Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E-q2cPj2cqK528CVtMcgk0VRyGE.roa
File: E-q2cPj2cqK528CVtMcgk0VRyGE.roa (raw, json)
Hash identifier: xAkTv6M98t0PF0ysQqL4KKxd8Dph/RuC15q4payWWZA=
Subject key identifier: 13:EA:B6:70:F8:F6:72:A2:B9:DB:C0:95:B4:C7:20:93:45:51:C8:61
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 79F6BEC2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E-q2cPj2cqK528CVtMcgk0VRyGE.roa
Signing time: Sat 09 Apr 2022 23:08:21 +0000
ROA not before: Sat 09 Apr 2022 23:08:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2046213826 (0x79f6bec2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 9 23:08:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13eab670f8f672a2b9dbc095b4c720934551c861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:92:a3:6e:b6:9d:4d:99:64:3b:59:c2:0e:
a8:ed:aa:45:b4:e1:4d:e9:6d:62:a2:f1:88:6b:8f:
fd:40:76:cc:c5:ce:db:ae:a5:83:95:6d:fd:c6:17:
f2:dc:ac:eb:30:33:2c:77:80:9e:a7:fc:de:fe:3a:
46:14:dc:54:d3:f1:87:db:10:71:08:95:0c:03:75:
95:8d:bf:a3:1e:c0:dc:47:e9:57:2d:f0:48:5d:ae:
95:2f:c3:d0:51:f6:b6:da:0c:88:36:6b:f0:09:f9:
7e:41:5f:a3:f3:28:a2:59:f0:79:0b:b9:d6:c0:d2:
70:35:4e:43:d0:3e:f4:9b:d6:4e:68:b3:8e:f3:39:
27:ec:ef:89:d1:a1:3b:0b:76:48:fd:84:1d:3b:ce:
d0:e8:c7:7b:11:2c:98:28:be:f6:ec:62:83:f1:96:
ef:cf:5b:ef:63:14:39:f6:24:16:a1:a3:90:41:1b:
2e:1f:ca:8f:f7:f0:b4:5e:fd:6b:da:c0:ce:a8:19:
e6:72:bb:cf:18:c7:b9:3e:38:b9:5e:f8:33:5f:63:
c8:f5:65:97:c4:56:ea:ff:d1:53:02:40:81:45:e9:
45:d7:8c:70:e6:5b:21:d3:2f:e8:26:5e:f5:1a:1a:
99:e0:7b:7b:3b:64:8d:ef:24:bb:44:7e:c2:0c:1d:
48:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EA:B6:70:F8:F6:72:A2:B9:DB:C0:95:B4:C7:20:93:45:51:C8:61
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E-q2cPj2cqK528CVtMcgk0VRyGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:40:27:cf:60:f8:8b:df:4d:33:f9:58:c2:3f:84:37:07:66:
1a:83:e2:5f:63:3c:07:82:91:6a:58:37:11:5b:24:59:8f:cc:
e6:e8:a1:da:24:10:cf:38:a1:2a:a6:a8:11:85:9f:72:10:6d:
34:6c:d3:34:c9:07:1a:f0:e5:0e:92:e0:39:53:34:9f:15:a5:
bb:de:e0:b8:89:e8:c4:0c:cb:96:4a:be:d3:0f:4a:2f:ab:27:
38:ba:9a:b1:36:cc:b1:15:05:dc:64:5b:e3:c8:ac:56:fe:52:
60:e3:67:3e:1d:98:a2:d5:9e:f2:ca:6f:ba:c2:5f:86:20:89:
ad:cd:61:a4:9e:df:fb:18:ab:ed:7a:40:52:6d:4d:41:a6:c9:
69:df:fb:54:67:19:79:52:97:26:e0:03:78:2f:4e:52:ed:28:
f3:23:7f:d5:c9:57:92:5d:1b:1d:a6:38:6f:d5:1a:40:e0:1e:
a0:ea:62:48:a5:be:86:93:60:25:a4:87:ea:a8:2a:f8:2a:d6:
cf:fa:fb:cd:6f:9f:a7:0d:d6:1c:52:f8:d3:da:0c:c2:7b:03:
c9:1f:d8:08:bd:63:d4:50:7e:b0:02:3e:98:03:1b:ea:95:03:
0a:5d:9f:13:ac:6e:42:0b:1f:d1:23:a1:ac:34:85:45:12:22:
38:40:ee:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:43:36 2025 by rpki-client