Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qj0mG7a6rqHBCd9z_sYcnP1JpYs.roa
File: qj0mG7a6rqHBCd9z_sYcnP1JpYs.roa (raw, json)
Hash identifier: 4nPeKx2juZOGu6CBAx14DMfLcXLRG9v5PLIyCbQj5E8=
Subject key identifier: AA:3D:26:1B:B6:BA:AE:A1:C1:09:DF:73:FE:C6:1C:9C:FD:49:A5:8B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018438773FCF10770BD132961CB8B268B9AC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qj0mG7a6rqHBCd9z_sYcnP1JpYs.roa
Signing time: Wed 02 Nov 2022 13:10:50 +0000
ROA not before: Wed 02 Nov 2022 13:10:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:77:3f:cf:10:77:0b:d1:32:96:1c:b8:b2:68:b9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 2 13:10:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa3d261bb6baaea1c109df73fec61c9cfd49a58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:2b:cb:13:87:5f:fa:fc:8a:95:4e:a5:b3:
bf:a0:57:23:83:b9:58:e6:db:66:a5:1a:09:cc:f5:
f5:ee:d0:53:76:e7:90:49:a2:2e:fd:c6:62:03:d9:
13:99:34:62:5d:e4:a2:f6:80:76:1a:a9:b7:ff:a2:
8f:9e:54:0c:ab:41:7b:4b:d8:85:58:50:50:6a:c7:
07:e3:e8:c7:be:ec:3f:5d:2d:f0:e5:b4:c8:a9:cc:
b5:dd:fd:4a:d5:57:30:88:75:46:ba:59:38:2f:29:
28:a8:2f:0d:42:89:c4:82:ad:ae:77:9e:bc:cb:c2:
57:ce:67:1e:4d:ce:fb:ff:8d:c2:8a:c3:57:f1:45:
34:07:25:b9:f2:7b:53:f3:30:68:fe:20:87:ee:4a:
57:5e:56:0f:88:2c:6f:08:64:48:9c:e2:f2:28:c2:
5e:45:8f:be:86:53:39:f5:b3:62:c6:f0:c7:fd:39:
4c:ea:72:0d:85:6b:cc:e8:5f:30:fc:d2:65:f1:44:
9c:97:52:ca:53:02:bd:9e:db:15:42:76:bc:39:15:
b3:7e:78:2d:eb:a4:7a:f6:b2:8d:e2:1a:43:e6:4c:
ca:6c:99:c7:85:44:8d:61:cc:da:85:44:43:16:a1:
a0:4a:9e:20:28:6c:53:8f:18:88:fd:49:2a:f5:1f:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3D:26:1B:B6:BA:AE:A1:C1:09:DF:73:FE:C6:1C:9C:FD:49:A5:8B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qj0mG7a6rqHBCd9z_sYcnP1JpYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:18:39:8a:ed:a5:c1:aa:2b:35:7e:d0:0e:e4:2b:1d:14:18:
f6:38:c4:2d:be:46:26:f0:3e:fe:8e:d4:bd:6d:d1:51:a3:15:
30:46:7c:e4:cc:e7:a0:f7:fa:16:24:c4:c0:84:e8:24:80:7d:
66:e9:d6:90:1d:ed:9a:86:08:59:2d:5a:d1:5f:58:04:13:93:
df:98:37:0b:f2:1b:3f:59:8d:47:55:82:a5:4f:4b:9c:23:56:
82:ca:84:f2:42:5a:d7:2a:f1:ea:e8:01:f2:7d:c2:32:41:ea:
88:ce:05:1a:80:fb:58:54:df:fd:af:22:c9:98:f5:09:eb:50:
af:b3:5e:e4:9e:6d:61:4b:62:3e:ca:dd:39:5f:45:75:9c:47:
de:c4:60:8a:65:0b:15:eb:31:36:9a:26:10:d4:5e:89:b0:d2:
1a:1a:80:29:ce:b0:97:94:3c:54:76:85:93:d2:2e:bf:c4:1e:
37:0c:93:ea:e1:e4:b6:20:d4:2b:36:87:f9:ab:51:8c:eb:97:
55:6b:c3:1e:2a:f5:e1:ae:ad:73:1e:00:de:48:fb:26:75:57:
17:a3:21:84:0e:35:cc:6e:90:d3:65:8c:58:0b:24:38:dc:e4:
60:95:ab:cb:7d:46:72:4d:6b:46:f7:fd:f0:b7:cb:52:f3:ea:
07:99:37:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:29:02 2025 by rpki-client