Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q4u8qhOofpu9-zqgLcVbVW6PhRA.roa
File: Q4u8qhOofpu9-zqgLcVbVW6PhRA.roa (raw, json)
Hash identifier: cs/p4aKzWHsftvaL7nf+8QZFQeVB+IahP8sg7ZXlS74=
Subject key identifier: 43:8B:BC:AA:13:A8:7E:9B:BD:FB:3A:A0:2D:C5:5B:55:6E:8F:85:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868FCC4789D0DF96653D84ED611A0A5EF1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q4u8qhOofpu9-zqgLcVbVW6PhRA.roa
Signing time: Sun 26 Feb 2023 22:16:14 +0000
ROA not before: Sun 26 Feb 2023 22:16:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8f:cc:47:89:d0:df:96:65:3d:84:ed:61:1a:0a:5e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 22:16:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=438bbcaa13a87e9bbdfb3aa02dc55b556e8f8510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:cd:18:b2:3a:6c:41:e7:87:55:50:5d:44:
aa:55:16:a9:d9:4d:44:6b:b7:b5:da:6d:db:4b:5d:
76:92:93:ce:9f:f9:8b:b6:c3:d8:41:32:c9:96:46:
d2:69:d1:c0:c9:0b:cd:cc:b3:8f:f2:a6:84:ea:1a:
34:a1:32:4a:71:24:9d:a4:f7:b2:30:aa:d1:ae:54:
ee:dd:14:13:34:af:d3:dc:74:9c:b5:75:63:a2:14:
31:c0:36:b2:c9:72:2c:84:fb:e9:e1:c7:10:1a:d8:
10:06:ff:8d:09:af:3c:29:50:36:45:fe:c1:7a:6e:
28:bc:f2:38:43:21:ce:79:05:97:41:9a:99:3d:85:
18:ed:ee:82:ed:5a:b2:d6:49:6a:12:af:02:62:54:
8c:1e:fe:8c:66:69:72:62:88:25:41:04:45:e5:83:
74:37:ea:67:8c:fe:1f:eb:cf:7b:1e:55:4b:b0:7e:
a8:e6:f5:f0:62:1a:db:d1:09:82:cc:56:ca:d1:a8:
09:43:68:aa:93:36:02:09:3e:6a:a2:fd:58:4d:2d:
fd:5b:40:9f:dd:01:22:da:43:22:0f:1f:7b:41:36:
2c:c0:c1:80:2e:65:51:c2:ec:4e:74:8c:76:b5:b1:
c7:ea:3e:fb:4a:8f:db:1c:b1:90:80:73:19:01:64:
f1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8B:BC:AA:13:A8:7E:9B:BD:FB:3A:A0:2D:C5:5B:55:6E:8F:85:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q4u8qhOofpu9-zqgLcVbVW6PhRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:63:68:59:b9:fe:42:5e:50:3b:1e:9d:da:57:6a:07:c9:dc:
9c:fb:11:57:62:c6:32:d9:87:53:2e:c8:ea:90:fe:4a:47:1f:
35:1e:35:44:02:0f:4d:2c:98:df:83:ca:78:a0:6d:cd:bc:fc:
a8:e7:83:9a:58:9f:aa:1e:6e:16:1e:22:a3:5b:40:48:57:60:
7d:01:f8:fa:65:1d:35:cf:72:39:1b:e0:68:44:cd:fc:6e:97:
e2:a5:ec:99:b1:fc:2d:20:a6:43:fd:d3:8e:65:a6:ed:5c:2d:
bc:a6:fd:c1:4c:2c:c1:d8:9d:38:e0:83:a4:80:d4:95:94:27:
2f:f2:d2:25:e1:8e:da:73:c2:ed:85:07:0e:7b:a4:a5:b9:62:
2a:38:a8:a5:69:7a:f7:74:c9:76:e7:ab:13:0f:63:80:af:f6:
28:3f:b7:e7:a6:3e:f1:5f:ac:de:0c:c0:10:b5:9f:e3:e3:e0:
b8:f8:9e:57:de:13:33:53:ce:3c:1f:94:ba:ab:08:f1:bb:0b:
07:d7:dd:12:d4:ef:35:6d:2f:55:08:25:29:db:be:ef:10:b2:
a7:86:69:4c:e5:9b:08:f0:5b:81:f8:37:5a:59:c2:8d:1b:38:
cd:9b:d7:5c:7f:f0:b8:29:b6:53:36:60:3d:56:54:7d:09:6f:
d7:7f:a7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 06:50:55 2025 by rpki-client