Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QsxAz-2ZJiMkD4A599lNVJbF4jU.roa
File: QsxAz-2ZJiMkD4A599lNVJbF4jU.roa (raw, json)
Hash identifier: /PyFZISQpjPNALnZtv7Q0VI/3Sflo19cUxI0R7Dbmzs=
Subject key identifier: 42:CC:40:CF:ED:99:26:23:24:0F:80:39:F7:D9:4D:54:96:C5:E2:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7AD6194E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QsxAz-2ZJiMkD4A599lNVJbF4jU.roa
Signing time: Wed 13 Apr 2022 03:12:24 +0000
ROA not before: Wed 13 Apr 2022 03:12:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2060851534 (0x7ad6194e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 03:12:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42cc40cfed992623240f8039f7d94d5496c5e235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:cc:8e:d8:75:74:9a:6e:ae:02:02:46:ed:
10:47:ff:28:33:56:21:f4:c7:bc:c3:2c:79:c3:48:
47:57:29:48:b3:71:68:52:fc:54:6b:b8:67:08:4b:
c0:f1:ec:a9:1a:48:15:7e:4b:55:2a:47:3a:76:f6:
e9:7f:46:da:1f:ea:e5:98:5f:ca:f4:3f:e1:0c:e1:
fc:2a:c7:8b:52:2e:be:4a:14:c3:3c:08:77:d0:59:
30:e9:f0:ab:4a:66:7a:11:74:eb:69:ef:64:f3:38:
b7:c3:ac:12:fc:4b:93:3f:0f:01:b9:74:b4:67:55:
f1:ae:21:fb:b6:c7:53:43:5e:41:7a:bc:c3:8f:c8:
61:d7:1e:c0:18:d1:30:23:bc:93:81:46:5e:d3:be:
7f:50:3d:cc:ff:ee:cf:d3:f2:a5:ab:2b:89:bb:1f:
3c:22:b8:0a:ff:16:3d:3c:b1:65:c2:50:17:0f:0b:
5a:dc:18:74:22:dc:1b:82:13:57:b3:1d:3f:c2:a2:
e8:61:5b:cb:f3:db:74:11:c5:a5:06:7d:83:38:b1:
eb:7c:05:bc:16:9f:d0:58:ac:95:06:b3:31:a9:fe:
62:37:e8:da:41:be:ec:a3:e4:b4:94:c5:82:bb:4f:
69:df:97:b0:b0:af:b0:b2:48:37:2c:26:b9:64:ea:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CC:40:CF:ED:99:26:23:24:0F:80:39:F7:D9:4D:54:96:C5:E2:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QsxAz-2ZJiMkD4A599lNVJbF4jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:05:42:8a:76:f0:29:b4:49:9f:92:87:c6:b3:47:46:2a:7a:
2e:4d:83:34:45:9c:f0:7a:16:e1:62:35:58:e6:30:1c:01:3b:
78:a4:2a:9e:31:b6:31:53:3f:9e:ee:ca:d1:98:32:e6:f0:9b:
12:24:40:50:84:1a:ae:00:c2:8e:ce:02:a4:a3:1b:88:70:5e:
8a:9d:38:71:fb:63:b2:7f:03:c7:87:94:44:ef:44:c6:ad:9e:
6d:ae:12:cd:e2:24:c6:c2:4c:d3:7a:69:da:52:d4:05:d0:a1:
bb:96:69:0d:7a:6b:77:83:f5:d0:bd:33:ac:ce:3e:8f:7d:4d:
d1:fc:39:c2:83:d9:c1:b1:1d:b6:27:c4:86:d3:9e:9f:be:89:
b1:39:90:51:61:6d:f4:47:99:50:25:d5:d1:4d:5d:50:80:3c:
32:b9:0f:a0:01:d0:a4:7d:d3:f2:f3:ff:da:54:18:50:22:c2:
0d:9f:24:03:3a:58:16:13:a3:b6:d7:55:b9:0b:29:24:d6:e3:
f3:45:11:30:a6:8b:8e:9a:17:66:52:67:b3:a3:ac:a4:70:00:
d3:87:f0:3a:48:73:21:3a:6c:f9:13:37:23:ae:53:8c:4b:f6:
89:e7:7c:4d:70:6f:c8:13:3d:7e:fc:67:00:a0:96:d4:05:10:
34:f0:98:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:29:22 2025 by rpki-client