Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QJolNywe92GSr2ZcfNrYOEppPGU.roa
File: QJolNywe92GSr2ZcfNrYOEppPGU.roa (raw, json)
Hash identifier: adFre5ExOfeMy+7N9FLvIPl6DKn2hptu1VcIr0F+gFU=
Subject key identifier: 40:9A:25:37:2C:1E:F7:61:92:AF:66:5C:7C:DA:D8:38:4A:69:3C:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878A98CA11E3C4DDF5FCAA37E267AEF393
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QJolNywe92GSr2ZcfNrYOEppPGU.roa
Signing time: Sun 16 Apr 2023 15:04:41 +0000
ROA not before: Sun 16 Apr 2023 15:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:8a98:5660/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8a:98:ca:11:e3:c4:dd:f5:fc:aa:37:e2:67:ae:f3:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 16 15:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=409a25372c1ef76192af665c7cdad8384a693c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:c8:a0:e4:10:92:22:82:65:95:d3:e6:22:
81:24:ef:45:bb:d2:13:5b:39:83:a4:6e:7c:3d:db:
59:61:8e:e8:a8:18:82:a9:bb:32:fd:c8:79:bc:97:
3e:d9:e1:7c:71:87:3e:2b:5e:56:09:4c:b3:52:70:
3b:ea:12:80:7d:9d:4a:69:3a:30:90:97:be:d4:9d:
97:53:6e:b6:ff:1c:d4:2e:eb:ed:ef:e3:ce:43:7b:
71:ce:ce:8b:fe:f0:db:92:50:36:c7:c7:29:3f:7f:
71:45:11:ff:d1:7c:46:06:31:0a:f7:d2:25:6d:03:
46:53:b1:4a:23:5d:2c:d8:ad:d2:3d:87:a4:70:be:
c3:4d:f1:ac:eb:8a:d0:f1:d2:92:09:09:da:0a:3f:
f4:66:59:9d:8d:eb:3a:8d:45:cc:89:cd:a7:1b:2e:
47:37:45:da:7e:11:dd:b1:30:c8:4c:40:ef:3f:e4:
f1:e5:fc:ba:62:a1:e8:2c:3d:0b:46:b3:1a:e9:6b:
18:ba:f4:82:1a:d9:01:4a:41:ff:71:c8:9f:84:0c:
a4:15:e5:cb:75:d2:dc:6a:5e:7c:81:f4:32:5c:a6:
34:23:10:af:f6:dc:ad:b1:e3:0f:98:78:53:bd:d2:
b2:2b:6e:a2:85:ce:20:c2:4d:ec:5a:d1:84:7f:09:
c2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9A:25:37:2C:1E:F7:61:92:AF:66:5C:7C:DA:D8:38:4A:69:3C:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QJolNywe92GSr2ZcfNrYOEppPGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:c8:e1:90:3b:66:e5:f3:5a:b4:d6:59:fb:2b:69:bd:ab:af:
44:31:d1:ef:db:2d:2b:49:7e:c9:a8:e3:44:d3:a4:06:e6:57:
f1:27:2e:e3:91:a4:4c:04:ad:6d:37:23:b8:6c:9b:1c:3a:ea:
c1:d9:92:a4:1e:71:74:85:1c:81:9f:46:01:3e:e5:3d:70:ad:
48:27:84:77:3f:f9:02:ca:20:0a:6a:05:12:81:f2:21:a9:77:
98:05:bf:41:e5:90:7c:7f:95:73:bc:29:ab:65:ff:f6:14:0d:
20:f4:43:09:20:36:17:e7:5e:8d:2d:ea:c5:b3:10:6f:ca:82:
6c:93:8b:79:f7:01:6d:43:4d:2b:93:f9:30:f0:1f:4d:67:ad:
22:4f:39:56:de:3c:99:9a:db:c6:89:37:2e:9a:af:53:af:52:
8e:a7:26:f4:b9:db:42:05:ed:c9:0c:7e:5c:2f:7c:f5:7c:0b:
9a:ce:a3:f6:39:71:4e:cb:54:3f:48:03:56:07:2f:43:d3:39:
2f:7c:37:ea:81:3b:d0:5f:95:e3:74:69:83:c2:0b:2b:c7:b9:
bf:8a:d9:5f:ce:2f:95:e0:75:7e:78:ae:70:5e:49:6f:10:aa:
6d:9d:cb:8d:73:0b:1a:c5:d9:3b:4d:49:2c:c6:31:50:0e:df:
bf:97:6b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:36:26 2025 by rpki-client