Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QbyWy9roN8nZDFR25pl_HpHbe7c.roa
File: QbyWy9roN8nZDFR25pl_HpHbe7c.roa (raw, json)
Hash identifier: J5P0+WJVWth6QMFKZTSMExhuU7+7uKmgltGDX+Z9qmQ=
Subject key identifier: 41:BC:96:CB:DA:E8:37:C9:D9:0C:54:76:E6:99:7F:1E:91:DB:7B:B7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8AED8D2A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QbyWy9roN8nZDFR25pl_HpHbe7c.roa
Signing time: Wed 08 Jun 2022 07:12:02 +0000
ROA not before: Wed 08 Jun 2022 07:12:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2330823978 (0x8aed8d2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 07:12:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41bc96cbdae837c9d90c5476e6997f1e91db7bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:ca:9b:2b:72:5e:89:e2:39:8e:be:47:09:
5b:f9:45:7d:ca:9b:82:4d:fa:e8:ed:e0:8f:df:72:
dc:6a:1d:67:2b:41:44:fb:92:bd:19:14:b9:29:ae:
45:78:99:f8:c2:67:6c:ce:a5:2b:26:47:7f:1d:2a:
dc:0f:fa:96:76:df:08:a9:73:ee:87:16:18:32:85:
d1:27:de:62:b0:6e:84:aa:7a:74:e6:e4:aa:e6:d8:
67:58:80:de:b8:b5:06:94:56:02:73:4c:b2:7b:aa:
e8:f4:dc:ef:e8:59:60:cc:ce:cc:56:f3:c3:f3:fb:
64:97:ad:46:ee:d2:6b:c9:17:7e:2c:98:4d:1b:76:
31:cd:3e:c4:44:48:6c:4e:25:d8:bd:71:bf:6e:b1:
f1:99:50:cc:e4:43:95:c5:a3:31:60:5b:6e:59:a2:
0a:22:09:38:6a:05:bb:17:ba:f7:44:80:45:4f:0b:
98:86:83:dd:1f:fa:71:76:3b:43:22:6d:53:1a:66:
df:9c:72:5a:59:ae:57:2f:7e:6d:8c:11:b2:8a:99:
b3:96:f2:08:55:c1:42:06:99:a8:2b:43:3c:ba:d4:
f8:ee:f7:2a:a3:26:9b:6f:7e:02:44:f1:58:9e:74:
fb:e1:13:be:5c:25:0a:85:14:33:d9:9e:fd:6c:6e:
65:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BC:96:CB:DA:E8:37:C9:D9:0C:54:76:E6:99:7F:1E:91:DB:7B:B7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QbyWy9roN8nZDFR25pl_HpHbe7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:74:90:32:b9:91:6e:34:f2:48:61:cb:52:ce:1e:1e:d7:e7:
39:78:6a:78:75:18:46:c3:34:09:00:c3:10:96:9d:7e:c4:a7:
26:8d:30:c3:dd:91:36:45:0e:72:ff:5d:e9:12:47:fc:c6:ea:
72:45:14:88:4a:85:fe:66:2f:68:8c:5d:38:3c:84:68:69:3f:
6f:dc:4c:cd:fe:ea:c3:07:d7:68:9d:66:e2:2d:72:5a:0c:c3:
2d:10:66:b7:58:a4:88:f3:9b:98:51:ea:5c:21:38:dc:68:52:
18:fe:26:00:de:9c:b8:b0:fa:b9:7b:24:17:28:55:09:96:25:
66:8a:54:a3:a0:f5:8c:43:b5:ac:b5:cb:8b:22:a3:54:69:42:
1c:13:57:3a:40:67:0d:cf:01:db:9d:00:98:11:ed:4d:04:a8:
dc:07:e3:07:1d:88:1d:91:be:20:a8:bc:d2:93:fe:4f:31:bc:
5b:64:9e:1f:bb:51:67:02:5d:e2:a3:61:a8:d6:76:81:2a:42:
ba:9d:d7:f7:83:d3:8f:5a:8b:f5:df:35:21:ff:77:04:fd:ba:
47:b3:37:27:c7:31:61:a4:a1:ab:3b:8a:50:40:3c:d7:9e:b5:
63:71:63:10:5b:f6:31:12:15:3f:2f:f2:9c:f9:a7:88:6e:0e:
ec:ed:2a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:35 2025 by rpki-client