Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QG6ldMRMsAMb-ZNshpIIGIa6YKg.roa
File: QG6ldMRMsAMb-ZNshpIIGIa6YKg.roa (raw, json)
Hash identifier: K4njFgCfRf/HJT2OxU0X+0oMGd2PuMXwRVmMtMBZyLY=
Subject key identifier: 40:6E:A5:74:C4:4C:B0:03:1B:F9:93:6C:86:92:08:18:86:BA:60:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0AB6C5D1B41E5C432A928F9AB3D22975
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QG6ldMRMsAMb-ZNshpIIGIa6YKg.roa
Signing time: Fri 18 Aug 2023 22:14:24 +0000
ROA not before: Fri 18 Aug 2023 22:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0a:b6:c5:d1:b4:1e:5c:43:2a:92:8f:9a:b3:d2:29:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 22:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=406ea574c44cb0031bf9936c8692081886ba60a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:a6:ca:c4:2a:0b:e2:66:da:df:f9:20:8d:
4e:5f:c7:32:45:02:b0:80:ca:f3:dc:95:29:ec:78:
10:0c:57:3b:97:c6:44:0d:76:66:d7:06:3c:d4:ff:
ee:34:07:38:50:9d:73:81:f9:c3:f2:34:80:e3:5b:
cd:0a:ba:ee:ca:a3:fc:07:ab:a8:28:30:ce:f5:3c:
bb:0e:65:5a:72:a0:19:d4:23:fe:7a:e8:e2:4b:01:
50:74:cd:1f:bf:3a:5a:87:02:4e:cc:df:59:e8:92:
1b:b8:fb:05:f2:b7:35:38:57:64:7b:60:fc:50:f4:
b6:3a:69:b8:a2:ff:05:ff:26:d7:66:f3:f8:cc:cc:
16:39:2f:60:77:a9:3a:7a:5e:fb:46:c0:87:ef:18:
a5:32:c9:c6:88:26:01:37:45:29:9a:b5:8b:0a:ea:
90:6a:63:73:a3:e6:2f:f8:16:63:ba:6e:47:5d:64:
b4:d6:fb:b7:44:c4:89:7e:ac:42:44:d0:a9:af:6e:
57:31:d6:04:e4:4e:02:15:e7:40:ff:d0:c5:7e:74:
e1:db:f5:47:89:6e:e0:c8:fc:bc:81:02:f2:e4:7b:
cf:3b:d8:1b:4b:f4:46:fb:34:07:53:a0:a9:a7:5d:
69:7f:d3:d7:3a:ea:7b:75:53:c1:26:f7:f1:a9:12:
08:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6E:A5:74:C4:4C:B0:03:1B:F9:93:6C:86:92:08:18:86:BA:60:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QG6ldMRMsAMb-ZNshpIIGIa6YKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:b6:64:6b:13:e1:ae:8e:83:dd:cb:32:33:fb:a6:d1:f3:e3:
41:13:56:fb:76:d1:1c:8c:d2:81:f0:84:e9:0a:d3:bd:de:b2:
f0:20:ba:f4:aa:e8:01:07:e4:f8:38:d7:b1:49:47:8c:32:10:
3b:02:a2:cf:6b:0b:06:e5:88:a4:6e:90:b7:91:ff:d4:9b:eb:
70:01:a2:ba:36:96:26:f3:f8:62:e5:8b:57:3f:94:48:f2:81:
df:08:0e:89:ba:99:e4:62:bb:98:d3:78:68:8c:bf:ec:1b:ee:
4c:15:cc:bc:80:3c:9d:be:0e:ea:dc:7a:6e:3a:46:7b:d6:a4:
26:4a:0f:3c:e1:a1:e5:33:f9:06:df:d6:a8:ca:3c:a2:b5:2e:
1a:01:6e:b4:07:dc:80:e1:e8:aa:73:eb:23:b6:b0:0d:1e:8e:
6a:fd:3c:ea:7b:40:58:01:ce:e8:64:c9:44:ff:84:b2:be:41:
55:c0:23:2b:70:f4:36:f9:d1:39:d1:65:cb:bb:25:96:d8:c0:
90:4b:95:af:fc:3f:17:ce:59:10:3e:60:b5:70:40:c9:2d:cc:
35:90:d2:de:e7:af:79:38:87:39:4b:bc:83:df:0a:c6:6c:95:
55:69:8e:a2:44:e4:61:bf:e2:81:94:73:8b:77:38:52:c4:69:
5a:50:43:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:23 2025 by rpki-client