Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qpeOXXkyEBI46Gt2Qwz9tadMtT0.roa
File: qpeOXXkyEBI46Gt2Qwz9tadMtT0.roa (raw, json)
Hash identifier: +Ku9jISiyMnE6R6jfUYtjy/ubJlxKIePAreLFnRugdU=
Subject key identifier: AA:97:8E:5D:79:32:10:12:38:E8:6B:76:43:0C:FD:B5:A7:4C:B5:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8173455A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qpeOXXkyEBI46Gt2Qwz9tadMtT0.roa
Signing time: Thu 05 May 2022 20:04:42 +0000
ROA not before: Thu 05 May 2022 20:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:95d3:1d93/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2171815258 (0x8173455a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 20:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa978e5d7932101238e86b76430cfdb5a74cb53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:ce:a8:65:fa:4e:77:af:11:3e:9f:60:b6:
26:82:a2:24:a8:4a:8d:16:5c:87:71:15:f4:3d:36:
da:ee:e3:9a:dd:4e:b1:e2:dc:f9:78:11:e4:aa:9e:
57:39:cd:59:83:d1:97:6c:5b:bd:6f:1e:2f:08:e8:
8b:0e:0d:c0:9d:97:56:e4:3c:61:ff:43:a6:5f:bb:
e6:d6:0d:b1:61:b3:5c:af:e6:93:f0:7d:01:7b:ed:
8d:1c:89:be:7c:ae:74:a8:f0:67:77:71:e0:0d:ed:
a4:d7:d9:14:22:14:90:1e:4d:8d:de:a9:c4:99:a5:
49:2b:ee:02:35:63:42:12:e8:1e:dd:6c:a3:17:52:
11:1e:57:77:dc:70:d6:a0:25:af:95:4b:12:23:46:
ad:fd:b2:a8:9c:72:10:e0:70:66:f7:a0:a9:7d:18:
28:46:77:9b:83:eb:36:31:70:f5:40:5f:77:4c:24:
d8:1b:9e:8f:e4:94:1c:d7:70:1b:75:98:16:24:c4:
df:b8:45:78:ae:73:30:d1:b5:f1:16:de:e2:a0:1a:
df:da:dc:95:3c:f9:90:21:79:d0:39:97:6b:a8:63:
8d:69:69:5e:02:5d:ba:db:c9:33:bd:cc:b0:d3:ee:
89:43:5d:10:86:70:aa:8e:5d:88:22:0f:3b:75:d8:
f7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:97:8E:5D:79:32:10:12:38:E8:6B:76:43:0C:FD:B5:A7:4C:B5:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qpeOXXkyEBI46Gt2Qwz9tadMtT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:36:cd:94:98:8f:be:5e:e4:e0:a7:52:4a:41:7e:4e:c3:5c:
dc:03:6e:3a:a8:53:9d:52:61:b2:ef:57:a8:00:e7:0b:10:41:
a2:0a:4d:90:67:21:ed:c1:b8:f0:18:a5:52:19:c6:8f:a9:ce:
5f:e1:04:c9:15:b4:65:a8:67:42:f6:1f:82:3e:e8:75:8b:d2:
c1:05:af:9e:69:c9:11:5c:da:dd:d6:f1:74:2e:17:41:6b:b4:
bc:0a:3c:8a:f5:09:01:9e:82:b7:74:3d:38:9d:16:9a:2f:8e:
47:b1:2b:4d:6c:77:fb:02:d7:41:81:82:e2:97:ce:cb:fe:ee:
87:7f:c2:c8:91:28:f5:01:30:3d:df:40:a1:67:20:96:01:1d:
6a:ae:aa:33:a1:ac:76:7d:cf:78:43:07:bc:52:d5:14:32:11:
c4:57:9f:fb:eb:2c:be:c0:6b:ef:5d:d1:bf:92:f9:98:17:0a:
3c:1d:8a:24:92:a8:33:3e:87:d4:9a:5d:71:89:f3:06:1c:4f:
01:16:2e:7c:65:3b:09:85:81:54:3e:66:36:5c:9b:ea:27:2d:
40:cd:70:cb:a2:6e:65:f2:20:f9:79:17:b3:89:44:1e:9e:47:
55:0e:18:e3:58:4f:b1:f7:b5:aa:5e:ea:f5:20:3b:4a:95:12:
02:b8:b1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:46:27 2025 by rpki-client