Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QopFeYhUnRS1fA2Qxlxqkcx5ltw.roa
File: QopFeYhUnRS1fA2Qxlxqkcx5ltw.roa (raw, json)
Hash identifier: jvEw3+1cBxiqDI5VUKcy6h3eaDhaBDDSOmbXxRo/gBk=
Subject key identifier: 42:8A:45:79:88:54:9D:14:B5:7C:0D:90:C6:5C:6A:91:CC:79:96:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6AAF177C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QopFeYhUnRS1fA2Qxlxqkcx5ltw.roa
Signing time: Tue 15 Feb 2022 03:04:49 +0000
ROA not before: Tue 15 Feb 2022 03:04:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:fb56:fbcb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1789859708 (0x6aaf177c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 03:04:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=428a457988549d14b57c0d90c65c6a91cc7996dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:2f:d7:55:61:ad:ac:b9:50:9f:c3:54:d8:
65:b9:3b:27:58:8f:fe:ec:de:2b:ef:58:ef:80:80:
a9:d9:5e:38:df:91:f6:01:b9:34:c6:9f:19:e5:3f:
51:3a:d2:04:9b:7d:12:08:88:24:21:f8:8a:d0:81:
23:ad:a5:8b:da:a1:95:6e:c9:04:81:91:02:e7:f4:
bf:1b:5f:5f:34:98:f7:78:ba:dd:13:62:92:29:fe:
95:fd:50:57:97:de:68:d6:3d:e9:7c:8d:0b:d0:da:
2c:34:69:5e:e5:52:78:98:c8:df:a6:f0:de:ea:86:
7d:34:e7:61:6c:ee:00:6e:7b:db:5b:d5:cf:b4:e5:
20:19:10:dc:cd:3a:9c:7e:c7:0f:78:7a:b4:ba:77:
3a:85:ce:ae:56:c9:56:48:f9:e1:c9:cf:26:7d:cc:
51:83:29:03:a0:9e:89:1f:30:c9:24:43:78:de:a0:
20:66:b2:ff:99:b7:28:3e:e0:53:af:60:75:ae:85:
1a:55:f6:e0:c4:f7:3c:4c:f0:c0:46:40:66:9d:23:
42:06:6a:19:2c:3b:91:9c:89:c7:b1:d3:28:69:38:
42:cd:3e:7b:59:31:d0:72:1c:9a:0f:b3:1b:ee:99:
bf:f0:4d:20:ea:5f:9c:2c:d9:29:14:50:6e:e3:d2:
a2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8A:45:79:88:54:9D:14:B5:7C:0D:90:C6:5C:6A:91:CC:79:96:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QopFeYhUnRS1fA2Qxlxqkcx5ltw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:50:dc:dd:20:af:cd:de:7c:c5:9f:77:ee:91:46:e7:f1:35:
fa:60:ef:b0:40:a9:ab:8f:9e:e9:9f:3e:78:9d:98:2d:23:42:
fb:3f:4c:69:c1:21:8f:40:63:0d:b4:d0:87:71:e1:a1:f4:5a:
4a:c7:9b:27:c1:3f:19:1b:c7:53:4d:69:44:74:88:a9:b0:ac:
5f:76:22:ab:24:c9:b0:d5:99:ef:2d:e7:b8:ee:f6:ab:3a:94:
fd:28:36:b5:30:2a:44:60:b3:05:e4:c6:b4:9c:6e:81:96:d1:
f4:94:2f:64:56:e8:78:d3:a4:72:cc:0c:19:96:0c:6b:b3:5c:
40:ee:02:05:92:bb:d0:c6:2b:a9:68:2b:3c:03:6c:49:33:93:
7f:d4:f4:d8:e6:22:63:8d:12:91:1e:e5:af:23:4c:35:ca:12:
de:07:ef:2e:7e:04:69:35:26:da:36:b6:e3:ee:b6:53:75:69:
01:c7:bb:ad:bd:84:3d:0b:00:de:e0:91:17:e8:52:e9:ab:6b:
0a:38:63:5e:88:35:b3:fc:70:c2:c3:03:3f:e9:0c:0c:03:c3:
29:33:db:ce:4d:7b:8a:23:21:df:c7:9f:83:eb:61:fd:de:d4:
64:b8:bb:83:46:46:1a:34:9b:a0:12:a6:0e:1f:22:94:b8:19:
99:6c:1c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:00:26 2025 by rpki-client