Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qrkizZLTERQH-wcbVCE6iksV93Q.roa
File: qrkizZLTERQH-wcbVCE6iksV93Q.roa (raw, json)
Hash identifier: 2HL50YJJl6Y7QZH910A691UDaqazM8XPbrTF3vUiNHM=
Subject key identifier: AA:B9:22:CD:92:D3:11:14:07:FB:07:1B:54:21:3A:8A:4B:15:F7:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 72E6FA2D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qrkizZLTERQH-wcbVCE6iksV93Q.roa
Signing time: Wed 16 Mar 2022 03:11:12 +0000
ROA not before: Wed 16 Mar 2022 03:11:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1927739949 (0x72e6fa2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 03:11:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aab922cd92d3111407fb071b54213a8a4b15f774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:19:7f:92:45:e3:f1:0a:98:f1:e5:fc:49:
a1:85:59:2d:d1:33:d8:8f:27:67:4a:02:1a:cb:70:
b7:14:4c:14:fb:66:b1:52:4d:e6:aa:32:93:d9:56:
c6:2c:f8:3b:f2:08:6b:e7:f3:29:76:9d:9b:60:4c:
f8:85:80:0d:c7:e6:90:6e:06:24:d7:de:f7:45:2b:
97:6b:78:ec:1a:f4:6c:72:ab:ee:0e:88:a8:ee:cc:
ac:83:1a:21:fa:df:43:c0:ad:55:e7:53:e2:3d:e4:
ce:fa:fc:ef:80:85:2e:64:a2:7f:fb:96:a6:69:48:
fb:f6:c3:fa:e8:97:29:98:4b:ad:d4:60:20:88:f1:
97:16:0e:63:45:cd:48:29:f5:51:ca:af:e1:9f:59:
13:95:02:4b:74:43:8c:44:2b:15:a5:97:ef:ac:8f:
d7:49:0d:f9:23:1b:2b:4c:b2:71:47:40:3f:1a:15:
ea:cf:46:d0:cb:05:24:f3:4f:86:f9:37:9f:c9:69:
d9:05:99:f9:17:2f:fb:99:18:3c:e8:e4:bb:12:b4:
8a:09:93:21:f3:45:75:7f:a0:c4:29:15:58:73:3d:
28:22:0e:ad:9f:b2:95:cb:b7:b4:94:b4:ff:fe:c7:
03:0b:9f:62:d7:71:ec:97:03:db:7b:59:7d:be:57:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B9:22:CD:92:D3:11:14:07:FB:07:1B:54:21:3A:8A:4B:15:F7:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qrkizZLTERQH-wcbVCE6iksV93Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:de:99:f3:f0:0d:68:03:c2:36:bf:86:dd:46:ae:4c:2a:39:
d7:d4:ea:ba:7e:63:5e:34:7e:6c:ac:3c:44:da:01:5b:08:66:
ef:19:83:0d:81:b5:d5:10:db:c2:98:ff:77:bd:cf:c3:c1:f1:
5f:ef:7c:16:e5:5b:ab:03:2e:dd:e3:c2:e2:23:35:db:3a:b6:
20:13:1b:6e:12:53:9f:c6:55:16:af:38:db:50:40:05:e0:2b:
55:28:84:4b:9c:70:5b:ed:7c:c0:cb:0c:39:85:af:17:28:a1:
e8:d1:f5:fa:5f:f4:75:8f:1d:9c:67:86:80:f3:dc:e8:22:4b:
72:2a:da:d2:73:63:a4:37:52:08:16:da:59:34:12:92:28:ec:
d0:1a:a4:0c:b8:2e:f6:4e:80:e1:98:72:00:c3:9a:cb:97:d0:
7a:51:67:78:3a:7f:94:77:3f:a5:35:18:41:8a:0b:43:ff:99:
ed:46:3a:3a:ec:15:d8:e6:18:a2:78:e8:52:4e:fa:41:3d:64:
8e:c3:43:40:85:ed:7c:da:59:cb:56:bc:d5:a7:a1:97:2a:09:
15:81:0f:8d:c9:b8:2c:1e:96:92:2b:5b:38:97:e1:72:28:60:
cc:9d:a4:0f:0d:f8:99:31:a5:e7:61:db:f6:69:11:41:ba:45:
40:e6:74:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:42:37 2025 by rpki-client