Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QXgTqcBxKF16Ju7JiYZ5YRIcFhI.roa
File: QXgTqcBxKF16Ju7JiYZ5YRIcFhI.roa (raw, json)
Hash identifier: DP5Z11FEaIvYObvO1bz2UMVfDOntVtZMhqhTzcGpf20=
Subject key identifier: 41:78:13:A9:C0:71:28:5D:7A:26:EE:C9:89:86:79:61:12:1C:16:12
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6C4F6F92
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QXgTqcBxKF16Ju7JiYZ5YRIcFhI.roa
Signing time: Sun 20 Feb 2022 18:04:39 +0000
ROA not before: Sun 20 Feb 2022 18:04:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:184e:9af4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1817145234 (0x6c4f6f92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 18:04:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=417813a9c071285d7a26eec989867961121c1612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:86:ed:fb:ea:ae:0e:0f:ff:46:bd:03:62:
13:4f:5f:57:83:ae:23:f0:76:ef:57:b2:b2:52:16:
21:bf:61:d1:0c:d1:47:9c:a8:10:1b:0a:42:3e:58:
9c:98:42:17:80:ff:a8:45:ab:58:e0:df:df:85:1e:
fe:13:bb:62:fa:81:ee:c8:05:41:c4:c3:7f:b3:4e:
fd:6f:db:ae:67:9c:e7:6b:d6:26:11:0f:d6:15:6d:
04:b3:2f:ca:67:47:0e:f6:72:75:00:03:a6:da:5e:
48:8c:2e:a5:62:b6:c1:f7:d0:9a:34:b4:41:5c:d3:
aa:9a:10:e0:1a:1a:b5:7c:81:31:cb:2e:97:db:94:
33:87:ea:4a:ab:87:5d:cd:c0:75:62:c9:36:6f:86:
c6:e3:90:b1:09:0e:0e:02:0a:a5:44:bb:5d:28:94:
6f:57:91:b8:b4:6b:c3:41:81:3f:6b:6d:82:2b:a1:
a0:a1:9e:64:80:1b:dd:86:50:05:be:6d:93:0a:fb:
d4:1d:7e:28:83:6e:71:4d:ff:5f:35:18:fc:bf:ed:
a7:78:18:3f:b5:5d:5a:e6:f4:ee:75:2c:80:49:70:
8f:61:33:63:c5:d2:63:a7:8d:e7:8c:9d:2d:0f:5c:
5e:a8:0c:24:a0:3a:27:d6:c0:07:01:0c:f2:6a:32:
de:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:78:13:A9:C0:71:28:5D:7A:26:EE:C9:89:86:79:61:12:1C:16:12
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QXgTqcBxKF16Ju7JiYZ5YRIcFhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:df:da:bf:54:9c:4a:e8:de:69:ed:ba:0e:7c:d8:c4:65:07:
33:cb:81:70:e9:d9:81:d9:87:85:84:ff:e5:92:f0:46:d3:f6:
63:34:56:16:0a:38:87:12:35:d5:24:46:e0:e4:83:69:95:b3:
6c:87:8a:c5:37:9b:68:97:0c:72:d8:df:b3:27:61:29:82:6e:
57:3e:fd:cd:15:e9:13:e6:dd:2c:d9:37:53:db:ce:40:ac:f8:
b3:0a:43:31:7d:77:1d:48:1e:19:b9:ff:76:14:1c:70:43:49:
d4:20:cf:4c:3c:67:ac:71:68:84:6a:87:20:0b:18:70:7d:ad:
51:8d:03:32:ec:45:64:68:fd:2e:bb:c9:56:a7:6a:f1:b2:3e:
1d:02:29:a6:56:a0:6b:62:11:08:19:2b:0f:07:87:28:de:66:
46:9a:a9:e6:b3:42:82:eb:12:25:d5:2c:80:63:77:fc:4a:8c:
89:0c:a0:ac:63:2d:de:b8:9f:a4:7c:0a:41:57:f9:91:01:b9:
12:75:1a:e3:57:98:12:13:d5:42:60:e0:9a:51:29:b4:05:b3:
48:2a:b3:a3:76:ae:ab:3d:d8:f8:2e:0e:d4:9e:b4:75:0c:9a:
8a:6f:19:f4:20:c5:a2:69:c2:e9:97:97:10:64:86:b9:90:82:
e9:46:9a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:57:57 2025 by rpki-client