Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dqJ9lg6gJ1gOjGC1mJstTURL7Wk.roa
File: dqJ9lg6gJ1gOjGC1mJstTURL7Wk.roa (raw, json)
Hash identifier: 3EbmJZxGeNqSIG27YZsAq3CJb/JG47VoCNsokv398kw=
Subject key identifier: 76:A2:7D:96:0E:A0:27:58:0E:8C:60:B5:98:9B:2D:4D:44:4B:ED:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 82E68606
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dqJ9lg6gJ1gOjGC1mJstTURL7Wk.roa
Signing time: Tue 10 May 2022 21:14:02 +0000
ROA not before: Tue 10 May 2022 21:14:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2196145670 (0x82e68606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 10 21:14:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76a27d960ea027580e8c60b5989b2d4d444bed69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:3a:59:f0:3e:a7:74:4b:8f:a7:eb:0c:f2:
ac:d4:2a:32:24:a2:ed:21:90:ce:c0:c5:94:c4:2c:
50:e2:c7:34:3c:2b:62:dd:d6:af:39:d4:db:19:51:
d2:51:ca:dc:bb:c3:9a:52:c8:d0:b5:dd:e9:61:2e:
86:2f:6a:50:f4:1c:08:87:0c:8f:80:32:4f:97:56:
44:7f:17:41:3f:b9:f8:cc:e4:0b:7d:2d:eb:b9:cd:
1c:27:0f:6f:76:2b:a3:88:22:90:64:67:3a:e4:cf:
2c:ab:61:7a:d8:da:83:54:66:c8:22:48:b7:37:ff:
45:05:ec:65:50:ee:24:dc:2e:e5:72:9a:f0:56:cd:
2b:53:ff:e4:b1:92:f6:75:b6:84:0a:e6:86:6c:5c:
58:8d:1a:6e:7e:9a:81:78:ce:14:dd:01:c4:99:a4:
c0:db:f3:8e:bd:79:2b:25:5a:2a:12:09:17:22:b3:
e7:0b:bb:a3:f1:f9:d4:1a:14:72:dd:15:c0:b6:e4:
47:00:21:da:c2:98:d1:f2:39:4e:24:bb:44:81:47:
20:a8:12:1b:ae:09:4b:13:eb:e9:0a:7c:64:27:7c:
02:92:8f:7d:11:55:b1:b9:e7:60:71:7b:55:00:7e:
25:36:2f:2e:8a:05:72:cb:67:10:98:23:6d:61:58:
d0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A2:7D:96:0E:A0:27:58:0E:8C:60:B5:98:9B:2D:4D:44:4B:ED:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dqJ9lg6gJ1gOjGC1mJstTURL7Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:11:11:2d:e5:57:5a:0f:2a:2a:7c:8f:66:3b:69:b4:7c:41:
ae:b7:87:83:3f:63:a1:19:b5:61:de:9e:2f:b0:f7:27:a9:6e:
42:3b:b7:69:73:65:46:66:d9:82:b3:fa:62:82:cf:67:25:47:
7f:73:33:ee:5a:08:4c:5b:9c:40:d1:f7:74:15:9c:5a:82:69:
7a:1c:b6:85:36:c6:b8:d1:8e:26:73:a8:4f:0e:8f:c2:f5:b5:
9c:95:66:00:0a:20:05:6c:69:30:d6:f1:5a:65:af:55:ee:f4:
05:99:91:69:ca:6f:cc:e6:1f:19:37:eb:9a:b4:04:6e:84:ba:
6e:d8:64:23:b5:2b:13:26:92:92:a7:76:a6:75:e4:ae:fc:98:
e1:12:ef:6f:ca:dd:62:40:00:fe:bb:a4:d9:4a:b3:d4:50:1d:
c3:cb:ea:70:01:2c:ec:cf:f0:97:4d:1c:0b:40:18:a7:48:17:
09:9f:97:f9:43:09:df:84:c4:6f:d3:7d:ae:8f:6c:9d:89:ed:
3f:a4:2b:b8:92:14:16:83:06:2b:10:37:0f:86:a6:93:78:ef:
e5:4e:26:61:e2:ab:17:87:2b:72:26:0f:57:c2:b2:01:f0:83:
9e:fc:02:4b:37:8a:ea:2e:75:e8:ac:2b:c6:db:4b:05:64:34:
06:7e:92:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 17:59:59 2025 by rpki-client