Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qgpfAyegatmtWqUJPD4W0Jy9Ppo.roa
File: qgpfAyegatmtWqUJPD4W0Jy9Ppo.roa (raw, json)
Hash identifier: DtDyz41s1UJBg8y/wFMaMb/EtXWmyqUUmfThiNfTHEU=
Subject key identifier: AA:0A:5F:03:27:A0:6A:D9:AD:5A:A5:09:3C:3E:16:D0:9C:BD:3E:9A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01840E31392F7F4CBB82EB397A112595E470
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qgpfAyegatmtWqUJPD4W0Jy9Ppo.roa
Signing time: Tue 25 Oct 2022 08:10:17 +0000
ROA not before: Tue 25 Oct 2022 08:10:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:31:39:2f:7f:4c:bb:82:eb:39:7a:11:25:95:e4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 25 08:10:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa0a5f0327a06ad9ad5aa5093c3e16d09cbd3e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:b9:4d:a9:68:84:19:e7:8d:56:6f:91:6e:
2a:c2:cd:83:f9:ee:1e:28:bf:b6:2f:57:bf:85:30:
9c:ff:d4:3a:da:50:72:c5:39:c4:35:97:b5:a8:0e:
7a:19:41:63:ac:44:77:2a:37:81:19:fb:22:86:73:
88:9e:da:c8:7f:67:70:8c:10:c7:6d:18:50:24:2f:
08:37:b0:52:74:3d:44:3f:d0:96:d8:75:91:be:40:
7f:90:c2:b0:6f:ae:39:fc:9c:7a:37:5f:a9:21:af:
e2:a2:b1:2d:11:75:b7:ae:71:0e:62:ea:9f:e7:f3:
a9:49:87:8e:d3:5b:1f:4e:65:90:dd:d4:7a:3f:98:
ce:db:62:38:9a:de:bc:bf:bf:83:73:3d:be:09:b2:
7b:5a:97:88:64:16:8b:2b:29:c9:45:ff:60:3e:a3:
85:43:53:ee:67:12:dd:d5:2d:a7:18:f7:51:af:21:
e1:76:6b:2a:c0:f4:cf:69:6c:3a:48:39:1b:c0:82:
60:c6:56:c3:8c:a7:b8:49:cf:d6:91:c2:43:ad:ca:
15:31:34:7c:57:5f:f4:77:e5:c4:c9:c4:68:3e:37:
af:d7:31:86:1b:1c:c4:b6:db:1e:6c:fd:06:45:b8:
54:2d:8f:28:3f:4b:d7:ca:3f:66:81:24:7a:60:08:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0A:5F:03:27:A0:6A:D9:AD:5A:A5:09:3C:3E:16:D0:9C:BD:3E:9A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qgpfAyegatmtWqUJPD4W0Jy9Ppo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:d3:c1:9a:4f:bf:fe:49:3d:f2:af:68:18:4f:48:30:a3:d1:
31:a3:e4:87:20:9f:57:65:89:28:64:18:a1:86:5c:25:46:fb:
22:ef:92:48:54:88:41:85:ea:4a:68:69:3c:c7:8b:06:8c:80:
d8:bf:80:0e:f4:6b:1e:5a:4f:18:f1:14:3c:b0:55:9b:1a:ba:
fc:41:83:9e:fd:69:01:8e:f8:5f:0c:b3:7c:a7:79:37:87:73:
0c:a0:4d:62:62:de:61:43:35:6a:2c:23:8e:b2:0f:3a:6b:06:
36:be:0f:f4:7c:dd:0d:14:dc:1b:81:80:48:21:8a:a2:3b:f0:
46:72:76:e0:7d:70:e0:5f:7d:17:61:bc:03:41:17:72:88:8c:
d0:54:a6:7a:4f:3d:fc:bd:22:d7:af:ce:cb:34:83:e9:64:e4:
dc:48:73:ae:5c:55:dd:59:5c:76:41:d3:54:a7:68:fc:2b:dd:
c4:1d:de:3c:06:32:e2:43:e0:8c:ee:8d:7e:c5:d6:57:5f:2b:
75:16:8c:59:68:a1:63:ab:c7:50:56:09:e4:ee:f3:62:c9:59:
93:1d:f8:e5:32:aa:a3:95:56:bb:07:7e:2a:df:86:63:0a:2f:
14:4b:85:bb:96:82:cf:bc:73:e9:32:fb:fb:a4:da:92:6f:5b:
ba:90:96:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:51:40 2025 by rpki-client