Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q6NJQC1h1iPcrgko8vBe1n9Yqxo.roa
File: q6NJQC1h1iPcrgko8vBe1n9Yqxo.roa (raw, json)
Hash identifier: HThzrbh9QwkL88fxaAjK0UJbSz8ywwDQMxntYkW4UTE=
Subject key identifier: AB:A3:49:40:2D:61:D6:23:DC:AE:09:28:F2:F0:5E:D6:7F:58:AB:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 901DC0CA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q6NJQC1h1iPcrgko8vBe1n9Yqxo.roa
Signing time: Sun 26 Jun 2022 23:11:40 +0000
ROA not before: Sun 26 Jun 2022 23:11:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2417869002 (0x901dc0ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 26 23:11:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aba349402d61d623dcae0928f2f05ed67f58ab1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:25:6a:dc:36:41:f2:5b:56:32:27:36:02:
d9:8c:25:fd:2d:8b:7b:ac:24:b7:31:62:cf:63:88:
21:9a:e7:78:59:79:f5:ac:c4:f9:54:86:8d:29:08:
43:25:d1:ee:64:01:44:e9:af:90:4d:88:98:f1:f6:
33:93:88:f1:36:0a:c6:b8:32:a6:4d:5e:9e:6b:3a:
79:5e:03:9d:8d:74:dd:7c:c5:c0:22:b5:52:08:b1:
9c:9b:c7:74:0b:92:11:71:fb:6a:c4:97:42:d8:b8:
3b:73:ca:1e:8f:82:fd:4b:4d:1a:e1:6e:4d:da:0e:
d7:79:fb:b9:f9:9a:2c:27:29:ae:93:6d:ad:e8:cc:
90:69:28:09:aa:45:33:c4:62:3d:e7:db:6d:65:e6:
57:1c:e1:f6:46:3c:d5:e2:21:52:07:6f:f6:df:4d:
dd:59:de:6e:8f:60:39:91:95:06:f8:38:f3:0b:ba:
fa:8e:64:94:13:d4:20:eb:d7:d4:b8:5b:e8:d7:0c:
74:20:ec:ed:3a:b1:c3:60:da:ec:41:9d:21:22:2c:
53:d0:a1:21:69:1e:91:8f:b3:a7:3d:ef:26:9e:51:
b2:c9:16:65:2b:39:26:d4:de:79:bd:6c:1d:d3:4c:
03:71:14:b1:38:23:17:ab:8b:ee:e9:aa:79:1b:70:
b7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A3:49:40:2D:61:D6:23:DC:AE:09:28:F2:F0:5E:D6:7F:58:AB:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q6NJQC1h1iPcrgko8vBe1n9Yqxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:c3:cc:20:a8:49:fe:a4:b5:d6:4d:1b:e4:a9:5d:5a:3d:f9:
d6:2a:32:c1:b8:7f:e3:48:77:be:a3:e4:c2:e5:5d:18:de:f4:
e8:b2:1f:a0:14:82:5a:1f:3b:1f:92:94:e3:a3:6d:1e:e1:7e:
6a:74:59:82:80:bd:c4:c1:c4:74:ba:47:80:e1:86:ed:d0:f9:
7d:da:3c:d3:bb:c7:29:c0:36:cc:db:89:7e:c6:24:47:6c:c1:
29:e1:97:89:b6:84:27:94:12:3c:80:c9:3e:26:b6:4c:c2:d9:
68:6a:cb:4c:22:d3:9e:7e:5e:75:e0:16:28:29:a9:99:6a:e1:
b6:de:bd:2b:ce:33:f9:8d:2b:7f:1e:77:28:9e:9a:f2:42:9a:
15:54:2a:45:48:b8:21:36:b7:ba:dc:74:56:30:8d:6f:5f:18:
0c:7f:a7:bf:62:d5:cb:b5:34:52:35:59:97:8f:10:0e:70:38:
20:e9:82:98:16:de:fe:e7:8b:00:30:81:51:e6:9a:46:64:f4:
56:95:7d:ec:e6:c2:05:12:35:2f:28:4c:2c:0f:4e:d5:f4:49:
0c:99:a9:66:37:02:f7:78:ef:77:72:64:bd:c2:6f:a5:5d:7c:
06:0f:76:95:51:0b:48:2a:9d:97:04:42:24:26:cc:72:f8:00:
55:e0:44:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:08:55 2025 by rpki-client