Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qocC6p9JUj_a7UpSu_Rgc3axKF8.roa
File: qocC6p9JUj_a7UpSu_Rgc3axKF8.roa (raw, json)
Hash identifier: lGNU7QNcVd3Bmg/VmAA1d0KOyiAXromjZKWobCH7B1c=
Subject key identifier: AA:87:02:EA:9F:49:52:3F:DA:ED:4A:52:BB:F4:60:73:76:B1:28:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8DDB33A0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qocC6p9JUj_a7UpSu_Rgc3axKF8.roa
Signing time: Sat 18 Jun 2022 18:09:44 +0000
ROA not before: Sat 18 Jun 2022 18:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2379953056 (0x8ddb33a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 18 18:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa8702ea9f49523fdaed4a52bbf4607376b1285f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:61:15:32:a0:85:d4:7a:12:26:e3:17:8f:
0b:e9:39:3a:1b:66:b5:fd:c1:07:87:07:9a:1c:95:
18:ae:b1:7e:9d:74:ae:38:ce:ad:b9:c7:a9:5b:32:
62:30:b1:86:69:ef:e4:b6:a5:91:da:27:ad:6c:27:
20:c4:e2:8d:b0:44:6c:09:23:95:bd:95:1a:1c:7f:
8c:5b:69:f9:6a:6e:bb:ec:fc:98:29:7a:a3:68:41:
2c:a3:37:b8:53:14:93:27:bd:a8:25:ef:3e:12:85:
fe:90:c5:47:ff:f7:6b:59:70:65:0f:90:f9:81:b7:
3f:fe:ff:cd:bc:c1:22:eb:12:6b:6b:82:f4:9e:7d:
bf:e5:63:35:7d:d7:db:05:e1:82:7f:df:9d:22:04:
b3:41:2a:a0:16:a0:70:57:e8:98:0e:40:30:39:6f:
22:32:a0:8e:9a:f3:cc:b4:44:bd:b2:ad:44:40:41:
66:4c:94:0c:36:d5:0b:20:0c:7c:60:5b:85:0f:a9:
e9:b7:63:8d:a2:fe:6c:38:2c:57:85:16:9f:0f:ee:
13:57:36:3b:3c:6e:f3:cf:56:c9:26:f6:d7:58:c0:
ca:cd:cb:4b:9a:60:de:ab:26:e2:fe:c6:4f:cb:32:
81:0a:8e:d7:2e:fb:89:d9:c3:53:f7:df:3e:45:94:
5a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:87:02:EA:9F:49:52:3F:DA:ED:4A:52:BB:F4:60:73:76:B1:28:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qocC6p9JUj_a7UpSu_Rgc3axKF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:57:90:86:bf:0b:61:1a:ea:77:ef:08:93:54:46:5d:2a:79:
35:ad:52:6c:72:5c:e5:1d:e8:9e:53:75:18:9b:d3:e3:31:40:
80:b2:cc:f4:06:42:9d:fa:38:3c:33:c6:be:d8:35:f5:cb:46:
c4:98:7a:26:32:ff:6a:4c:f9:b9:2e:49:ad:96:11:9f:f5:1b:
75:1d:3e:da:0f:fa:4f:64:4a:39:d2:99:04:10:93:09:24:3b:
a2:14:69:8b:c8:2c:02:9b:d5:96:e6:59:81:77:dd:90:37:cc:
62:1e:c5:6c:93:b0:ac:66:cd:01:d1:b5:bc:f2:85:16:31:71:
fb:d8:9a:bf:74:a8:8f:e6:e9:6a:98:fc:20:ee:e2:82:b9:bd:
da:98:17:b1:be:94:04:42:a2:38:79:41:2a:63:bf:62:f3:87:
d1:ee:80:3b:a9:73:a6:26:3b:e0:ce:f0:6d:bc:01:46:b8:f4:
51:3f:10:d7:e2:2f:8b:5e:54:f9:bb:7a:d7:d3:86:c6:00:bf:
af:91:c1:13:92:80:86:db:35:8f:4d:90:f5:bc:79:fb:53:86:
9d:2d:bb:f5:ae:e8:3b:1a:75:c6:9a:00:66:8d:cb:c2:3d:0b:
be:3b:bd:f4:4f:c2:07:8e:fc:e6:90:25:3d:13:e9:f0:f2:5e:
c7:3d:63:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:27:07 2025 by rpki-client