Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qT8ucXidcwga9djCahnvFZtttlg.roa
File: qT8ucXidcwga9djCahnvFZtttlg.roa (raw, json)
Hash identifier: HeMqGDHh8iJ6ptK6aNz21wqRBsh9HdUQTKzb3Z8S8wY=
Subject key identifier: A9:3F:2E:71:78:9D:73:08:1A:F5:D8:C2:6A:19:EF:15:9B:6D:B6:58
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018542F74DB586D2D53957F8F91A9D9FBCF5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qT8ucXidcwga9djCahnvFZtttlg.roa
Signing time: Sat 24 Dec 2022 07:09:41 +0000
ROA not before: Sat 24 Dec 2022 07:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:42:f7:4d:b5:86:d2:d5:39:57:f8:f9:1a:9d:9f:bc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 24 07:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a93f2e71789d73081af5d8c26a19ef159b6db658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:fa:83:25:9b:5f:46:0e:5c:c4:94:f7:3a:
3d:d2:7b:08:16:77:82:71:62:37:ea:1c:65:e3:40:
5d:62:d7:08:0c:72:5d:45:ce:18:72:92:04:db:69:
44:fe:a3:12:c2:03:b6:05:f9:de:3a:69:e5:b3:90:
b0:b5:2e:81:64:85:d1:08:51:6a:09:bf:53:50:c7:
bf:c2:1d:df:c1:16:d7:a4:2e:4e:9c:a8:42:dd:63:
8b:c3:63:32:7b:8b:f5:fe:ea:e2:f0:a8:86:a0:48:
4d:1d:0e:01:11:20:23:f6:70:d0:04:d9:5d:c8:7c:
7e:7a:33:90:3b:c0:4b:1b:e2:c9:6c:b8:81:f4:b8:
21:56:06:47:19:93:22:42:24:ce:1f:e3:b6:21:fa:
62:2d:42:64:d6:6f:35:b3:c0:9a:e7:ed:67:b4:8f:
f0:22:5d:e3:40:89:0c:0e:20:1f:bb:10:a0:98:71:
54:fe:7c:5f:13:09:b1:18:d0:99:31:13:02:c1:64:
9b:19:f1:b3:55:d8:d5:9c:28:ae:14:d5:dd:70:58:
78:8f:d4:c9:c1:4e:ee:d2:2f:8f:81:38:45:87:c2:
63:9e:2f:0f:f4:3d:db:66:4b:b4:37:58:d0:33:74:
ec:86:0f:ba:e2:59:78:d5:2e:3c:41:d4:9c:4c:92:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3F:2E:71:78:9D:73:08:1A:F5:D8:C2:6A:19:EF:15:9B:6D:B6:58
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qT8ucXidcwga9djCahnvFZtttlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:b0:13:c8:3f:47:d5:26:2f:ed:43:2e:6e:2c:83:52:93:46:
60:49:01:d1:c8:c4:5b:71:c5:7d:9c:85:37:da:5d:fa:1f:8a:
5a:39:20:5c:45:d8:a4:c3:2b:27:83:94:99:fa:ac:26:1e:8b:
94:e0:ef:8f:b9:9d:de:50:19:af:88:b5:20:ba:bb:33:5b:f4:
06:01:5e:05:f0:67:90:7c:b4:41:12:53:f7:35:81:ce:11:0b:
a6:c7:72:b7:a7:3e:2b:26:07:03:1b:76:d9:8e:f4:e9:0e:31:
c6:6c:7c:47:00:1b:d4:a6:d2:46:b2:10:98:16:6e:72:77:91:
9c:f4:aa:5f:35:39:2f:41:d6:06:54:4f:c8:a5:d3:b4:36:58:
ed:66:71:b3:ac:9b:21:f2:16:e6:49:04:d5:d9:ac:6f:2d:83:
d7:26:19:2e:63:06:5b:d1:38:c6:f2:45:bc:c4:93:75:90:74:
44:e3:ff:48:c7:69:3f:cc:b3:e2:d5:d0:1a:e0:b3:3a:b3:a3:
6a:25:a6:1b:7d:f6:a7:6a:52:fd:47:95:7f:af:cc:b8:63:1c:
f9:45:88:68:db:fe:25:88:11:d3:87:b4:c9:7a:df:36:7b:c0:
be:32:21:b6:ba:3c:12:f2:1a:e6:0e:78:39:1c:09:a1:ac:bc:
0e:03:41:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:08:55 2025 by rpki-client