Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pqJDw951yNjgLGvnhJZMh2R290Y.roa
File: pqJDw951yNjgLGvnhJZMh2R290Y.roa (raw, json)
Hash identifier: S0rNwLiF4/hBF1xbGOXjj8soaEC088rsjc5QLJFOOVI=
Subject key identifier: A6:A2:43:C3:DE:75:C8:D8:E0:2C:6B:E7:84:96:4C:87:64:76:F7:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 707B667E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pqJDw951yNjgLGvnhJZMh2R290Y.roa
Signing time: Mon 07 Mar 2022 12:10:33 +0000
ROA not before: Mon 07 Mar 2022 12:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1887135358 (0x707b667e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 12:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6a243c3de75c8d8e02c6be784964c876476f746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:3c:de:e2:d1:d8:fa:5d:0b:e6:e2:3e:63:
42:b3:2a:c7:86:e9:08:df:27:47:96:cd:aa:91:82:
8c:4d:42:55:6e:7c:1f:9a:af:be:54:35:ce:c1:05:
70:2b:97:c9:8d:37:b0:02:e1:64:90:16:4c:7f:91:
96:61:74:09:e0:f8:d0:e1:32:ea:dd:04:d1:c1:eb:
87:3f:09:b2:18:b1:c0:39:a8:47:bb:36:25:47:b6:
18:4c:85:00:34:45:b7:69:29:0b:fa:6f:45:98:1f:
c1:e3:4f:3e:e4:2c:f2:c6:47:f5:30:ac:d6:7f:24:
88:a2:a5:52:e2:e7:32:8d:77:33:da:83:0a:e0:a6:
d1:da:90:ca:56:9e:29:ff:f1:85:fa:8c:c8:5f:64:
c3:f9:86:8d:90:bf:fb:d1:3b:ad:47:59:0f:45:80:
79:c6:cd:b5:9e:2a:69:94:2a:78:4e:2c:87:78:29:
40:52:eb:b4:00:12:53:66:98:fb:58:ea:d3:82:80:
be:64:d8:17:b2:1a:88:30:fb:ae:a5:7c:59:32:21:
18:fa:0d:dc:98:15:74:06:50:ea:84:31:7b:02:b4:
dd:9d:7b:2f:f8:9c:45:c3:e5:0b:78:c0:d8:52:82:
50:f3:4f:4b:8c:72:a3:ad:69:3e:fb:e4:05:65:39:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A2:43:C3:DE:75:C8:D8:E0:2C:6B:E7:84:96:4C:87:64:76:F7:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pqJDw951yNjgLGvnhJZMh2R290Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:39:b2:57:6e:f6:3e:d4:72:00:04:40:ad:ac:a2:f6:94:68:
ee:51:7f:df:69:a9:91:45:95:c7:6d:d0:01:50:0a:2e:38:72:
ce:96:ce:ea:4d:47:39:59:94:59:25:2e:b7:7b:a8:02:fa:d2:
b7:20:a4:95:dc:7e:6e:81:9d:58:52:dd:92:bd:38:1c:49:7c:
a0:96:f2:24:12:83:e0:e5:b2:6a:84:ac:ed:e3:e6:77:fe:a2:
b0:1e:b8:8e:43:cc:77:54:24:b2:26:8e:5e:ef:a0:da:b4:5d:
8b:a7:3b:19:7a:bf:5b:d2:88:b3:76:e3:b0:49:52:0f:21:ad:
72:af:7a:44:04:0c:2d:22:0a:ac:f7:f3:d1:70:de:e5:fc:f2:
52:1b:44:97:d1:16:e1:31:13:7d:29:0a:4f:fc:3e:fd:6e:94:
cf:7a:f3:05:99:bc:9c:3c:77:ac:d4:16:92:18:d9:16:97:a5:
b4:fd:7d:ed:66:fb:4f:45:af:9d:ba:79:c6:8e:10:86:d3:c8:
bc:90:29:ef:c9:f7:ce:a1:de:be:eb:e2:de:7d:7d:b3:02:20:
b0:c3:81:3c:0d:5c:fb:ce:d1:0e:ef:aa:94:b9:83:91:93:ba:
50:c9:b5:e4:5d:b0:77:28:b6:53:52:5a:03:35:c1:0e:78:26:
28:19:69:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:26:55 2025 by rpki-client