Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QkthfxoydIDhuhg_ZqoJJnih6_w.roa
File: QkthfxoydIDhuhg_ZqoJJnih6_w.roa (raw, json)
Hash identifier: m5NbG2oc1U4Y8rsWOysSbt0hL6dCKXM7gM1b00weL7s=
Subject key identifier: 42:4B:61:7F:1A:32:74:80:E1:BA:18:3F:66:AA:09:26:78:A1:EB:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01860AF71D8EBE407FF6C11B0E43D2F5D7B4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QkthfxoydIDhuhg_ZqoJJnih6_w.roa
Signing time: Wed 01 Feb 2023 03:13:32 +0000
ROA not before: Wed 01 Feb 2023 03:13:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0a:f7:1d:8e:be:40:7f:f6:c1:1b:0e:43:d2:f5:d7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 1 03:13:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=424b617f1a327480e1ba183f66aa092678a1ebfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:16:2a:98:b5:7f:5a:4a:4e:f7:14:34:52:
f7:55:d3:88:ac:2c:ad:b0:26:9c:92:25:b8:4e:1e:
13:fb:de:45:86:20:92:3e:68:a7:45:f4:1f:4a:e0:
6a:13:25:f7:a0:2e:bf:4f:47:81:23:51:38:16:3c:
4a:e3:64:5f:52:33:9c:9b:7d:ee:f0:f2:6b:9e:5d:
4f:de:1f:c4:00:5f:9e:0d:20:b9:91:a5:47:d2:57:
55:d5:6c:38:b2:f4:12:f2:1e:f2:8c:82:a5:ab:b5:
95:0a:4f:42:fa:5b:42:b7:bb:17:53:8e:cb:4d:ba:
89:fa:e2:34:e5:65:1b:59:ee:64:26:81:87:4b:01:
a3:97:08:9a:04:c2:cc:db:40:5d:bd:cd:fd:53:1e:
07:98:c0:da:ff:8c:a7:68:fa:d0:21:9d:63:5e:70:
5e:e5:59:7d:4f:5a:82:0a:6f:4e:fc:8f:fc:d3:ad:
b5:1e:26:e9:58:eb:a0:8a:b9:a0:e9:61:0c:55:81:
52:ec:0f:41:0d:c2:cd:17:5b:08:fe:78:70:7c:7c:
73:3d:95:4c:1c:88:ff:85:02:e2:31:9b:fd:c6:94:
13:ed:17:f2:e9:53:6b:fd:c1:22:07:ab:e7:af:cf:
9b:b7:35:c8:bf:4c:2e:a8:df:f8:9e:aa:89:78:b0:
54:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4B:61:7F:1A:32:74:80:E1:BA:18:3F:66:AA:09:26:78:A1:EB:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QkthfxoydIDhuhg_ZqoJJnih6_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:c0:b0:79:6a:d2:94:f5:54:c5:f1:c4:d2:35:19:52:32:fb:
01:be:76:61:70:27:c8:77:80:c5:b9:95:f6:1e:11:e2:0d:b5:
c9:94:a8:22:9f:77:51:6c:a3:8e:52:f8:2e:83:83:30:ab:df:
49:a7:0d:89:a3:6b:bc:5a:7b:e4:a1:0d:5b:9e:0a:fb:4e:29:
92:3a:14:af:49:df:80:ba:3e:e2:f9:ce:88:9f:dd:3f:a8:b1:
00:5e:ee:1e:9d:59:a9:41:b2:fc:c6:91:28:5e:7d:82:38:b1:
c1:f2:93:6a:fa:61:06:08:cc:75:af:09:70:5b:0f:6e:d8:94:
48:67:7b:d2:97:90:b5:5b:69:13:ef:fd:98:d2:16:a8:e8:95:
51:8b:f7:93:00:fe:6f:5f:12:e4:c1:e9:72:82:26:5f:27:2e:
19:a4:45:ad:f1:d3:04:d4:49:88:2a:85:df:e2:38:c9:70:f5:
d3:01:1e:1e:c0:91:9e:3c:db:64:b5:41:21:9c:7c:f0:50:1d:
0a:3e:35:c8:cd:49:7b:9e:a6:d2:48:75:b3:30:41:fd:f8:15:
a4:50:32:cc:e6:6b:b6:72:64:ca:29:c6:90:d9:c6:ca:bb:a8:
26:ec:7f:ab:17:8a:ab:45:8b:e1:ab:b3:21:9d:71:4e:49:4e:
fc:d3:4c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:39:32 2025 by rpki-client