Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qXcErKzTbdVyZKB2fdyYt21nSIc.roa
File: qXcErKzTbdVyZKB2fdyYt21nSIc.roa (raw, json)
Hash identifier: x+ccfpWUaijg3Fj2IMjZTwcJ4dey3sDp7WH9QVbVhdA=
Subject key identifier: A9:77:04:AC:AC:D3:6D:D5:72:64:A0:76:7D:DC:98:B7:6D:67:48:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185EF45821BA7F72DFB9915426731618C27
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qXcErKzTbdVyZKB2fdyYt21nSIc.roa
Signing time: Thu 26 Jan 2023 18:09:47 +0000
ROA not before: Thu 26 Jan 2023 18:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ef:45:82:1b:a7:f7:2d:fb:99:15:42:67:31:61:8c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 26 18:09:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a97704acacd36dd57264a0767ddc98b76d674887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:42:57:fc:7a:85:f1:38:e8:5a:eb:54:47:cb:
ae:7e:ae:d0:a8:bb:81:7c:7c:44:55:b9:e9:c6:ec:
71:f3:de:fe:52:6b:97:3d:45:9f:bc:01:c1:1c:57:
a8:99:80:c5:8f:a1:ac:f5:c4:6a:72:b8:f3:6b:22:
d3:b3:22:7c:b0:f6:9c:af:51:69:25:16:e2:52:28:
cc:90:8b:bb:73:43:0a:b5:37:95:5a:d7:4b:83:c2:
92:09:42:ad:c3:09:f4:cf:8d:c1:6f:ab:46:68:e8:
42:dc:d6:15:9e:32:65:8b:e4:89:3e:7a:dd:a9:a4:
ba:fd:56:cd:9f:5b:a3:b2:fa:1c:af:df:70:cb:cb:
c6:b4:cb:f0:ad:f3:39:0b:6d:97:1c:67:d2:d9:34:
54:84:f0:bd:52:01:1b:fc:9e:5b:79:d4:6e:76:7a:
4a:02:c5:92:6b:ac:63:40:0b:cc:e2:6a:78:b5:d0:
79:e7:5c:b2:af:0a:bf:bd:a8:d7:52:0c:14:4a:ab:
09:be:e4:cd:1a:b8:ae:0d:25:d8:c8:21:5c:0c:71:
31:44:d9:35:1b:73:1d:46:fd:c8:18:2b:10:b3:29:
ce:78:32:f0:19:6e:94:6b:fb:59:47:f1:17:13:6f:
03:8b:69:9c:da:b9:d5:3e:3f:9f:a7:19:4e:53:10:
dd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:77:04:AC:AC:D3:6D:D5:72:64:A0:76:7D:DC:98:B7:6D:67:48:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qXcErKzTbdVyZKB2fdyYt21nSIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:f3:1a:2f:44:03:e2:05:14:d5:be:07:41:db:98:8d:49:f5:
96:e1:96:7c:4b:33:cc:3e:85:10:5f:6c:4f:45:f8:2e:b1:2f:
27:ce:18:52:7c:38:3e:43:86:1b:1f:33:3f:25:d1:39:f7:45:
af:7f:59:cb:be:70:18:f1:2b:59:b6:ad:73:90:f1:db:96:22:
3e:68:f2:68:29:9d:2b:e9:c9:57:60:b0:e0:b4:a7:c8:1c:4c:
e1:ea:95:fc:6c:56:e4:a7:22:05:cd:64:ed:b0:3b:bc:88:68:
f4:ad:57:b0:9c:d2:cd:74:e7:68:c6:ea:60:29:ba:e2:da:38:
b2:c1:17:7f:ca:56:84:e7:33:4b:50:a4:49:63:78:5b:0e:a0:
82:2e:ce:df:0f:37:a0:7b:36:82:e0:5e:2e:ff:56:2e:34:a5:
fe:dc:79:7d:8d:77:93:01:e0:fb:29:f3:94:67:81:0c:11:73:
05:0b:f0:82:90:35:4d:ca:6b:99:e9:7e:30:c6:f6:98:90:39:
82:c3:eb:bf:dc:25:ec:fa:ba:97:e2:29:df:aa:12:90:6e:20:
e0:27:c8:da:dc:65:fb:ac:a1:cb:d9:c2:d8:0a:91:39:fa:57:
f0:95:86:15:cc:15:bd:04:87:6e:63:59:0d:45:9e:9f:d1:82:
f7:21:9d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:22:47 2025 by rpki-client