Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Q-pdj_UEh62cFgOS7QXlT1lg6Q.roa
File: 1-Q-pdj_UEh62cFgOS7QXlT1lg6Q.roa (raw, json)
Hash identifier: 131E18JKalAuX9S6BPxLftYkPo5IwTlhHgIeaI0Y9Ak=
Subject key identifier: F9:0F:A9:76:3F:D4:12:1E:B6:70:58:0E:4B:B4:17:95:3D:65:83:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181FD4386B1B24CD55FF03ADC5E31B8B98B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Q-pdj_UEh62cFgOS7QXlT1lg6Q.roa
Signing time: Thu 14 Jul 2022 15:11:09 +0000
ROA not before: Thu 14 Jul 2022 15:11:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fd:43:86:b1:b2:4c:d5:5f:f0:3a:dc:5e:31:b8:b9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 15:11:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f90fa9763fd4121eb670580e4bb417953d6583a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:70:b1:c5:18:94:93:b1:7a:1e:fa:e6:2c:b1:
48:76:f2:3a:15:24:9c:1a:00:6f:90:cb:83:02:19:
e8:e9:6d:58:d7:c7:c4:ac:4f:2f:2e:4f:1f:e6:30:
23:90:43:7b:3c:63:b2:b2:48:55:75:1e:7c:a9:64:
55:95:b0:15:e8:d9:10:84:19:25:e9:67:e6:08:5b:
b5:59:e9:4c:19:a8:d6:07:e7:56:9c:37:f3:59:4f:
1d:2e:a5:f3:b3:3d:3e:32:7e:d0:34:35:63:c1:cf:
9f:eb:8d:be:89:15:ec:1d:ba:c0:4a:1a:d2:ab:72:
69:67:8b:8a:5d:1f:b3:9b:45:5c:cd:e7:00:91:18:
d3:a7:c4:c2:38:a6:ec:ea:e1:4f:e7:13:bc:0c:df:
31:a5:2f:f2:3f:0f:03:9a:71:d9:1e:4e:60:26:6c:
dc:e6:53:55:ec:b7:18:e6:a0:39:09:de:bb:03:2f:
e2:db:1c:5f:55:4d:21:d7:e6:7f:56:40:62:56:27:
7c:d1:44:92:a0:e1:d0:07:bd:c2:8e:ac:24:3f:26:
84:22:57:74:01:b6:cc:02:0d:7d:1f:f9:55:23:be:
08:53:33:3b:d7:17:3d:76:eb:0a:a8:5e:d0:76:c5:
cd:35:41:c8:a5:90:04:16:92:2d:cb:2d:1d:ce:4b:
8c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0F:A9:76:3F:D4:12:1E:B6:70:58:0E:4B:B4:17:95:3D:65:83:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Q-pdj_UEh62cFgOS7QXlT1lg6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:f4:22:c8:b1:f9:c5:f0:e8:85:31:7f:dc:12:c4:8a:96:f0:
fc:01:ae:3a:1d:b1:bf:6e:e9:c1:cf:57:fa:f9:bb:78:68:a5:
41:48:0e:1e:d6:5b:39:24:78:0f:be:a9:d6:75:e0:39:f5:98:
14:41:6e:b6:c9:7a:ea:a3:89:d1:95:e1:b0:27:a4:70:4a:44:
a6:78:33:03:a8:a8:76:e2:e2:ad:79:4f:c1:0d:2d:36:d3:fe:
cb:d5:74:24:c5:9d:bc:97:77:c9:4c:95:3b:6d:08:c6:77:eb:
ad:ca:26:71:b5:6e:ac:8b:fe:84:de:77:69:14:c9:7a:f7:97:
9c:9b:6b:f8:8b:b9:01:47:06:c4:3d:35:a4:23:3e:73:ed:65:
21:27:27:cc:54:42:2b:e3:91:c2:d7:48:e5:91:e0:9e:b3:c8:
ab:34:0b:7a:77:14:a5:1f:9c:27:32:de:1a:c3:f6:8c:a4:4f:
d0:c4:ee:f7:08:eb:a1:39:2b:b7:bd:c7:60:f0:7c:d3:69:11:
4c:36:59:0a:35:cf:5d:45:25:69:dc:9d:cc:49:43:8b:71:43:
de:e1:5a:72:99:06:cb:3b:f1:31:b9:a4:ba:0b:8d:3a:84:19:
fd:89:45:9b:5b:2a:52:14:94:1c:2f:e0:97:7c:9c:89:3e:72:
81:a3:ba:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:13:12 2025 by rpki-client