Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qtUfVB_Yl5HFHpMWJZRNUGLms7w.roa
File: qtUfVB_Yl5HFHpMWJZRNUGLms7w.roa (raw, json)
Hash identifier: 1PfqtNs0HU56XHOpYQQgG/y70Z8z0jNcSXhqGcDSNaE=
Subject key identifier: AA:D5:1F:54:1F:D8:97:91:C5:1E:93:16:25:94:4D:50:62:E6:B3:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 80FBD384
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qtUfVB_Yl5HFHpMWJZRNUGLms7w.roa
Signing time: Wed 04 May 2022 05:14:17 +0000
ROA not before: Wed 04 May 2022 05:14:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2163987332 (0x80fbd384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 05:14:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aad51f541fd89791c51e931625944d5062e6b3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:6f:7a:c0:b8:af:9c:15:99:a8:d5:56:67:
e7:9a:ff:bb:99:e1:8c:be:ff:26:57:91:ac:09:66:
f0:32:d6:0f:4a:21:9d:58:0d:e8:06:7e:86:95:07:
a8:da:0a:da:f8:4b:d4:76:87:c3:0e:a2:0c:05:e6:
18:c5:58:05:83:9b:6f:9a:b8:16:8e:27:5f:88:b5:
f8:6a:0a:6f:96:c2:ed:b6:1c:eb:11:ac:1f:a4:9b:
7a:52:a3:a9:82:27:37:e5:5f:52:42:03:ed:11:42:
18:94:cf:38:fc:fc:a5:f6:5d:37:7e:78:d2:9d:8b:
ab:55:5a:5d:fd:80:14:02:d3:d1:f0:69:f3:3e:7a:
d2:6b:02:7f:f6:69:df:52:1e:cd:a9:d3:32:f9:36:
24:e7:49:e4:d0:f3:14:2c:5e:9d:c3:55:79:45:74:
4e:b9:01:23:79:ed:a3:02:4b:2c:22:0a:2a:e3:bb:
2f:0e:ad:c7:cf:4a:54:c9:42:e7:97:79:d7:c6:b6:
fa:ad:45:ec:c7:2f:1c:f9:c2:b1:22:df:c0:96:89:
4b:a2:1f:d6:00:a6:97:94:1b:a4:bc:dc:3a:b8:78:
8c:8b:3d:cc:0d:97:25:07:21:2a:47:27:ee:fb:ea:
1f:34:9e:a6:2b:d0:53:dd:1a:51:87:59:cc:08:a1:
b6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D5:1F:54:1F:D8:97:91:C5:1E:93:16:25:94:4D:50:62:E6:B3:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qtUfVB_Yl5HFHpMWJZRNUGLms7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:8a:59:ed:fb:f3:7f:a1:f3:c0:06:2b:33:85:53:dc:15:ba:
93:3c:07:52:db:ee:59:fa:4c:c6:81:07:b3:72:66:f1:11:8e:
11:97:18:66:32:02:82:dc:77:52:da:68:9a:ae:a3:52:82:3c:
7e:f5:a0:1f:23:3c:aa:3e:83:bb:9b:66:30:76:f4:87:1b:c8:
ea:f6:5d:4b:d7:d6:ea:fa:a3:1b:b2:b3:b1:48:21:a1:58:47:
c8:d0:6d:89:42:42:74:de:42:16:5e:62:4f:e7:e7:f6:cd:6a:
4a:88:c7:98:5a:0a:28:af:d7:25:81:17:f7:52:45:64:89:27:
b0:a8:51:d3:87:11:01:7c:21:f4:98:ab:51:45:06:ac:12:9d:
19:30:d3:43:4d:56:8c:18:d2:bb:ce:f4:f3:2d:e3:b0:e3:0f:
46:2a:02:df:f4:fa:f5:16:5a:ad:b6:76:52:ba:10:de:71:65:
69:49:31:42:09:e9:59:b8:89:4b:55:52:2f:d6:b7:17:fc:75:
9a:0b:6a:d8:9b:4a:01:37:3b:9e:8e:de:47:f7:01:9a:09:90:
82:40:9e:bc:ac:fc:2d:cc:76:52:a7:2e:45:5a:d2:24:d3:36:
0a:6e:4d:56:f6:18:6c:39:7e:49:8d:20:08:9b:00:3a:79:f4:
f2:3e:20:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:08:02 2025 by rpki-client