Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tqoY7u8aKrksuLUKUgzrFQ4V16U.roa
File: tqoY7u8aKrksuLUKUgzrFQ4V16U.roa (raw, json)
Hash identifier: Hh/PXfeJwaMwQEWV4GJqwqASPZRmIs+FQYXWGbhnX2w=
Subject key identifier: B6:AA:18:EE:EF:1A:2A:B9:2C:B8:B5:0A:52:0C:EB:15:0E:15:D7:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864930EBF74ED6388F0B4EBA85476AF991
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tqoY7u8aKrksuLUKUgzrFQ4V16U.roa
Signing time: Mon 13 Feb 2023 05:13:08 +0000
ROA not before: Mon 13 Feb 2023 05:13:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:30:eb:f7:4e:d6:38:8f:0b:4e:ba:85:47:6a:f9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 05:13:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6aa18eeef1a2ab92cb8b50a520ceb150e15d7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b6:59:3c:75:aa:8b:68:22:14:e9:18:ca:4e:
1d:12:e9:08:0e:d3:20:df:6e:91:52:dc:b6:6c:da:
45:be:f0:58:52:a9:1c:f4:82:1b:d4:96:db:1c:58:
9a:76:1a:25:8d:26:51:e4:3a:55:98:b2:0b:5d:4c:
b8:ab:33:c5:2c:da:78:64:3a:8f:a3:2f:53:63:e5:
97:0b:70:00:8f:21:cd:82:21:a5:9c:0d:3b:83:77:
82:08:af:ab:25:e1:f4:64:26:c9:fd:f3:9a:cb:44:
97:96:e9:dd:45:83:65:35:14:29:b7:15:54:33:55:
b4:0d:d9:ea:6e:00:fb:c2:2f:40:20:58:63:02:3d:
89:d5:27:d2:87:03:7d:93:08:1e:45:08:33:b6:21:
eb:4b:5a:6e:43:a6:50:51:42:a0:ed:4b:a2:cb:3e:
8a:af:85:c8:ed:01:04:86:1f:b5:55:fd:4b:ae:b8:
cc:c2:28:7b:2e:bc:19:ad:de:0f:e2:54:07:ba:c0:
cb:64:13:af:42:2f:21:aa:70:b8:39:e5:e6:cd:ac:
d6:30:87:2b:33:7b:bf:49:9a:09:ef:fc:cb:f7:ab:
4b:60:dc:1f:6b:b4:22:16:59:b7:3d:a0:33:e5:e6:
63:14:df:b8:40:aa:ac:1e:6e:ad:24:1e:00:13:21:
5a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AA:18:EE:EF:1A:2A:B9:2C:B8:B5:0A:52:0C:EB:15:0E:15:D7:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tqoY7u8aKrksuLUKUgzrFQ4V16U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:4e:66:14:7d:f3:7d:42:4b:e0:29:d9:36:2c:13:f6:a6:c8:
c7:dd:17:22:6b:57:84:44:ed:5c:a4:43:c2:d5:1b:b3:db:0c:
5e:e0:02:44:94:41:67:38:19:20:ef:3b:0e:6f:e4:b3:cd:a6:
0d:37:d4:6c:3d:ae:d5:3f:19:96:c7:ba:a4:87:7c:ac:e6:74:
f2:88:dd:1d:a5:f3:9a:73:9d:8b:98:0c:53:93:c1:e0:bc:df:
88:76:40:4f:59:5c:11:ed:76:7f:4b:5a:d2:b8:79:16:c4:66:
03:32:35:cd:42:90:81:d3:27:55:34:0e:fe:b4:1c:a9:55:96:
7a:c0:a6:0f:56:8e:9d:18:3c:e0:aa:bf:da:7b:02:33:d1:b6:
21:45:25:fd:77:0a:8e:73:ac:e8:98:1a:5d:38:54:a2:f9:31:
d9:c7:68:34:1f:00:47:87:25:7d:4f:e6:e0:b3:3c:ce:51:69:
9c:26:50:32:2c:0e:0a:ad:71:21:ee:94:57:cf:ac:04:08:f9:
9d:4c:01:9f:aa:2d:42:a0:5b:a1:8f:e9:83:b7:51:bb:51:17:
f5:d2:33:37:e1:df:fc:c7:25:8a:d9:11:f8:2a:43:47:66:34:
16:91:79:65:3a:29:e3:86:35:01:4d:e6:f4:4c:ab:a5:78:a1:
bf:6e:89:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:48:50 2025 by rpki-client