Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qCfvDfuJFXGOaU1nwh4-b0t1UBc.roa
File: qCfvDfuJFXGOaU1nwh4-b0t1UBc.roa (raw, json)
Hash identifier: 8t0aKHl49oUTs/gzBgMHUiH20OpBLRQDwQzlZWhChwk=
Subject key identifier: A8:27:EF:0D:FB:89:15:71:8E:69:4D:67:C2:1E:3E:6F:4B:75:50:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181EEE2333327D9A1A20D08DA5D2C693C3D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qCfvDfuJFXGOaU1nwh4-b0t1UBc.roa
Signing time: Mon 11 Jul 2022 20:10:10 +0000
ROA not before: Mon 11 Jul 2022 20:10:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ee:e2:33:33:27:d9:a1:a2:0d:08:da:5d:2c:69:3c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 20:10:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a827ef0dfb8915718e694d67c21e3e6f4b755017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:af:02:dd:83:58:d2:47:31:9c:ef:47:16:
17:ca:e3:8c:45:7c:fb:ff:5b:46:c5:de:94:94:88:
fc:43:b9:b0:e1:61:5c:33:e8:47:1a:8e:26:16:a3:
e1:c6:92:45:eb:04:91:52:3c:2a:0a:29:df:dd:7e:
65:bd:85:b1:70:02:85:9c:f2:f7:f0:2b:b4:85:40:
f1:e6:37:5b:65:49:33:28:e7:e2:04:cb:8f:7f:34:
96:88:e4:ae:24:f2:56:ba:fd:5a:5e:d0:99:b4:a3:
36:8f:12:19:e8:d9:c2:49:00:31:fd:6f:8f:43:20:
65:fb:2f:4a:da:c0:53:86:5f:7a:d9:ae:5c:ec:63:
ac:cf:12:79:97:c8:f3:7a:96:a5:65:65:9b:03:52:
6f:dd:87:5c:83:5f:54:8c:84:5c:1d:6c:e3:e7:28:
d3:e3:75:48:42:39:4f:4b:83:29:78:54:af:f6:e3:
0c:04:13:62:75:cc:58:64:84:48:3f:8c:0e:45:19:
15:93:eb:38:7c:cb:2b:92:8b:b6:b6:d4:a0:a9:7e:
c4:d0:23:84:d3:09:60:f6:87:c3:64:2b:b1:4b:8c:
68:28:b8:01:4b:a7:a1:49:ea:6b:6f:98:9d:59:27:
0e:ce:4d:d1:5d:c6:5e:13:77:5d:79:36:7e:8c:03:
a7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:27:EF:0D:FB:89:15:71:8E:69:4D:67:C2:1E:3E:6F:4B:75:50:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qCfvDfuJFXGOaU1nwh4-b0t1UBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:33:03:b0:00:6d:b3:5a:4e:72:19:c3:7d:d4:57:cc:72:73:
53:62:ea:8f:74:c5:53:a7:4b:78:20:e1:24:dc:c7:48:c0:65:
4d:67:81:76:94:d0:87:6b:ad:47:54:78:d6:1c:37:34:15:ce:
00:43:03:8e:8a:7e:d4:b7:ba:54:65:1c:d3:9b:3f:94:04:cd:
f6:29:b2:ea:45:a7:98:74:42:04:18:0d:6f:a1:30:1f:a3:b5:
b7:d5:58:72:37:ad:ba:86:99:0d:bb:a1:cb:09:20:c8:cb:3d:
2c:c5:b5:15:c8:1f:24:54:9c:fe:54:70:e1:ae:fb:33:39:81:
0a:c8:41:15:6f:19:95:c0:3e:5d:07:de:4b:ee:70:75:5b:5b:
ae:12:27:ed:b5:07:d4:c8:ff:8d:fe:4b:81:9c:ba:de:b6:4a:
d7:d7:4e:30:cf:d7:59:7f:53:d2:95:13:88:02:dc:fc:e7:1c:
19:e0:c2:67:10:d6:3a:72:51:dd:db:d5:c7:f6:f3:b9:02:6d:
bd:24:ee:58:3f:83:04:f6:1e:b7:5c:ae:84:cf:b2:fd:e7:75:
53:8b:6f:8f:ff:17:bb:36:5e:69:e6:07:74:f5:e8:dc:45:4f:
4c:42:2a:57:79:24:22:f4:73:06:a1:e8:19:cf:03:06:55:8f:
b6:aa:e4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:53:19 2025 by rpki-client