Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pQTe1J9L-f5Km8ihpGGTDow-wq0.roa
File: pQTe1J9L-f5Km8ihpGGTDow-wq0.roa (raw, json)
Hash identifier: NR1Hp8UuQ3Ofb1InngfFAYOkQf83BjBcLOy1sxZYOXc=
Subject key identifier: A5:04:DE:D4:9F:4B:F9:FE:4A:9B:C8:A1:A4:61:93:0E:8C:3E:C2:AD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DD41861285D3F8307F448BEEC4EB6F7C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pQTe1J9L-f5Km8ihpGGTDow-wq0.roa
Signing time: Sun 04 Dec 2022 13:09:29 +0000
ROA not before: Sun 04 Dec 2022 13:09:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dd:41:86:12:85:d3:f8:30:7f:44:8b:ee:c4:eb:6f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 4 13:09:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a504ded49f4bf9fe4a9bc8a1a461930e8c3ec2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:13:38:64:8e:d6:98:19:ba:17:eb:d9:63:
72:02:2c:dc:90:82:2d:37:47:7c:16:02:9e:e1:c3:
ef:69:c1:de:b5:6a:00:81:3f:45:64:51:49:27:4d:
c5:73:ce:51:18:00:e1:33:a8:e9:0e:d6:0e:16:57:
d6:c5:30:bc:7e:7d:d1:ca:81:a0:ff:0a:38:96:ba:
7e:17:9a:cf:89:40:9e:e6:6c:51:0c:2a:79:a5:b3:
4c:f4:15:2d:97:94:cb:65:ef:65:20:2d:17:06:11:
b1:fb:fc:ae:27:17:f2:64:4a:0a:d0:7c:ac:a1:35:
15:2e:fc:9d:02:a6:12:60:ef:81:9c:8e:85:5d:93:
50:57:19:4b:64:8a:e9:d5:11:aa:1e:96:71:8c:34:
10:ca:aa:53:1e:5a:4e:9a:81:9d:b6:88:9f:08:11:
4d:a7:74:7b:a8:b1:eb:32:3c:de:f8:54:d3:9e:1b:
56:b4:eb:69:44:32:aa:fa:b0:31:f7:14:86:90:32:
df:71:1a:39:92:53:52:43:2d:00:e9:85:b1:b6:80:
41:24:8e:43:c2:a1:4d:2b:b9:cf:a0:92:66:bb:7e:
97:6b:5a:c2:62:81:be:ae:65:df:67:ff:f2:c5:23:
8e:ae:56:f4:69:d6:0d:5e:71:4d:18:c4:50:4a:57:
32:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:04:DE:D4:9F:4B:F9:FE:4A:9B:C8:A1:A4:61:93:0E:8C:3E:C2:AD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pQTe1J9L-f5Km8ihpGGTDow-wq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:da:e4:c1:04:34:99:8a:72:7a:93:69:8a:d7:4f:6a:d3:8a:
61:68:46:39:54:2e:a7:6c:d8:83:97:22:45:2b:7c:1a:4e:64:
28:c0:b9:00:c1:e3:4a:11:5e:41:46:5c:3f:08:ec:4b:e3:cf:
32:a9:ea:19:c4:cd:11:b3:01:14:77:5d:f2:74:4f:b7:7d:11:
67:25:79:f1:cf:0e:9b:d1:21:b3:3f:07:06:c4:8e:48:36:b0:
69:3c:de:e4:92:6e:4d:78:58:d8:af:d5:55:c3:31:4c:33:aa:
c9:6c:3d:5e:8a:eb:8d:26:fb:d5:03:a5:2a:68:6a:d3:a2:08:
d1:5a:8b:ea:d9:49:b8:a1:6a:95:2b:9f:86:e0:a2:8b:37:30:
e1:7c:2f:8c:da:b7:cd:d0:e9:4d:d3:60:73:ac:84:fd:40:3f:
b7:f5:6b:92:5f:02:d9:77:c2:33:81:55:e9:ee:f4:35:98:97:
00:40:f5:d3:40:b9:80:82:83:62:a5:30:f0:99:93:43:e3:6f:
26:77:b7:dc:a4:9a:d2:42:00:53:0f:74:b8:1d:18:c2:5a:3a:
99:d6:df:07:6b:70:da:7b:bc:c3:9a:db:d0:9d:b3:ad:fd:e3:
5f:d6:2a:43:ab:bf:1e:dc:c0:73:3c:17:77:e1:55:21:91:8a:
6e:72:ee:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:23:32 2025 by rpki-client