb:94:9e:0f:5a:c7:e6:aa:6c:80:a9:40:7d:9d:
2e:a3:1e:02:98:6a:0f:99:e3:9f:2f:67:0a:f9:cb:
a1:af:71:11:2d:3a:5a:ed:75:30:79:41:a5:ba:b6:
cb:99:16:7e:98:14:f3:76:13:31:43:1d:64:71:37:
a7:bd:ce:b1:6a:90:7a:cc:c7:94:bc:26:3d:56:29:
3f:c9:33:08:95:2a:10:99:63:ca:90:6a:1e:24:a3:
5a:29:b7:22:98:e8:e7:8d:82:f7:ae:3c:ac:44:a2:
5a:f3:8a:d1:fb:0e:df:49:ce:07:cf:3b:3d:39:81:
ec:84:33:42:7a:3d:7f:d3:88:30:37:90:6d:83:24:
3a:e1:34:70:2a:3d:07:68:29:1c:c2:71:8c:4c:f4:
58:d6:af:77:8a:65:b6:e7:b0:db:f4:84:ce:3e:47:
66:56:48:3e:c9:ef:fa:03:5a:db:b4:74:0d:19:c5:
da:2e:10:96:4c:4a:d6:4c:7a:e7:78:03:dd:b1:19:
e6:10:11:d7:83:a1:58:20:4a:ff:e8:a5:6a:5a:12:
63:51:ad:79:d3:4d:33:96:62:15:be:9b:2e:2c:c6:
09:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:38:E3:C2:DB:E9:25:35:7A:3B:02:2F:28:0B:79:DA:02:DF:FC:6F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QjjjwtvpJTV6OwIvKAt52gLf_G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:d6:58:8b:7f:fe:0e:b4:77:b6:46:87:04:99:d3:be:fa:4e:
2e:dc:2a:e2:6e:19:d0:2f:6c:5f:91:ed:af:f4:ad:ce:cd:d3:
de:09:11:39:ec:d2:a3:36:5c:da:5f:b9:78:bb:fd:e2:a8:aa:
f1:83:c9:d4:6d:db:f1:93:c8:7c:38:c1:f6:ab:ae:fd:2b:df:
fd:02:04:38:02:4e:9a:bd:22:f0:de:ad:84:ae:47:84:c2:b9:
10:f7:fc:54:7d:98:09:32:02:5a:57:67:82:2d:a5:d5:a2:23:
21:75:16:ad:cb:96:94:c4:b6:96:83:5e:3e:97:38:ef:d2:b2:
a8:b5:5a:da:12:4e:77:3e:a9:6b:4f:46:f5:fe:8a:86:92:dd:
14:cc:76:9e:c4:37:0f:28:b6:c1:bc:a0:ed:80:f9:f8:fb:a6:
12:a4:cd:19:22:c9:5e:8f:a1:78:8c:b3:bf:37:a0:3a:0f:04:
1c:a0:55:c4:51:d0:fc:43:d0:03:2e:a1:5b:e6:c2:f2:1b:7f:
24:1c:e3:41:fc:17:48:6e:0a:b4:f5:f8:8f:d4:8a:da:a1:30:
1e:e4:55:ec:2c:09:69:e9:71:a2:07:59:cf:6b:af:92:85:eb:
0b:a3:56:0a:28:7a:ab:ac:83:56:a2:fe:74:52:9d:d9:5e:47:
b9:8f:e7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:17:25 2025 by rpki-client