Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QA54tQBP5Wu_qnkbcdfTa_KvSJE.roa
File: QA54tQBP5Wu_qnkbcdfTa_KvSJE.roa (raw, json)
Hash identifier: +gvUBS59OFNVNT4KBiVQwwJBifAOpRLjSOLZZyRwFEg=
Subject key identifier: 40:0E:78:B5:00:4F:E5:6B:BF:AA:79:1B:71:D7:D3:6B:F2:AF:48:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7D7C7F97
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QA54tQBP5Wu_qnkbcdfTa_KvSJE.roa
Signing time: Fri 22 Apr 2022 08:12:32 +0000
ROA not before: Fri 22 Apr 2022 08:12:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105311127 (0x7d7c7f97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 22 08:12:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=400e78b5004fe56bbfaa791b71d7d36bf2af4891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:1e:cc:c0:97:1e:24:81:2b:35:49:b9:64:
45:77:a9:01:08:3d:09:ba:0c:4e:a8:35:26:34:fb:
35:20:80:42:44:4a:dc:c6:ec:03:6f:f1:69:50:a3:
da:70:24:fa:a1:c3:21:a2:5e:e9:9d:4e:26:e6:8f:
61:36:cc:73:44:73:66:00:0d:2f:da:62:30:c9:11:
f0:22:a7:23:20:e5:cc:32:9c:2c:ab:32:72:32:8d:
df:ee:18:19:e0:10:41:9a:2f:c7:3b:f6:7b:80:42:
0a:43:2a:f9:1d:c3:5b:f1:fc:6f:1c:9a:ee:7a:e4:
19:8f:7a:8c:b5:4e:44:24:95:c1:16:86:23:5c:b2:
ba:f5:34:84:ec:b6:f6:45:6e:fd:4e:cd:69:97:b3:
f0:e0:30:1b:85:8c:42:a7:d8:1c:aa:02:58:21:66:
95:82:fc:f2:39:4a:3b:c8:83:14:c4:69:f5:44:63:
01:63:88:6b:03:9f:b7:68:ea:26:e4:cf:e9:6b:74:
db:a5:8a:d8:f6:b8:8b:c2:89:f2:a4:51:51:bb:e7:
90:22:d0:34:95:18:66:a9:21:fd:90:cf:1f:cd:b1:
aa:70:a8:e3:2d:de:8f:b8:62:85:84:8d:07:58:e8:
95:b2:0a:61:9f:53:fa:e6:7e:7b:53:e6:57:00:6d:
61:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0E:78:B5:00:4F:E5:6B:BF:AA:79:1B:71:D7:D3:6B:F2:AF:48:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QA54tQBP5Wu_qnkbcdfTa_KvSJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:3a:c1:46:1d:14:92:10:13:23:0a:03:9b:e1:2c:3d:57:19:
f6:3f:6e:33:2b:e2:ba:e8:e2:47:39:89:e8:f8:e0:1e:ae:8b:
97:71:fd:2b:a6:10:c5:ce:ee:0d:13:5b:58:0b:1a:11:1d:20:
0c:a0:7c:2b:80:cf:f1:05:d0:35:15:03:a6:4e:84:c5:a1:50:
68:c0:65:71:fe:2c:15:de:76:90:2e:81:2f:12:ef:73:65:1a:
f1:05:19:ac:8f:f9:05:fe:65:35:fe:11:d3:5e:9b:10:73:48:
73:44:37:fd:c7:ee:94:03:f2:a3:c4:0c:30:ea:0c:2d:a3:23:
30:34:b1:2b:8d:c0:79:a6:2f:bf:04:04:c9:3d:85:46:e3:6a:
c3:60:89:66:98:93:a2:56:66:5f:35:e8:c6:ae:6c:46:cd:a4:
f2:1b:c2:b8:16:13:28:7d:f4:53:02:b0:8b:09:06:29:1f:d4:
a4:8a:e9:e8:47:d2:30:a2:50:6d:67:83:83:2c:64:1a:0e:5b:
21:85:ab:31:32:a9:87:f9:4e:4c:76:8d:2c:e6:ab:00:ff:8a:
22:90:97:84:8e:49:1f:28:2d:09:91:e3:e0:cd:34:9a:7a:98:
94:2e:dc:9c:97:10:87:17:12:75:d2:3c:d3:9e:45:d0:d7:89:
23:af:a9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:46 2025 by rpki-client