Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q4XUSbWbn2t05qGycfhIDv-LFOY.roa
File: q4XUSbWbn2t05qGycfhIDv-LFOY.roa (raw, json)
Hash identifier: tcGmid2Py2ts7lxBNaQSWfQmUoZ0eBUec0BSsGD7FRU=
Subject key identifier: AB:85:D4:49:B5:9B:9F:6B:74:E6:A1:B2:71:F8:48:0E:FF:8B:14:E6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01853271A1BF297E5F8ED134D712B827840F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q4XUSbWbn2t05qGycfhIDv-LFOY.roa
Signing time: Wed 21 Dec 2022 02:09:45 +0000
ROA not before: Wed 21 Dec 2022 02:09:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:32:71:a1:bf:29:7e:5f:8e:d1:34:d7:12:b8:27:84:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 21 02:09:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab85d449b59b9f6b74e6a1b271f8480eff8b14e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:8d:a8:6d:ec:bc:12:37:31:49:fc:62:02:
f8:ff:7f:4d:d4:2f:dd:1e:e1:3f:81:11:b2:c2:3b:
5b:cd:ee:e3:42:53:b6:e4:82:ac:f5:d8:21:4d:87:
f8:91:71:18:c2:88:82:40:25:c0:57:3e:08:66:c3:
4e:e6:ba:76:d8:cf:7f:6e:3b:32:ef:7e:85:bc:32:
b3:1a:b6:c0:34:c3:30:76:25:e4:b3:74:f3:04:56:
4b:4a:4d:90:60:df:2e:e6:76:f2:f8:6b:f1:c5:e3:
33:ec:b4:78:d9:3e:49:e0:78:91:05:a2:b8:7f:83:
e5:a2:c7:91:9e:b7:f4:32:f1:8d:ba:c2:d6:7f:92:
99:0a:f3:39:4a:92:2b:ea:ed:b9:e8:0d:c3:c9:7e:
29:d6:a3:ea:3f:4a:ba:42:e0:b5:e9:ac:a7:02:c1:
1c:18:49:cd:8f:07:3b:c8:de:28:75:a0:41:23:f3:
28:25:ee:9a:51:d5:68:80:99:bf:c7:5b:0d:cd:9c:
6e:22:2b:f6:c9:dc:96:ed:09:d3:14:d3:dd:2a:16:
f3:ff:c9:5e:e2:8b:12:56:ea:d7:8d:87:ca:08:b1:
ff:12:8e:d2:4a:36:93:76:f7:68:73:5e:4f:6b:73:
96:f4:69:65:28:38:65:f2:e3:5e:e8:dd:9f:a1:0a:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:85:D4:49:B5:9B:9F:6B:74:E6:A1:B2:71:F8:48:0E:FF:8B:14:E6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q4XUSbWbn2t05qGycfhIDv-LFOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:e5:cb:2d:4a:28:9a:11:82:67:b1:aa:c6:71:fd:0f:72:c7:
d3:01:57:c7:92:d8:a4:a0:84:52:55:3d:6c:e8:30:fa:e0:39:
65:a0:16:51:4b:cc:9c:45:6a:91:1b:d0:1f:c1:2c:45:a9:2a:
a4:55:4d:47:5d:77:99:fc:5b:52:d0:10:70:1b:61:73:63:1c:
53:d4:a9:9b:66:04:f2:28:a5:c5:45:7b:20:84:53:6c:02:c7:
38:ea:6d:34:10:20:8b:1e:92:7f:4b:10:97:c2:70:02:71:21:
81:f6:aa:74:79:99:8e:20:c7:01:7d:55:e1:79:df:98:d0:f1:
f6:87:e9:0b:57:e3:4f:c8:dc:09:06:c2:ce:97:c4:4b:a6:75:
4d:a4:f3:5f:a6:da:3f:a8:56:ac:34:67:23:f9:69:ed:82:7f:
16:5e:bb:6b:9d:46:37:32:bf:90:cd:e6:8a:b5:ee:48:c9:84:
2c:dc:8a:18:b6:a7:b7:fc:e2:40:a6:73:66:06:15:18:f5:40:
d1:76:16:2b:50:ca:6b:eb:16:50:50:39:33:7f:9d:58:5d:e1:
34:1f:e5:3d:aa:42:39:b0:40:2b:37:33:5c:e3:5b:23:f7:76:
ae:20:04:1d:c9:17:8e:0d:3c:29:84:06:44:2a:21:3d:70:9c:
df:71:ba:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:28:10 2025 by rpki-client