Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qJoyyXfARz89Xk0FhvQ-Y66MxuE.roa
File: qJoyyXfARz89Xk0FhvQ-Y66MxuE.roa (raw, json)
Hash identifier: zdPn8IcRLLVEgklKlyYzK04VzkXKvVZUwxdTDk6At9s=
Subject key identifier: A8:9A:32:C9:77:C0:47:3F:3D:5E:4D:05:86:F4:3E:63:AE:8C:C6:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854C3073CA77363D2A1375EBC7C10A2CFC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qJoyyXfARz89Xk0FhvQ-Y66MxuE.roa
Signing time: Mon 26 Dec 2022 02:08:41 +0000
ROA not before: Mon 26 Dec 2022 02:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4c:30:73:ca:77:36:3d:2a:13:75:eb:c7:c1:0a:2c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 02:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a89a32c977c0473f3d5e4d0586f43e63ae8cc6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:e8:ec:04:01:3e:94:6c:4b:e0:56:a8:4b:
e3:f2:c4:2a:41:f9:d3:d5:d7:e9:96:d0:db:06:3d:
df:c3:51:07:81:03:82:1c:c9:d6:e1:46:40:7a:eb:
db:b7:08:72:26:eb:b2:9c:d7:bf:9f:5b:05:f0:86:
ea:76:e5:be:c4:3d:e6:6f:96:30:80:1e:29:23:71:
7e:eb:3b:93:bd:07:74:30:c3:24:0a:ec:67:f7:b4:
58:5a:ac:94:90:8d:a4:fd:87:8a:d3:cb:b7:32:85:
23:c5:30:d7:0d:86:9d:d8:88:bc:df:85:a3:90:d6:
0c:3e:30:ca:ba:21:df:7d:70:d8:2c:8f:9f:13:17:
10:ee:d7:4d:83:7a:76:f9:9b:a7:d1:80:90:48:4a:
46:a7:e1:d5:bd:ea:fb:1c:86:e4:66:f5:59:34:bf:
c6:6f:75:e9:46:84:d1:bd:24:6b:c6:1e:16:54:2a:
9a:96:79:a7:4a:f9:96:35:39:df:f7:37:71:f6:84:
aa:d5:c4:16:4e:4e:cf:3d:1b:d2:20:54:cd:b4:b9:
27:93:14:dc:f2:1f:89:8c:43:d3:90:f0:09:d8:c2:
80:0c:7b:9a:3d:5f:ab:50:d8:c0:d2:b8:75:39:03:
8f:ac:d0:b6:07:f2:d9:fd:7f:f8:1e:c4:ca:f0:6c:
90:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9A:32:C9:77:C0:47:3F:3D:5E:4D:05:86:F4:3E:63:AE:8C:C6:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qJoyyXfARz89Xk0FhvQ-Y66MxuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:8e:a0:4b:95:f1:1a:fc:fb:34:bd:64:85:8a:fa:88:07:23:
65:79:b6:27:b4:f5:11:ad:6e:2d:6b:c6:b4:36:fc:de:f1:ad:
a4:88:49:6a:cf:c2:01:fb:9a:84:75:08:da:76:4a:47:57:c7:
60:b6:d5:b0:c3:65:eb:b8:78:bb:bf:85:52:a9:b2:19:99:23:
e1:29:a9:48:70:64:80:49:b6:9b:fe:df:8c:6a:51:63:17:20:
fe:d9:35:aa:3e:b1:72:51:32:cc:c4:e4:b5:d9:54:55:1e:b4:
a9:30:2d:bf:09:24:28:83:f1:11:85:6e:61:11:60:5b:a9:ed:
b8:52:c9:b2:b6:53:cb:81:e8:eb:43:50:cb:78:41:28:6b:67:
49:8a:81:82:5c:a5:2b:09:ab:e0:1c:7e:c3:3a:3d:91:69:25:
80:bd:9b:98:2f:a4:c6:8c:c9:03:dc:08:c5:44:d6:22:ff:e2:
0b:a7:a0:69:67:3e:2f:91:41:92:2d:60:b7:a3:b6:aa:61:ae:
a8:7a:7f:2b:86:44:3f:5c:46:12:df:d3:e6:12:f0:d4:d3:3f:
91:9f:60:1b:9c:50:27:f2:d0:bc:20:be:be:50:9f:5d:29:f6:
7e:48:48:ea:47:37:9d:5b:94:ac:bc:2d:d1:c6:7f:f2:0f:ca:
22:3f:23:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 11:41:43 2025 by rpki-client