Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nQqKPuijwB9z1HdMUe2kAOAjNww.roa
File: nQqKPuijwB9z1HdMUe2kAOAjNww.roa (raw, json)
Hash identifier: 6AaAt6MWq2g3FwAU70MlnbowHlTl8XdjYI8wQ4+aa4Q=
Subject key identifier: 9D:0A:8A:3E:E8:A3:C0:1F:73:D4:77:4C:51:ED:A4:00:E0:23:37:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186511FA252C404AA731D16563D2E092052
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nQqKPuijwB9z1HdMUe2kAOAjNww.roa
Signing time: Tue 14 Feb 2023 18:11:12 +0000
ROA not before: Tue 14 Feb 2023 18:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:51:1f:a2:52:c4:04:aa:73:1d:16:56:3d:2e:09:20:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 18:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d0a8a3ee8a3c01f73d4774c51eda400e023370c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6c:30:11:24:20:6c:85:ea:db:66:aa:65:89:
bb:c4:90:60:3f:62:08:65:84:44:14:44:4a:82:3e:
2e:13:67:83:41:91:fc:31:58:be:e5:2f:5b:c7:4e:
57:dd:55:00:a4:2b:39:1c:52:65:22:b7:54:e6:25:
6e:d3:7f:92:4d:19:17:b6:81:ff:4b:25:03:e5:3e:
fa:5c:3f:4d:8a:95:d9:99:7f:bd:ae:39:ab:27:aa:
26:84:78:b5:ac:25:71:07:da:ab:0e:1d:21:05:05:
2e:cb:c6:4b:99:b9:7c:f7:f7:39:c3:3b:eb:d0:ec:
e0:6a:ed:d2:58:59:e7:13:75:6c:c6:51:3e:44:04:
61:10:67:95:f9:8b:50:7c:7e:5a:d0:c9:6a:13:60:
c7:30:01:8f:c0:c9:b7:fe:cc:53:37:3d:a7:be:58:
e8:fd:17:1a:9c:3f:76:96:31:2c:d2:54:a9:04:35:
3b:37:1a:c1:04:1c:78:e8:36:69:e5:8d:0a:ea:31:
93:31:61:05:c8:ba:d7:09:aa:44:c7:32:67:08:1a:
ab:33:78:44:69:89:b7:be:f9:6c:b3:c0:99:79:a9:
59:c9:d6:b0:8c:47:f2:d6:e9:17:96:2a:ed:bd:e9:
4b:a3:9a:94:d7:58:eb:cb:06:53:3e:60:55:8f:62:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0A:8A:3E:E8:A3:C0:1F:73:D4:77:4C:51:ED:A4:00:E0:23:37:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nQqKPuijwB9z1HdMUe2kAOAjNww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:af:59:2f:0a:d7:5c:16:35:5b:35:26:79:54:e1:8b:30:69:
29:11:27:45:26:48:5d:4c:35:63:ea:a2:07:0b:02:cb:0b:e5:
c2:fc:29:ce:7e:cc:8d:1f:1b:ca:03:68:bb:f9:47:ec:c0:83:
3e:49:67:ba:be:fd:0d:7b:26:15:83:d1:6d:f4:3f:73:12:e1:
9d:bb:d1:59:8b:e2:4b:b7:77:e8:33:3f:00:75:76:bd:67:6d:
f7:cf:77:0d:0c:d1:ef:50:d5:76:ad:f2:f7:12:b2:93:f1:2c:
8c:d3:84:4e:dc:86:d8:27:dc:3c:bf:65:a6:e5:f3:8c:e7:b3:
dd:bb:69:0e:9e:aa:62:f9:7d:d8:d1:9d:5a:af:69:9b:71:e9:
50:22:7c:0a:33:9f:35:d3:5a:2b:8f:bd:55:26:7c:9d:2d:26:
d7:71:6b:5d:71:2e:32:58:e8:77:85:29:f3:3e:af:5f:76:cd:
e9:d4:6d:d0:8b:94:b2:50:57:0e:86:96:cb:9a:0f:e7:ff:c9:
cc:93:a0:a1:7f:1d:0e:59:d5:a7:df:0d:ba:d2:f7:61:9b:af:
35:ad:89:4a:69:39:02:c6:ef:2e:e3:21:c9:d6:79:b6:72:cd:
20:58:73:21:21:db:31:f9:0f:f5:50:65:ba:ff:5c:c9:c7:bf:
ac:34:b9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:54:36 2025 by rpki-client