Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qLlMLGFB6eUVFNfkaW45k_XIZCw.roa
File: qLlMLGFB6eUVFNfkaW45k_XIZCw.roa (raw, json)
Hash identifier: x4eGd7i2UgAWYJFLT8GNbIgpOtcyiBEXZfKeP07kSpE=
Subject key identifier: A8:B9:4C:2C:61:41:E9:E5:15:14:D7:E4:69:6E:39:93:F5:C8:64:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018231690BA58C8C7354D27ED78963812A29
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qLlMLGFB6eUVFNfkaW45k_XIZCw.roa
Signing time: Sun 24 Jul 2022 18:12:23 +0000
ROA not before: Sun 24 Jul 2022 18:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:31:69:0b:a5:8c:8c:73:54:d2:7e:d7:89:63:81:2a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 18:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8b94c2c6141e9e51514d7e4696e3993f5c8642c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:04:2b:c3:de:55:73:50:c0:33:82:4c:46:3d:
52:03:04:0d:f0:d5:4d:9d:42:7c:df:64:27:7b:f1:
1f:99:e0:77:a7:fd:9b:3e:01:3b:c2:df:1c:8a:4e:
1e:98:96:10:a5:bb:e9:41:47:9c:7a:4d:8e:31:60:
35:0f:65:89:bf:51:59:23:d0:d7:67:6d:17:3c:1a:
35:c0:1a:42:55:6c:34:e3:a1:f5:2d:a4:b3:ed:c0:
7c:af:4b:10:68:96:73:b0:cb:b6:e6:17:21:55:a1:
f8:74:c8:45:c1:b3:85:51:ff:bf:f0:b9:11:e8:0a:
f1:f5:83:d8:ed:24:f4:db:38:1f:12:00:43:d2:4d:
5d:a1:58:59:3a:4b:14:96:bc:29:45:85:d1:ca:79:
02:b5:0f:51:d6:5a:ae:5c:3f:f6:1c:b5:b1:79:9a:
bb:df:d8:52:b8:a1:f5:44:7d:8e:3d:89:5e:d1:37:
ea:e3:30:a6:c0:6c:fa:ac:d2:37:6c:22:17:35:bf:
08:3e:c1:89:8b:7c:e1:dd:fb:54:e2:85:a4:aa:ed:
ba:34:1f:b4:27:23:f6:19:cb:bc:ba:ab:ec:93:61:
3a:74:09:9a:57:1e:02:dd:df:17:58:09:2b:41:5c:
e5:c8:80:87:33:13:4f:5d:8b:75:1f:fc:e6:96:a9:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B9:4C:2C:61:41:E9:E5:15:14:D7:E4:69:6E:39:93:F5:C8:64:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qLlMLGFB6eUVFNfkaW45k_XIZCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:07:d9:f9:bf:cc:2e:ab:e3:ae:d4:01:61:4a:17:48:be:73:
4d:91:74:46:bf:e5:82:93:1b:0f:91:55:5c:da:f6:57:20:ea:
35:03:6f:52:2a:6d:be:66:61:0d:d9:9d:88:d7:77:47:e3:1a:
6b:39:85:24:25:36:99:6f:c8:e9:57:6b:aa:90:b5:1f:42:fc:
61:14:97:cb:64:6a:2e:9b:02:51:a1:66:94:a1:98:18:b3:ec:
ca:dc:fa:fe:a5:5f:09:71:f6:8c:a5:f3:a8:af:5d:70:f2:63:
6b:dc:e2:51:60:55:c4:c2:0f:8b:2d:3a:f7:a8:89:36:84:9d:
4a:15:ec:a7:44:77:94:d4:bc:64:0f:97:d9:55:49:85:6b:0d:
15:24:38:9c:5a:d6:18:9a:c9:50:db:c3:8e:92:1b:df:62:b3:
11:1d:e6:55:c7:bf:c9:4b:55:f6:a0:0e:81:ce:99:b7:9d:09:
83:d8:cf:94:ae:4d:30:0a:fe:3e:ba:a7:7f:bd:69:57:c3:4c:
6c:a0:5f:a3:32:4d:8e:b2:50:cd:44:6c:c9:ca:8f:0b:79:21:
73:4a:23:70:f4:ff:5d:88:b0:00:11:8f:34:dc:9c:10:22:62:
b6:57:10:3a:0d:50:80:e1:af:3f:28:c2:5d:db:fc:de:c3:3a:
a8:7c:d8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:00:54 2025 by rpki-client