Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qx5dER1p4y1PU2TlhCnGNmaK8qs.roa
File: qx5dER1p4y1PU2TlhCnGNmaK8qs.roa (raw, json)
Hash identifier: pLifC7ShrintIU1UZVTEBt7rYq4CVy0Q/2B+Xh5THjY=
Subject key identifier: AB:1E:5D:11:1D:69:E3:2D:4F:53:64:E5:84:29:C6:36:66:8A:F2:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6B18EC13
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qx5dER1p4y1PU2TlhCnGNmaK8qs.roa
Signing time: Wed 16 Feb 2022 12:17:21 +0000
ROA not before: Wed 16 Feb 2022 12:17:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1796795411 (0x6b18ec13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 12:17:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab1e5d111d69e32d4f5364e58429c636668af2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cc:7e:28:49:63:90:2e:04:a1:91:71:62:db:
3f:08:49:a1:15:bc:93:38:52:07:56:4c:40:21:4b:
27:c5:40:73:29:03:8c:61:46:61:0c:07:3f:f7:17:
67:8e:ca:45:ef:4b:45:89:8d:87:eb:17:db:96:52:
5d:55:b4:68:ef:5b:20:ee:cc:83:77:75:53:20:31:
4a:9a:6e:27:87:c1:73:3a:36:10:73:be:6c:e6:49:
41:c7:0a:99:ff:e2:c7:f0:aa:36:d3:bf:45:ce:1f:
83:44:6a:53:45:23:84:da:92:ec:22:44:34:2f:91:
09:29:81:3c:96:7f:cc:aa:e7:48:ef:d7:49:e4:d7:
8d:f7:32:96:46:7e:9b:92:8b:0e:37:03:18:84:60:
65:8f:23:ec:cc:46:91:55:ac:e7:73:91:8d:c0:a0:
65:74:92:94:8c:18:40:c3:b5:5d:18:c0:b9:bd:81:
2d:cf:52:d4:27:8f:f1:db:12:28:c5:5b:fd:ce:f0:
f6:9e:e4:ba:53:ea:32:05:8d:0d:6c:01:28:0f:0a:
01:c4:94:6b:69:c6:77:f4:e4:28:d0:f8:4e:fc:14:
a9:39:c7:9a:51:ab:d2:02:ca:1e:f6:7f:51:ac:b3:
34:d0:db:aa:00:09:26:86:ed:72:53:57:37:e2:e1:
98:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1E:5D:11:1D:69:E3:2D:4F:53:64:E5:84:29:C6:36:66:8A:F2:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qx5dER1p4y1PU2TlhCnGNmaK8qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:9b:19:d2:f2:06:b7:56:f7:b2:ec:c9:9a:5b:08:86:30:60:
98:16:f8:ac:22:1f:02:47:c3:40:42:c5:47:d5:ad:65:06:b6:
eb:9c:ff:26:f6:a1:40:f0:af:e1:8b:f2:df:00:2b:60:1e:b9:
67:ce:16:65:c1:5a:9c:9f:f4:6c:23:69:ab:99:d4:70:b4:73:
c0:ea:24:ca:9a:ba:7c:0c:d8:29:0a:56:78:42:03:b9:19:17:
11:dc:c9:19:7d:de:07:90:e0:47:73:f1:dd:72:79:64:84:db:
4b:9f:e6:ca:e5:17:ef:56:0d:90:6d:95:00:3a:06:f0:bd:db:
c6:30:1a:1b:13:9c:69:49:32:98:c4:22:81:43:ee:9b:3f:e7:
2f:1f:fa:36:af:ba:74:b8:65:65:39:71:f8:5f:ed:d7:40:4f:
df:f9:7d:1b:53:ad:49:09:36:6e:bd:59:c2:fc:fc:33:65:f6:
fd:3d:ad:a2:4c:00:32:10:58:48:f4:63:01:bd:c7:a2:af:66:
b0:48:52:52:fa:f8:b8:dd:1e:1c:5f:53:45:51:70:c8:2b:cc:
98:03:6c:56:f7:de:f7:d9:b7:38:f5:ec:b3:4c:71:61:27:97:
2c:c3:9c:a1:50:04:a9:9e:2c:0d:9a:ff:7e:e3:bd:29:ef:4e:
7f:a6:c5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 09:41:15 2025 by rpki-client