Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qmn-h2azyTjaOPwMEXm9F_11EJ0.roa
File: Qmn-h2azyTjaOPwMEXm9F_11EJ0.roa (raw, json)
Hash identifier: 4h2qg/+zTmlfq28z7itTjkZZbxkdmE3VZYNNsdN0nYk=
Subject key identifier: 42:69:FE:87:66:B3:C9:38:DA:38:FC:0C:11:79:BD:17:FD:75:10:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182F95EE78349163B2F07923440D3B31A72
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qmn-h2azyTjaOPwMEXm9F_11EJ0.roa
Signing time: Thu 01 Sep 2022 14:05:22 +0000
ROA not before: Thu 01 Sep 2022 14:05:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:f95e:5402/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f9:5e:e7:83:49:16:3b:2f:07:92:34:40:d3:b3:1a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 1 14:05:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4269fe8766b3c938da38fc0c1179bd17fd75109d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:fc:d2:10:c8:ae:c8:8c:ec:52:fd:2d:0c:
7a:ad:8f:a0:f7:04:4a:27:94:bc:c4:a2:9f:c2:69:
be:94:6b:60:62:d1:4c:e8:44:3c:a2:d8:93:22:ae:
f2:be:18:4d:39:d4:f8:04:7d:96:d9:95:bb:d3:c5:
a7:5c:82:7a:67:ba:dc:ff:fa:5b:99:7b:89:2d:66:
19:b8:55:37:18:9c:a7:78:e2:67:96:2a:70:40:a2:
1d:70:a7:78:95:b0:1a:e1:6c:40:ce:c2:f6:d2:9a:
94:3d:ba:c3:9e:bf:98:95:80:8e:25:52:58:e6:33:
2c:a2:40:52:1a:60:9a:a2:6f:42:52:a1:4e:60:d6:
55:90:a1:cf:77:8b:1b:c7:56:fb:52:90:a3:f7:91:
3d:5d:56:e0:a4:a1:c9:31:3f:0b:e5:02:0e:bb:eb:
44:38:b3:f3:9d:6d:bb:ed:98:31:4d:1f:64:72:8b:
41:b2:e1:97:8b:b4:28:c3:c9:46:87:5c:8c:42:69:
16:6f:9b:05:2e:11:c0:4d:d3:66:3c:5a:9e:e7:29:
54:95:a1:ef:94:d9:a3:5e:38:4e:56:ef:ba:7e:1d:
cb:f5:36:c2:2b:87:83:76:e4:c6:a8:79:55:8b:a3:
d3:f3:ad:d9:2d:07:7e:7d:17:b5:ee:83:25:9f:8b:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:69:FE:87:66:B3:C9:38:DA:38:FC:0C:11:79:BD:17:FD:75:10:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qmn-h2azyTjaOPwMEXm9F_11EJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:85:f7:03:7e:71:4c:ed:a7:8c:14:91:82:19:2b:2b:4a:ba:
b9:0c:b5:9c:0c:e3:53:d5:b3:1e:ac:bf:cd:06:5d:42:aa:fd:
b8:95:e4:ad:37:20:eb:8c:5d:b0:dc:4f:eb:cc:52:0d:59:03:
52:e9:70:19:4d:34:7d:ac:3c:aa:15:1a:c6:9b:94:24:58:ce:
75:0c:1a:67:9c:43:07:26:c6:06:1d:28:40:ad:ef:e4:b5:ae:
4b:b7:8e:28:88:f8:75:f9:4a:97:37:d4:f6:c6:9b:75:95:64:
34:6b:69:f9:01:8e:ce:93:f9:b3:1e:51:45:8d:0e:2e:0b:a1:
df:a0:11:08:19:35:91:14:48:89:e5:54:04:5e:9a:fe:fb:ec:
b5:4c:f8:c4:bc:58:b9:d9:cd:02:57:ac:d4:6b:aa:f2:7d:45:
24:f2:d0:f8:52:5e:4d:89:74:cd:7b:1a:94:75:7d:06:52:7f:
d8:65:fb:1e:25:4e:88:25:03:c8:a6:ab:06:4f:92:41:e5:0c:
bd:64:e1:78:68:dd:74:15:55:93:80:98:43:09:2f:cb:99:8c:
23:f6:9a:4c:ae:c0:2d:db:76:54:88:2b:2c:3f:60:cb:82:37:
99:e6:3b:80:51:49:06:dd:45:d5:32:82:d0:68:9f:d2:d4:46:
4c:39:4e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:24:09 2025 by rpki-client