Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qpduBQCr5aWvnzq7c9685HmR-VI.roa
File: qpduBQCr5aWvnzq7c9685HmR-VI.roa (raw, json)
Hash identifier: zxthDaAJg79wdbCQPzg6d8n4fZ6NEOtXBDopfiI8I6g=
Subject key identifier: AA:97:6E:05:00:AB:E5:A5:AF:9F:3A:BB:73:DE:BC:E4:79:91:F9:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8A20E991
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qpduBQCr5aWvnzq7c9685HmR-VI.roa
Signing time: Sun 05 Jun 2022 11:13:20 +0000
ROA not before: Sun 05 Jun 2022 11:13:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2317412753 (0x8a20e991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 5 11:13:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa976e0500abe5a5af9f3abb73debce47991f952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:99:9b:4a:50:1d:bd:17:4f:ef:06:5a:1e:
f2:49:e4:0a:74:bf:e6:30:43:43:4d:f4:04:f6:54:
15:97:a1:a0:ad:b7:89:1a:df:79:b5:24:a6:8d:81:
5e:84:5a:e9:79:f8:b2:60:47:71:1d:ab:95:16:d9:
ec:b2:0a:a5:73:63:a8:57:29:35:d6:fb:22:68:61:
9c:a2:d9:ee:86:a2:1f:9b:fb:01:1c:59:98:01:eb:
56:45:c6:8d:bb:d7:33:94:1a:57:e4:30:68:f6:8d:
9a:1e:42:32:3f:da:34:74:17:96:18:86:4e:5a:0d:
50:36:3b:99:02:d5:b3:24:04:e3:e9:bb:65:6d:67:
8a:a2:03:ef:1c:2c:1f:14:e8:55:62:0e:98:af:bc:
fe:ef:30:1d:94:24:2b:21:63:2a:ba:53:a2:d2:14:
5f:e8:fa:2b:90:4a:50:9e:85:3e:8c:82:17:e4:c5:
34:4c:d8:40:d3:95:fc:bb:d9:2d:7d:7c:9a:51:ab:
12:c3:bb:86:aa:d0:a4:66:82:db:ef:b0:b3:f6:ed:
59:32:92:c2:5a:8a:af:fc:fa:6b:d3:65:e2:2a:48:
8f:91:27:d5:31:3b:5a:54:83:83:08:e3:53:67:58:
82:ff:99:66:75:67:01:1d:4c:3c:52:80:ea:be:c1:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:97:6E:05:00:AB:E5:A5:AF:9F:3A:BB:73:DE:BC:E4:79:91:F9:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qpduBQCr5aWvnzq7c9685HmR-VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:ca:c3:5c:04:25:1b:1e:19:87:d5:d6:02:fa:a0:cb:3a:e2:
42:50:ee:eb:21:b7:82:11:72:9b:a8:c5:2a:11:50:ae:f7:2e:
a6:ab:9c:25:6f:9c:72:22:64:1d:0f:55:aa:d1:d0:12:dc:88:
03:2e:66:28:b3:1f:6f:e3:47:f4:ce:22:32:51:05:22:ac:ec:
6e:f3:81:46:73:11:d1:10:8a:fa:b9:f8:e1:90:e5:2e:f3:3d:
f9:0c:70:ef:ad:cf:76:d9:7a:ce:0a:fd:16:03:92:b9:84:84:
13:08:24:cf:43:e5:98:11:8d:b5:99:26:bc:26:b8:35:6a:08:
40:e4:7a:c7:25:43:1d:79:6f:50:3e:bd:a5:21:67:ae:22:23:
e2:98:4c:67:30:fb:17:13:1f:18:50:42:74:dc:af:30:64:96:
d4:a3:4f:09:e4:bc:bc:c2:88:b4:da:2d:b6:e7:f3:42:c9:b0:
22:7e:19:0b:36:78:0e:b8:05:32:da:a5:c1:21:5e:28:9b:5d:
d1:49:ad:2d:35:1b:d9:55:08:5f:2d:0b:8a:2c:53:86:44:39:
a2:94:97:b0:d8:09:06:18:fe:21:46:0f:30:fa:62:57:b6:58:
2e:37:4f:a4:f0:cc:08:58:7c:cc:17:b2:61:03:bf:47:ed:eb:
ce:1d:1a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:21:14 2025 by rpki-client