Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QrsxRguBxRzW5HPNn-GsfCn1Ieo.roa
File: QrsxRguBxRzW5HPNn-GsfCn1Ieo.roa (raw, json)
Hash identifier: ZcZLuBA53CYQRYe7b26FV5iFXVAhnzejcKyTZSXOiR8=
Subject key identifier: 42:BB:31:46:0B:81:C5:1C:D6:E4:73:CD:9F:E1:AC:7C:29:F5:21:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01840785606CC53562D7A64D656D693C6CE8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QrsxRguBxRzW5HPNn-GsfCn1Ieo.roa
Signing time: Mon 24 Oct 2022 01:04:52 +0000
ROA not before: Mon 24 Oct 2022 01:04:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:784:f6c7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:07:85:60:6c:c5:35:62:d7:a6:4d:65:6d:69:3c:6c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 24 01:04:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42bb31460b81c51cd6e473cd9fe1ac7c29f521ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:af:2c:88:4f:ea:0b:86:41:4f:3b:b0:a9:89:
65:64:1e:f8:5a:42:c4:cb:86:6b:c9:a4:29:d1:6d:
9a:61:b7:77:d5:31:0d:ed:78:8e:83:e4:51:90:6a:
09:3b:32:25:59:a6:21:b3:19:9e:2b:0f:a0:68:35:
41:8b:48:39:fc:ef:57:d4:70:a0:18:9c:56:c8:7a:
b7:ce:59:92:92:e8:d1:17:8a:ed:99:e0:61:2e:4b:
d8:61:cd:c2:1b:8b:31:9c:96:fc:49:1e:a4:5e:b4:
78:94:a7:e2:8d:ad:fb:0b:8f:ac:72:c4:e6:47:03:
3c:1b:ad:29:a3:17:44:85:c8:c7:36:0c:20:e4:3e:
ab:0c:4d:1e:f7:05:25:fc:1a:49:0e:fc:d7:5a:66:
b1:2e:1f:9a:f6:ad:d4:d4:cf:ed:51:17:2a:c2:7a:
ce:a0:cf:3a:da:4d:52:58:47:31:70:fe:f0:f1:84:
c8:31:90:e8:7d:21:3b:58:8b:2e:19:03:73:2b:38:
8e:3d:e4:77:41:ed:89:0d:95:82:cc:93:2a:eb:82:
6c:6b:90:29:5b:20:fa:47:cc:df:7d:e5:9b:e3:16:
92:fd:07:f2:18:0d:c4:b7:2c:09:dc:bf:3f:cf:74:
0d:73:91:e0:ff:68:96:b4:c3:36:2a:f2:41:d9:8a:
ac:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BB:31:46:0B:81:C5:1C:D6:E4:73:CD:9F:E1:AC:7C:29:F5:21:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QrsxRguBxRzW5HPNn-GsfCn1Ieo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:59:1a:22:11:14:10:29:c7:53:48:ee:dd:10:4e:a9:bd:9e:
01:a8:ce:c5:7b:69:62:a7:4d:9b:5e:18:5f:84:2b:0f:86:1b:
7e:42:5b:68:5d:e5:73:f1:4c:ca:3f:00:8a:e1:7b:15:b3:f5:
a6:4b:15:22:40:4a:d2:be:56:e2:08:ff:53:a9:24:bb:4f:5c:
1b:ce:1a:33:84:4c:ef:fb:d5:17:67:06:23:84:9e:0f:6e:9a:
bd:d6:01:d5:64:ec:9f:bd:42:ba:0e:35:fc:79:1a:9c:e7:a4:
ff:91:1a:3e:ba:2c:c2:38:bc:da:63:e1:4f:37:9f:a6:a6:0c:
f4:61:ac:98:4e:de:df:50:cd:d5:a3:0a:7c:a5:27:6a:60:2e:
b1:0a:cc:64:98:e7:ac:df:05:c2:6d:7a:93:65:f1:b7:99:89:
74:e6:cb:65:19:d0:1e:56:a8:e5:a8:21:fb:3b:8d:b0:c8:c6:
46:44:9a:b1:2e:a7:66:d2:0f:a4:b2:59:82:01:b7:42:c0:c4:
a2:e7:6f:c1:ad:b9:5d:4d:86:fa:f8:ef:22:2e:a5:eb:e9:b5:
ea:e0:14:a7:5e:80:e2:53:b6:a2:a9:14:08:74:7a:e5:6a:33:
ac:a9:f3:3b:f7:8e:a3:77:0d:7d:d1:0f:ac:79:b9:e6:d8:8f:
b8:dc:d9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:48:12 2025 by rpki-client