Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qdAYRHLMyGg1D55ov7NiTVBRUuk.roa
File: qdAYRHLMyGg1D55ov7NiTVBRUuk.roa (raw, json)
Hash identifier: +sVAvEj3lFERESuQnu+dbzIhNYy5VAlu4lVwtzYQhwc=
Subject key identifier: A9:D0:18:44:72:CC:C8:68:35:0F:9E:68:BF:B3:62:4D:50:51:52:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018407FB7AACE76BF1E3075480E5DF30B125
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qdAYRHLMyGg1D55ov7NiTVBRUuk.roa
Signing time: Mon 24 Oct 2022 03:13:52 +0000
ROA not before: Mon 24 Oct 2022 03:13:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:07:fb:7a:ac:e7:6b:f1:e3:07:54:80:e5:df:30:b1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 24 03:13:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9d0184472ccc868350f9e68bfb3624d505152e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:63:84:85:f8:9f:de:ae:2a:d6:c9:eb:1f:
8c:d0:9f:a1:56:dc:09:6b:25:bf:99:a8:62:2b:3e:
3d:72:1d:78:77:66:8f:07:6d:ba:2d:d5:76:73:b5:
e2:e3:d2:6b:09:81:ee:48:39:84:46:b1:90:e3:1c:
23:1d:62:d6:b5:7b:5d:ef:5f:38:28:e5:13:9b:8d:
f9:3b:38:73:42:bf:68:83:36:e9:34:31:b8:83:ea:
b3:fc:2b:46:3b:5d:ba:be:df:60:a8:f7:20:08:78:
f9:2a:c5:01:61:3e:64:f9:30:59:7d:4f:0b:29:94:
bc:77:63:ff:55:89:81:ac:41:86:05:f1:9c:bb:00:
1c:35:30:87:9c:d3:b3:c2:85:30:16:6d:cb:0e:02:
7f:0c:66:70:c3:66:4e:5a:2c:f8:d9:53:30:25:f1:
d1:04:f4:eb:54:00:89:fe:ed:b7:14:1d:ef:90:c5:
d3:58:6d:f1:dd:6f:3e:ca:94:0b:b7:44:31:94:fb:
0d:82:e0:26:b4:f1:0f:b1:b9:b4:da:bd:4b:f2:74:
94:d4:86:af:52:1d:75:03:29:62:4f:b2:5d:54:a8:
62:9e:69:0a:9b:48:07:9e:31:f6:e6:02:e2:18:a6:
6c:e3:c1:92:7f:79:47:e0:df:4c:ea:10:02:1a:32:
19:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D0:18:44:72:CC:C8:68:35:0F:9E:68:BF:B3:62:4D:50:51:52:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qdAYRHLMyGg1D55ov7NiTVBRUuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:a1:77:99:87:d0:fe:8e:9d:1e:bf:aa:af:95:3f:3a:4d:a0:
75:c6:43:2f:38:67:e8:81:d8:cb:f7:6d:e1:a2:92:ee:56:ab:
8d:e6:54:a3:2c:57:22:e3:95:59:e6:a9:4f:15:31:23:74:b3:
67:e8:01:fd:07:11:a7:59:3b:27:6d:c4:92:05:7a:e8:a9:1f:
15:72:c4:28:27:8f:0e:3c:ea:86:de:04:05:f8:50:ac:3a:ee:
01:1b:e7:0a:a7:0d:39:c4:49:bb:2e:43:05:10:e6:64:52:34:
b6:c3:5b:91:d3:65:91:c9:d3:3b:85:99:9a:4b:c4:a2:98:43:
d2:10:b6:0e:80:46:55:0f:4f:73:06:31:8b:fc:09:f3:20:12:
68:57:7b:55:fa:a3:79:38:6c:cc:01:4a:8a:b1:63:1d:17:f1:
60:9b:50:f8:b6:40:78:95:10:d8:a3:07:a7:e1:e6:de:ad:8c:
02:3f:96:cf:ef:40:23:d3:b1:60:27:63:43:10:6a:de:29:7c:
d8:7f:9d:8d:b5:06:7d:30:27:46:1a:26:be:8b:03:8c:b5:80:
67:6f:86:ea:87:e5:69:e5:77:c4:3c:18:d5:7a:ff:1b:f1:45:
2e:b4:6e:eb:81:2f:01:84:8d:e2:9b:13:fe:d9:56:19:94:95:
d4:59:f3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 17:52:37 2025 by rpki-client