Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QUnUjdL7Vo7yRDA0nYTACXYYDQE.roa
File: QUnUjdL7Vo7yRDA0nYTACXYYDQE.roa (raw, json)
Hash identifier: gAR7FG0XWLaBwUaDvW7jqaa5NrmHsxTPBJMkqpVTww4=
Subject key identifier: 41:49:D4:8D:D2:FB:56:8E:F2:44:30:34:9D:84:C0:09:76:18:0D:01
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 887D0BA4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QUnUjdL7Vo7yRDA0nYTACXYYDQE.roa
Signing time: Mon 30 May 2022 15:10:13 +0000
ROA not before: Mon 30 May 2022 15:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289896356 (0x887d0ba4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 30 15:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4149d48dd2fb568ef24430349d84c00976180d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:b6:fe:03:9a:90:f5:f2:79:33:da:a8:80:
15:9f:c2:ad:8c:a1:5d:0e:12:77:19:3c:6a:52:58:
39:3d:43:01:91:23:25:27:79:b6:96:dd:f5:38:97:
2d:01:9c:66:2d:5f:64:07:14:64:bd:d1:53:be:c1:
b8:07:dd:1b:70:9e:07:b1:05:f0:cc:f8:65:c1:18:
55:99:d9:01:b8:48:d8:df:3e:b5:be:a9:77:3e:08:
b6:21:44:c1:1f:1e:25:7d:1a:68:25:ba:61:77:9d:
5a:6f:e0:18:9f:e7:1d:d7:36:49:cc:e6:06:18:6d:
30:49:91:fc:9c:1a:ca:75:15:72:90:8f:2b:e6:dc:
cd:75:6b:dd:93:71:22:37:90:7d:75:75:0c:7b:84:
a9:c3:6c:ec:b1:3d:db:59:3a:8d:7a:6e:d8:30:8c:
a8:4e:9a:79:90:60:21:f1:8d:12:c9:2b:44:7f:f4:
12:15:70:e6:68:41:b2:2f:16:18:38:e8:7c:f6:df:
1d:26:67:97:7c:f3:f1:51:91:e0:4b:77:82:6b:7d:
f6:9d:2a:72:7b:97:74:92:dd:da:a4:28:bd:7a:5d:
0b:a0:1e:7d:f0:71:9a:70:89:85:1c:66:d7:e2:ee:
ed:ab:61:23:5d:47:2a:9a:08:7f:99:1c:36:94:b2:
42:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:49:D4:8D:D2:FB:56:8E:F2:44:30:34:9D:84:C0:09:76:18:0D:01
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QUnUjdL7Vo7yRDA0nYTACXYYDQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:08:c5:db:09:71:a0:3f:4a:27:f6:5f:6e:3b:e7:f8:9e:ee:
dc:3b:84:0a:3c:93:a2:5e:0b:ba:d4:2c:59:59:74:88:20:de:
7a:f6:6f:22:84:c6:2e:ab:95:75:55:18:83:72:b1:ab:ca:dd:
a4:81:15:d8:e6:75:1c:f1:f5:2e:34:86:a9:73:4c:01:30:68:
60:71:de:3f:d4:2e:7a:f1:b1:64:23:57:87:9f:bf:df:98:47:
22:b2:2a:b9:25:7e:43:ac:db:c0:b7:81:ee:6b:32:76:0f:2f:
a8:f6:6a:a2:d3:78:1f:d9:44:3f:ee:b6:b8:27:ee:e0:ae:e7:
07:82:24:3c:c1:4e:dc:9a:f6:0c:e0:74:32:f1:1c:91:f4:d0:
5b:52:11:c2:e4:7b:ed:6e:e5:8b:2d:c3:54:8f:de:84:50:d7:
0b:b7:39:48:2b:b2:a1:06:d1:30:ca:8b:16:83:5c:52:a0:62:
86:2d:c3:38:80:17:5e:d5:5b:99:e5:12:1a:31:e1:5f:9d:4a:
8a:b7:38:8c:95:76:1a:39:68:08:5c:a3:24:d2:67:a1:3e:3f:
d7:90:44:41:14:7c:61:17:85:f8:3b:e4:0b:fb:ab:19:60:e8:
2c:6e:db:e7:b9:ab:e4:fc:fe:a5:c0:a1:f2:95:bd:26:a5:9a:
d9:09:0b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:32:52 2025 by rpki-client