Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qUQf39gfxqAHeYRki72nPce2KJQ.roa
File: qUQf39gfxqAHeYRki72nPce2KJQ.roa (raw, json)
Hash identifier: fATS0CXUOFOLGCR73Sz3nLuA1udxOytnuSIRNEFRU6M=
Subject key identifier: A9:44:1F:DF:D8:1F:C6:A0:07:79:84:64:8B:BD:A7:3D:C7:B6:28:94
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 78384D20
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qUQf39gfxqAHeYRki72nPce2KJQ.roa
Signing time: Mon 04 Apr 2022 00:11:01 +0000
ROA not before: Mon 04 Apr 2022 00:11:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2016955680 (0x78384d20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 4 00:11:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9441fdfd81fc6a0077984648bbda73dc7b62894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:26:52:ae:80:db:91:e3:0f:ca:f6:16:f3:
11:47:ae:52:d3:2b:af:f6:9a:f5:55:d8:37:b2:6c:
63:09:c9:4f:b0:78:9c:5f:50:4f:10:bf:55:6d:de:
54:8e:bb:cc:fd:c8:07:98:d8:7a:21:a1:7a:20:55:
ba:b9:25:e2:bf:d9:b3:93:25:f4:52:75:6e:ca:d4:
84:3e:b6:34:0e:31:dc:d5:ed:15:3d:72:4b:35:20:
a1:88:f7:69:0e:e8:0e:d3:82:96:d8:c1:f3:28:92:
32:52:62:57:ed:84:e7:37:4d:39:fa:f0:77:03:1d:
da:8d:25:3b:2b:74:3c:53:07:d7:8e:81:44:72:5a:
4d:6e:52:e5:a8:6b:93:c5:7d:9f:ed:1b:97:dc:20:
2f:61:a8:02:2a:d6:59:cc:9e:5b:d7:cd:41:f8:77:
5c:09:bc:52:79:73:ec:9f:58:02:4a:6a:64:88:d8:
a9:db:ad:a8:7c:9e:a3:b5:1b:76:62:e5:a6:5e:3b:
19:a1:1f:21:92:4a:57:da:a6:1e:9c:d5:bf:51:25:
df:ca:6e:f5:a0:29:c5:e1:a6:c6:44:23:6f:b1:07:
93:17:87:28:60:37:92:c7:f7:73:33:bf:9f:02:0f:
df:7b:71:26:10:73:e1:d7:27:15:93:06:41:9f:4d:
e2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:44:1F:DF:D8:1F:C6:A0:07:79:84:64:8B:BD:A7:3D:C7:B6:28:94
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qUQf39gfxqAHeYRki72nPce2KJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:15:df:e8:a4:ff:4b:d8:13:c0:c8:80:91:3b:34:96:aa:e1:
73:0b:d4:d4:26:12:4d:3c:5b:30:d5:4b:62:12:07:00:b4:82:
24:81:59:b3:0d:2b:0a:5f:50:76:30:91:ad:fa:89:f0:43:91:
e0:cd:f4:66:d6:e9:75:63:72:3b:0f:68:43:f0:ed:57:b3:09:
83:b0:30:98:1b:23:ce:47:be:42:ac:f1:a1:78:d8:6b:26:e1:
32:a2:b8:32:b6:58:e5:2d:74:2b:78:93:9c:73:81:d8:ce:a2:
cd:27:75:67:38:b8:d7:61:34:e4:ee:a8:db:6e:a6:77:10:e7:
1c:8d:8a:cb:30:42:a6:f2:9b:34:fd:32:d9:1e:80:47:72:9d:
4e:35:07:2e:fd:7e:a0:de:3b:0a:00:82:45:04:b1:11:6c:5c:
f0:07:fc:f7:b8:d2:1d:ae:03:31:6a:4b:7a:ed:de:eb:61:65:
a6:ae:b1:ce:dd:45:9f:53:88:c3:33:4f:bf:6b:9f:22:fb:19:
31:64:dd:6c:31:a2:b5:3f:9f:b9:7c:99:04:9f:1b:d9:32:9b:
a8:f9:55:af:bf:36:d3:f5:5d:52:54:b6:7c:91:3c:1e:85:39:
62:b2:4e:6d:19:b4:99:fd:c4:9f:15:42:b7:78:25:03:17:e1:
14:1f:06:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:34:10 2025 by rpki-client