Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nQJkfNqqmfjYn2jqZ5Na9foqIAs.roa
File: nQJkfNqqmfjYn2jqZ5Na9foqIAs.roa (raw, json)
Hash identifier: TwW8Kc8yvwZHv5ExYnqiTWb47/0WBXRTiOd6PlmmEV8=
Subject key identifier: 9D:02:64:7C:DA:AA:99:F8:D8:9F:68:EA:67:93:5A:F5:FA:2A:20:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181F99CC645E2B7ACDCCF4C354007CB0C52
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nQJkfNqqmfjYn2jqZ5Na9foqIAs.roa
Signing time: Wed 13 Jul 2022 22:10:10 +0000
ROA not before: Wed 13 Jul 2022 22:10:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f9:9c:c6:45:e2:b7:ac:dc:cf:4c:35:40:07:cb:0c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 22:10:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d02647cdaaa99f8d89f68ea67935af5fa2a200b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:75:50:39:02:42:31:b8:a2:26:ff:14:26:
1c:91:11:c6:0e:86:6d:7a:c0:85:ad:1e:e8:ea:c0:
fc:e1:34:12:3b:6d:7c:ff:b9:81:e2:1a:d1:7e:ac:
a8:0d:3f:4d:29:e2:fa:bf:11:c6:16:f1:fd:6f:ad:
61:81:d7:d8:bf:e5:e7:9a:c9:f0:34:b6:e7:0e:31:
e6:b0:4b:c4:03:65:7d:4e:73:d0:e7:27:8f:2b:e7:
f6:de:db:66:7e:67:8b:dd:3f:d2:d1:8a:b8:0c:26:
41:af:e6:da:a6:93:f0:8c:7e:21:95:9d:da:b8:ce:
35:91:c3:23:40:f9:54:de:64:93:61:d5:8a:d3:3c:
38:bc:0e:61:20:fc:7b:f1:01:fd:1c:50:09:09:98:
d7:d9:b4:db:54:67:55:16:46:1b:5b:b9:08:69:86:
b9:f6:d4:43:fb:4a:cf:77:86:1c:9c:3a:15:c5:40:
be:2f:72:72:2d:b9:e3:19:c9:82:2f:f0:7c:6a:e0:
8f:2d:e2:f9:4d:3f:6f:88:cb:46:1b:6d:a9:08:96:
20:b5:ef:a8:f1:18:92:95:e9:ea:d0:22:7c:3c:b5:
83:71:23:38:9e:5d:24:48:65:81:33:3b:3b:76:eb:
1a:04:f1:04:e1:d4:7f:4b:cb:ba:52:a5:35:7e:3e:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:02:64:7C:DA:AA:99:F8:D8:9F:68:EA:67:93:5A:F5:FA:2A:20:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nQJkfNqqmfjYn2jqZ5Na9foqIAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:ee:ca:c2:ad:24:89:8d:c1:f4:2c:27:37:40:11:f2:64:d4:
9e:ba:17:98:1e:f2:f2:57:30:44:b8:80:fe:e3:25:24:13:5c:
40:da:67:9b:f3:06:d6:8c:c1:62:c3:42:93:22:89:2c:26:c5:
2c:ac:84:e3:1e:7d:a9:04:08:41:37:fe:53:b9:f6:97:f2:50:
d1:e4:bb:75:27:a8:15:86:ba:b0:96:39:8f:c4:76:a4:52:3c:
fa:d1:e0:aa:c3:9d:f7:05:14:58:6e:54:60:6c:09:92:a9:34:
13:3d:d7:8a:0d:90:02:5e:37:bf:f4:df:f9:f2:0d:57:19:40:
2a:0f:38:be:69:5d:49:5a:29:18:6b:5d:cd:4d:31:9e:14:74:
4c:36:c1:d2:4b:96:0b:f2:52:24:dc:98:0f:8c:f8:e8:ec:81:
64:8c:d7:58:33:77:e2:88:a9:4b:0e:90:5c:6b:d1:be:c8:9b:
e0:38:03:32:7f:fe:b0:ac:c8:97:fb:f7:a9:b8:ec:21:b0:7b:
11:ff:23:89:df:77:ee:ad:70:df:51:17:44:09:a9:7c:a4:7a:
8e:75:c6:ec:18:83:0a:b4:af:2c:d4:1f:16:c5:1d:8b:df:63:
27:5a:b5:fb:63:40:94:a8:09:59:b8:14:64:21:7d:97:2b:cf:
fd:38:77:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:31:34 2025 by rpki-client