Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qVCjPkibDODSuNsTET-XLo12Ae0.roa
File: qVCjPkibDODSuNsTET-XLo12Ae0.roa (raw, json)
Hash identifier: Lz6cCBiy/YQLRB4/7mYmxSfyzIZgfMSW/vEY3nm5NVU=
Subject key identifier: A9:50:A3:3E:48:9B:0C:E0:D2:B8:DB:13:11:3F:97:2E:8D:76:01:ED
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01826369EFCE9A253683685A682616168B13
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qVCjPkibDODSuNsTET-XLo12Ae0.roa
Signing time: Wed 03 Aug 2022 11:14:23 +0000
ROA not before: Wed 03 Aug 2022 11:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:63:69:ef:ce:9a:25:36:83:68:5a:68:26:16:16:8b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 11:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a950a33e489b0ce0d2b8db13113f972e8d7601ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:61:85:77:b7:f5:15:c8:eb:ed:eb:62:6e:
4b:2f:e8:4a:30:b1:36:5c:6b:4d:ad:5b:72:25:41:
d3:e1:fc:63:8f:a8:e1:9b:f0:6a:06:b5:c4:14:9a:
44:55:9d:ba:49:1d:b7:67:f3:66:85:0d:07:b3:8b:
f5:42:c5:cf:da:db:2a:b9:5c:16:18:33:1a:96:3e:
58:9d:d8:91:6c:0b:dd:c7:be:1a:9c:4d:fd:17:65:
5f:d3:b4:e7:75:aa:56:c8:c1:30:d5:76:13:4d:a1:
a7:54:b6:95:63:20:1d:fb:b1:d1:4b:4d:c4:8f:49:
85:c1:38:6e:aa:98:e4:b7:a4:f9:bc:57:1c:60:75:
95:c6:32:86:cb:47:19:b6:a6:62:97:35:42:9f:fe:
ac:18:b9:61:49:34:62:56:9e:7c:7f:d6:9f:0f:ba:
05:ef:2c:63:bb:e3:12:a0:cd:87:ad:b0:b8:69:2f:
1b:b4:4d:e2:08:85:4f:ef:94:f8:30:72:97:fb:5c:
8c:24:ce:bb:a1:b8:82:3f:7f:21:0a:7b:3f:cb:cd:
a9:69:c4:70:37:86:3c:5c:dc:9f:d6:90:31:7d:76:
dd:9e:a6:c6:1a:25:bf:24:76:1c:fc:7b:b0:7c:5a:
3c:87:61:33:0a:a8:cc:a2:e0:9d:8b:8f:12:e4:49:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:50:A3:3E:48:9B:0C:E0:D2:B8:DB:13:11:3F:97:2E:8D:76:01:ED
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qVCjPkibDODSuNsTET-XLo12Ae0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:ab:0e:7c:90:41:78:f1:75:bb:1f:9f:73:16:37:33:6a:50:
4b:ef:97:ea:b8:a4:9f:b8:38:71:b3:ee:86:cd:10:b1:ca:81:
cb:39:2f:66:80:cc:36:ed:f9:66:80:92:a5:a4:31:2e:dd:4c:
55:6c:0d:2d:47:82:ca:a9:78:8b:c5:a3:85:93:c7:14:2a:48:
c1:97:3c:83:42:da:42:e1:1f:18:8d:05:ae:fe:7b:55:b9:6b:
00:87:da:f8:bb:1d:7d:6d:ae:41:b3:dd:b1:14:b6:fe:81:6b:
04:59:4f:1c:00:d6:6e:3a:07:aa:07:b4:dc:cb:be:99:51:b5:
17:ca:ea:88:24:90:07:5d:04:81:69:14:e2:10:84:bd:5e:cc:
48:d8:31:99:e7:16:ea:11:60:35:a1:14:11:d3:b1:fa:e0:f2:
7d:3e:e8:b7:d0:8a:10:29:5b:6d:b5:b0:f4:42:7c:54:e2:1f:
5b:8b:70:b5:3c:ab:c0:46:49:ca:23:1e:90:2c:a1:67:c6:eb:
31:75:7d:f8:2e:bd:35:49:30:80:14:0a:12:58:3c:be:86:6a:
78:79:96:f0:88:5a:df:e5:46:3a:d9:b4:2a:6f:9e:74:9a:93:
01:ce:55:b6:db:b1:35:ef:b6:a4:f5:d2:da:c7:0e:a7:2b:03:
aa:76:b3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:17:15 2025 by rpki-client