Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tqQeVHSY-JB7dumO508JFPak7RE.roa
File: tqQeVHSY-JB7dumO508JFPak7RE.roa (raw, json)
Hash identifier: LiHsb72knWvxvepL3X2Oh8OyTJZFoueRh61+QLXTtTU=
Subject key identifier: B6:A4:1E:54:74:98:F8:90:7B:76:E9:8E:E7:4F:09:14:F6:A4:ED:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182308E389D1E96699E690853FDA99022CB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tqQeVHSY-JB7dumO508JFPak7RE.roa
Signing time: Sun 24 Jul 2022 14:13:23 +0000
ROA not before: Sun 24 Jul 2022 14:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:30:8e:38:9d:1e:96:69:9e:69:08:53:fd:a9:90:22:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 14:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6a41e547498f8907b76e98ee74f0914f6a4ed11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:72:7b:ae:8c:30:6b:9e:3e:1f:e5:b3:49:68:
65:20:75:1b:38:20:d3:f8:2d:e4:92:01:c2:9c:c1:
55:d1:f7:8e:43:82:c4:d2:ff:43:96:1f:53:db:0c:
ee:d4:a4:72:9a:3f:e4:f0:ee:f1:34:03:d6:24:23:
74:a2:0a:78:75:c1:51:16:96:02:f9:cc:3e:b0:60:
b2:ff:91:6f:36:37:0f:97:c9:78:52:5c:da:49:a2:
81:eb:52:63:a1:e1:3a:95:50:99:13:06:e9:86:70:
be:16:5c:53:43:c0:f3:be:ac:09:96:76:64:36:45:
7c:4c:e4:fc:1f:08:bf:0f:d6:d5:7d:0c:5d:0a:f0:
9d:f0:00:6c:70:75:36:ae:70:20:a1:67:f6:ce:c8:
9a:bf:0d:e3:58:6d:2e:91:56:c3:8c:3f:d5:9a:f3:
cb:9a:44:5f:56:f9:f5:93:6e:ed:2f:74:cb:13:51:
f8:51:76:a4:9a:42:e0:ec:11:c3:65:9b:d0:0a:6a:
46:77:d5:15:4a:d2:06:91:5c:6c:0b:b7:98:8d:26:
c9:61:a0:bb:a3:34:2d:b2:fb:74:70:ed:52:8d:9f:
c7:ca:49:44:ed:35:54:fe:e6:e5:47:4c:be:84:38:
57:65:d3:4e:a0:c4:5c:94:35:19:ce:01:68:e2:ca:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A4:1E:54:74:98:F8:90:7B:76:E9:8E:E7:4F:09:14:F6:A4:ED:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tqQeVHSY-JB7dumO508JFPak7RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:ef:b6:c4:c9:3c:ca:1d:6e:18:97:38:8e:8b:e3:1c:5a:56:
71:e6:64:3e:00:c5:79:60:0a:d3:97:25:3b:cd:b2:ba:cc:bb:
98:a4:7d:75:67:7a:60:62:33:9a:ee:5f:1a:dc:c1:4e:3a:8c:
fb:8a:99:8a:54:e0:9c:c0:ca:8e:a6:34:f2:8a:ac:07:44:4a:
32:c3:84:28:4e:cd:17:bd:19:d4:ff:56:8d:27:7b:b0:36:bf:
d3:3e:b9:4d:70:e1:f1:76:9d:59:4b:0d:56:ae:7e:2b:ed:1b:
50:73:5e:61:e8:6b:6d:f0:79:2f:dd:5d:b6:7e:82:84:76:48:
56:6f:0e:fc:9d:a2:21:e7:2f:5d:77:33:4d:27:d5:5c:96:dd:
a1:15:8d:a4:42:04:bb:42:55:39:04:54:3a:82:15:cc:89:50:
88:e0:d0:58:08:8f:12:b1:a9:7c:6a:10:ff:9e:95:47:ed:31:
d5:6a:c3:1e:48:18:95:a3:ec:6d:23:56:2e:fc:44:a4:3c:71:
93:2e:60:f6:86:de:11:60:62:75:3b:5f:58:14:ea:48:94:ac:
dc:bd:03:5c:87:14:90:d0:8f:e9:12:86:2d:86:99:de:d8:02:
7d:17:cc:89:4d:21:3c:92:a7:c1:a8:4c:17:fa:05:5f:85:c4:
a2:5e:54:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:25 2025 by rpki-client