Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qPmlX4JVYxNWpV8OwOdBRkXvRE0.roa
File: qPmlX4JVYxNWpV8OwOdBRkXvRE0.roa (raw, json)
Hash identifier: rY96VjSsHsP/vi87TauH6ydEgdQ4/oq7f3P14JPOVAY=
Subject key identifier: A8:F9:A5:5F:82:55:63:13:56:A5:5F:0E:C0:E7:41:46:45:EF:44:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 77D7B448
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qPmlX4JVYxNWpV8OwOdBRkXvRE0.roa
Signing time: Sat 02 Apr 2022 18:10:37 +0000
ROA not before: Sat 02 Apr 2022 18:10:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2010625096 (0x77d7b448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 18:10:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8f9a55f8255631356a55f0ec0e7414645ef444d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:c5:cd:b3:c2:8d:16:6b:bc:9e:26:56:b4:
03:50:47:40:8a:21:ce:61:5b:8a:1e:d3:56:85:7b:
03:4e:69:ac:15:c9:9d:f3:e8:c7:68:6e:8a:a8:ad:
62:2e:c0:47:6b:e9:4e:ca:62:80:1d:b2:00:d7:5d:
3e:a3:63:ee:31:eb:7c:f0:ce:97:29:20:f6:c8:df:
e4:2b:ef:40:de:9b:02:c5:25:1c:82:d2:e3:23:a5:
59:b1:8c:d3:05:a6:49:5a:db:40:ef:66:77:6e:cf:
f9:b0:41:1d:3f:a4:c0:d8:8e:a2:05:da:f5:b5:27:
aa:56:0f:29:b6:51:8c:30:a7:eb:20:07:65:1c:0c:
58:12:48:f4:b5:da:4f:8d:f9:b5:bf:bc:3d:ff:bb:
72:87:f0:a1:a9:e2:b3:fa:4f:18:4f:23:92:cb:ef:
65:ff:5b:ed:30:f1:55:53:61:90:6e:b6:7f:5e:62:
e0:6b:c5:d6:e1:8f:e0:30:2d:a8:8e:36:b2:ad:d2:
78:6a:a8:6d:b6:a1:89:cf:9e:bc:e7:1c:e3:f4:c7:
71:04:25:bb:91:bd:95:9e:3a:9c:c9:08:c1:fa:a1:
79:3d:2d:c6:cf:9a:0b:08:ac:78:0d:1d:96:0c:f2:
0e:72:6d:ba:a6:78:3a:80:c2:df:42:46:c2:b3:35:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F9:A5:5F:82:55:63:13:56:A5:5F:0E:C0:E7:41:46:45:EF:44:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qPmlX4JVYxNWpV8OwOdBRkXvRE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:0e:c9:ce:e1:46:89:3f:82:9a:e0:18:28:97:63:81:0c:ff:
4a:0b:27:07:72:8e:fe:61:31:fe:52:5c:26:98:15:c9:33:a2:
49:44:3b:57:89:b1:9d:a9:40:8d:ee:3c:37:d7:13:af:21:86:
e9:7a:a9:b2:c6:25:84:0f:e7:dc:88:75:e4:79:90:71:49:f2:
01:a8:2d:82:10:8a:f9:67:3c:98:6c:c5:32:fc:fd:da:c7:c5:
23:47:39:3e:fe:41:87:dd:48:0b:71:f1:4e:80:6c:42:9c:60:
c8:cf:0d:1d:2b:62:99:20:96:00:01:2f:72:80:0d:de:85:9f:
be:30:8e:17:48:bf:73:e0:0d:43:b3:7c:08:10:1f:70:87:3c:
f2:71:db:88:f4:4b:b0:d2:bc:57:c6:6f:10:99:52:ff:8e:61:
6a:e9:75:b0:c4:06:f0:25:9d:84:a7:c8:c5:94:bc:99:74:ac:
09:31:1b:63:98:11:3a:89:f8:a0:b3:da:f3:56:c4:6d:46:c7:
87:b7:d1:a7:0f:70:37:f6:15:39:a2:4d:d7:19:93:75:76:8e:
b4:41:48:47:6e:21:ec:5c:67:80:ac:39:a6:ea:30:c3:e0:30:
f3:5f:8d:0a:1f:60:0d:c0:0d:6e:b9:d5:d7:fa:c9:3c:28:45:
21:e7:52:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:50 2025 by rpki-client