Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Q2Mgq9QiFDIjuWEkCrSmBcUiJI.roa
File: _Q2Mgq9QiFDIjuWEkCrSmBcUiJI.roa (raw, json)
Hash identifier: N4aMghHtRI8+KuVHYWzTnf1P2AFzeoV4/26FfGKcCm4=
Subject key identifier: FD:0D:8C:82:AF:50:88:50:C8:8E:E5:84:90:2A:D2:98:17:14:88:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E119B55FADE61853BFF7604C823ECD1C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Q2Mgq9QiFDIjuWEkCrSmBcUiJI.roa
Signing time: Mon 05 Dec 2022 07:04:29 +0000
ROA not before: Mon 05 Dec 2022 07:04:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:e119:a417/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e1:19:b5:5f:ad:e6:18:53:bf:f7:60:4c:82:3e:cd:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 07:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd0d8c82af508850c88ee584902ad29817148892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:08:f9:bc:17:20:ce:3d:3e:32:d0:09:83:e4:
7e:9b:75:4a:91:b9:f8:9e:e4:f6:67:ad:58:3f:2e:
85:49:2e:6d:ca:8b:ea:87:40:6e:03:17:be:1b:91:
5c:5e:4b:0b:10:37:b2:24:1f:07:05:56:79:16:0b:
40:8c:40:5b:06:89:7d:04:22:8d:a2:68:dd:aa:0b:
9a:fb:38:79:6a:c7:e5:f4:8c:91:87:65:ea:34:be:
cb:11:7a:9e:8f:da:ee:7b:24:d8:f4:37:b9:c3:72:
99:2c:6e:0b:18:eb:37:c1:b8:31:b4:35:23:7e:95:
b1:e9:78:f9:e3:e9:cf:70:69:ea:c9:b9:c6:fd:e2:
55:0b:a3:03:1a:ed:c8:15:3d:44:9b:86:89:2a:9f:
ab:b6:bc:2d:bc:30:e6:10:03:0b:14:d9:55:6f:b0:
12:d2:91:01:9c:21:b5:30:58:2d:48:e1:04:c4:e6:
be:7b:e3:5d:2d:1f:95:30:e6:7c:df:98:e5:04:71:
bb:a3:0a:35:15:be:db:be:9e:ee:a7:de:ca:65:31:
76:4f:23:3c:cc:24:76:04:5e:00:cb:30:b2:cb:39:
1e:dd:66:49:2f:67:56:ac:9c:75:28:a5:82:d7:7b:
64:c8:19:5b:83:4b:c4:b5:9a:e3:a8:b1:fd:a8:9e:
a6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0D:8C:82:AF:50:88:50:C8:8E:E5:84:90:2A:D2:98:17:14:88:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Q2Mgq9QiFDIjuWEkCrSmBcUiJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:83:29:94:cc:de:60:5c:2f:4f:fc:fd:f6:f7:03:46:f5:e7:
47:cf:14:9c:0a:cc:8d:9a:ad:29:8d:d3:26:3f:9d:36:9e:67:
5f:d0:8b:b4:f0:71:82:7d:52:22:8d:c3:75:d7:a7:e5:2c:60:
83:e5:7a:a0:b5:cf:4a:f3:ff:a8:4a:d8:53:cd:18:42:6c:44:
46:af:4e:87:97:16:50:bf:fc:51:30:5b:06:85:db:a1:0e:de:
21:d3:4b:2e:2e:71:80:97:f1:85:b4:9b:5c:c4:b3:ef:a5:c3:
8f:b1:dd:87:b8:1c:82:16:32:0f:d1:73:53:eb:34:dd:a2:fd:
4b:ef:5c:1e:b0:1d:fe:3c:13:80:54:37:54:40:3e:42:9c:50:
ed:f4:22:5a:58:d5:87:ae:f8:0c:ef:30:95:1a:c2:38:a1:8b:
53:aa:84:0b:05:14:b1:63:65:c2:f1:ef:9f:89:85:b9:66:56:
bf:23:23:bd:a8:ef:ac:2c:a7:88:8b:53:36:b4:e8:48:23:d8:
ad:c4:6d:b3:f3:80:d7:15:3a:6c:f2:0f:6c:52:2a:01:67:70:
b2:35:24:d9:8f:80:cd:12:15:19:58:da:a0:80:ff:3d:0b:57:
7a:6d:a0:2d:ec:1a:f0:07:59:88:c2:a0:39:49:51:9e:10:48:
04:ea:c7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:35:08 2025 by rpki-client