Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qWAoSQB8TFUdtkAdiY_QKEsXEno.roa
File: qWAoSQB8TFUdtkAdiY_QKEsXEno.roa (raw, json)
Hash identifier: 1iejuDM6Ov7zOxFoe8ik9EOIOzBFMmDd+CvqEwXoZwM=
Subject key identifier: A9:60:28:49:00:7C:4C:55:1D:B6:40:1D:89:8F:D0:28:4B:17:12:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 68F7CAAA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qWAoSQB8TFUdtkAdiY_QKEsXEno.roa
Signing time: Tue 08 Feb 2022 18:04:36 +0000
ROA not before: Tue 08 Feb 2022 18:04:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1761069738 (0x68f7caaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 8 18:04:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9602849007c4c551db6401d898fd0284b17127a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:47:8f:b7:0b:89:5f:0a:e6:bf:d8:61:dc:
15:d7:20:61:0d:2f:15:6e:60:08:9b:78:a0:67:c6:
a5:07:05:0c:a7:26:bb:97:59:8a:b8:7c:8b:5d:ab:
c1:d8:d5:a1:1b:33:24:15:f9:2a:1a:a9:09:fc:26:
ac:4e:64:5b:d1:54:d0:78:72:7e:80:a1:2a:72:ba:
d8:d2:cd:6d:48:30:28:38:e1:6e:f1:62:39:4f:c4:
68:52:2a:e7:47:0c:b0:b2:2f:99:aa:24:d2:87:f1:
9e:3e:ce:15:08:8f:b4:47:1a:fd:98:86:6c:9f:6a:
5c:e5:43:a7:72:ff:09:89:50:22:5b:7f:96:67:2a:
58:07:82:03:af:b1:c1:7e:a7:35:af:bc:f9:24:4c:
8f:2c:22:f8:db:4a:c2:48:0d:8d:7f:b5:2e:4b:81:
92:d5:93:62:b2:bc:9b:73:23:f7:69:d9:4d:2f:48:
b9:fa:ff:90:4a:f2:e7:9b:73:97:e3:2e:b4:ea:64:
6c:04:d7:85:4f:8a:c3:5e:fa:81:96:f0:17:15:82:
b0:9f:79:95:88:cb:38:7b:ff:2f:db:39:da:69:7e:
b9:c8:a4:9a:ab:87:1f:70:11:d2:b6:6c:c1:2b:aa:
7e:2b:83:6e:07:16:18:6e:73:83:1a:c4:af:e1:73:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:60:28:49:00:7C:4C:55:1D:B6:40:1D:89:8F:D0:28:4B:17:12:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qWAoSQB8TFUdtkAdiY_QKEsXEno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:b5:c2:59:ca:db:41:72:7b:0a:7b:d8:ed:00:42:de:23:cf:
14:0e:63:19:c7:83:99:69:39:6c:ab:be:0e:f4:72:1f:e2:ff:
b3:c2:ed:4b:5d:e3:0f:31:cc:72:8d:1c:eb:ed:1f:22:d4:41:
f5:05:0e:31:05:01:73:61:bf:ed:fc:a8:a8:f8:f5:69:82:31:
2e:71:c7:2d:23:e8:60:c5:ce:1c:36:30:29:48:40:7d:28:98:
40:a5:fa:f1:36:91:72:03:fa:78:ea:c7:cc:ac:6a:6d:14:63:
72:14:b6:ea:8f:36:a0:1d:af:15:7a:76:a8:44:c8:27:be:5c:
d8:1e:ad:84:a6:63:e4:f6:b2:51:e5:65:a9:aa:42:46:18:a5:
09:6d:68:67:44:6d:02:4b:37:34:e4:6d:ac:5d:5c:41:18:64:
fb:8a:75:4f:c9:79:f2:8d:42:18:5b:b2:68:1e:b6:9d:d0:12:
b5:20:a3:b7:97:ad:c5:0e:6f:e9:43:e0:ec:0d:32:e1:e3:14:
d3:76:b3:07:98:3e:e1:7b:c6:9d:73:08:eb:76:f7:01:97:b9:
22:61:ae:39:d2:85:b0:1d:ed:60:2b:98:db:86:28:7b:0f:2e:
86:25:8e:68:40:64:1b:38:16:47:20:53:93:e3:8f:11:fa:a5:
4b:30:4d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:31:09 2025 by rpki-client