Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QTkTFAt3vabwwMfJ0gzhtD1vq_8.roa
File: QTkTFAt3vabwwMfJ0gzhtD1vq_8.roa (raw, json)
Hash identifier: heVPf+mLOFxKZ+hf/pCDfhdwvW5U3dxOzv40tvfDDnQ=
Subject key identifier: 41:39:13:14:0B:77:BD:A6:F0:C0:C7:C9:D2:0C:E1:B4:3D:6F:AB:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850C3FCF80E8420707E9BEF00B1BF8433E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QTkTFAt3vabwwMfJ0gzhtD1vq_8.roa
Signing time: Tue 13 Dec 2022 16:09:46 +0000
ROA not before: Tue 13 Dec 2022 16:09:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:3f:cf:80:e8:42:07:07:e9:be:f0:0b:1b:f8:43:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 16:09:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=413913140b77bda6f0c0c7c9d20ce1b43d6fabff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:3b:44:48:83:43:6c:bc:d7:2c:8e:88:9f:
c2:c3:3f:d8:0c:69:67:c6:6e:eb:6d:89:a8:5d:09:
9d:70:fc:d3:25:25:88:a0:6f:25:c1:08:b4:f8:77:
89:6b:9f:fe:f5:42:8f:e5:2b:e0:7b:71:47:8c:9b:
36:a4:82:91:97:06:e9:46:05:bc:ad:12:d2:54:b0:
89:f0:71:50:58:25:40:3c:a0:f1:dd:10:05:5d:6e:
73:6d:d3:e0:cf:d3:20:4f:6a:54:1a:c6:52:93:6c:
ec:08:13:f5:63:7a:57:93:15:f3:45:bc:7b:fd:2c:
42:86:24:9f:60:bb:fc:8d:99:74:2c:9a:71:25:6f:
5b:f9:2d:5e:a2:1b:3f:a1:b2:b4:7d:6f:fa:d5:1e:
44:2f:4c:89:0e:bf:e2:f3:d1:2e:13:a5:7b:a6:78:
31:7d:6f:f9:e7:7f:53:57:72:35:bc:db:d8:fc:84:
ae:fa:e7:9a:17:40:83:ba:52:fe:db:bb:7c:0e:8c:
1d:f8:6e:65:a2:b8:cf:d6:01:0e:f0:1e:a1:59:ca:
d7:b6:41:2c:70:b6:92:f4:7a:88:4b:70:32:70:c9:
b0:a6:78:b2:29:7e:bd:41:73:16:91:67:6c:1c:d9:
0f:61:9f:5e:eb:87:b8:e7:c5:a2:df:bc:f3:bd:d5:
62:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:39:13:14:0B:77:BD:A6:F0:C0:C7:C9:D2:0C:E1:B4:3D:6F:AB:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QTkTFAt3vabwwMfJ0gzhtD1vq_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:17:10:13:21:ee:a5:7a:c1:04:d5:47:b9:e3:f7:2e:28:18:
ce:83:38:1a:2d:44:6e:ef:f3:d2:ce:77:f4:a2:7b:36:fe:b6:
6b:99:b0:8a:af:17:f1:32:37:7e:c9:4c:f1:9f:20:c9:48:e4:
e9:5c:1d:05:37:61:48:23:42:24:ed:5a:69:a9:85:b9:55:34:
82:d1:d6:0e:ab:91:77:8d:42:39:b0:cb:7b:46:6c:cd:54:14:
b6:a1:39:6c:9a:46:3e:a8:4a:8e:e3:f6:ec:39:44:ec:2e:af:
4d:fa:ee:d5:0f:9f:20:35:2b:92:cc:e6:e4:fe:93:87:11:62:
78:02:27:5f:0e:5d:7d:d2:6f:4b:f6:16:05:47:a7:f7:1d:03:
b3:c5:cd:b2:91:6a:71:db:e0:7b:b8:71:16:bc:5d:33:01:67:
16:31:02:fc:8b:b9:ae:0a:ea:ae:fb:1b:ca:83:4d:fc:5b:86:
48:83:d4:4d:df:ae:79:61:47:9b:78:6b:3e:ec:af:fa:c8:9c:
e6:8b:ea:7b:5e:8d:af:18:3a:bc:7d:10:67:9a:0b:15:79:ed:
33:ae:e5:ef:b3:65:a3:9a:58:53:4f:c1:85:96:5f:2a:59:66:
46:7b:59:b7:40:c6:34:78:aa:de:b4:aa:43:3a:a0:73:1f:cb:
77:73:24:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:13:15 2025 by rpki-client