Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QJqHC9LJAvtNUCQBqhrfr0kNRio.roa
File: QJqHC9LJAvtNUCQBqhrfr0kNRio.roa (raw, json)
Hash identifier: 3ME1Ki8mj8CioCz1trbPhI4HCC09HjaiUdhivlZxQAw=
Subject key identifier: 40:9A:87:0B:D2:C9:02:FB:4D:50:24:01:AA:1A:DF:AF:49:0D:46:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018955633225CA5EB987905B57BBD7AFA893
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QJqHC9LJAvtNUCQBqhrfr0kNRio.roa
Signing time: Fri 14 Jul 2023 17:11:51 +0000
ROA not before: Fri 14 Jul 2023 17:11:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:55:63:32:25:ca:5e:b9:87:90:5b:57:bb:d7:af:a8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 17:11:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=409a870bd2c902fb4d502401aa1adfaf490d462a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:cc:f0:12:a2:54:aa:69:12:77:8e:b9:5a:
e4:85:b9:91:fb:08:53:e4:94:37:da:a0:a3:90:d5:
5e:75:3a:dc:b7:47:6e:7e:6e:f2:0c:2f:39:d2:38:
2a:fc:7a:93:e6:7b:d1:51:83:1f:f6:18:ce:22:e1:
fc:2c:7b:99:9c:bf:f8:2f:a0:7d:04:3f:1b:52:4f:
2b:2c:79:07:f9:ed:36:f9:48:2d:cb:fd:cb:71:b0:
de:d4:f7:6f:99:c8:09:53:54:50:c1:64:22:65:20:
db:df:dd:ac:82:69:5d:12:db:30:35:98:d4:11:7d:
53:e7:b9:08:e7:3a:f1:c1:93:4f:40:12:e2:0b:3f:
05:c6:a8:04:0a:6e:21:2a:7d:04:1d:47:e0:69:ee:
a5:e8:18:a4:42:45:d9:ac:79:b9:fb:5a:0d:27:9b:
57:65:dd:72:f3:5d:ff:67:d0:4e:6f:16:37:e1:5d:
53:ee:47:b8:dd:a7:56:89:bc:5a:af:16:92:32:df:
b0:c0:a6:32:b1:06:15:27:09:7a:d7:25:17:14:d2:
03:7b:94:a0:f7:54:50:fc:eb:e8:2f:5c:dc:f7:c1:
3b:64:03:3a:5b:c0:29:79:2c:7a:a4:2f:e5:88:6d:
44:08:a4:8f:f6:14:59:8a:04:10:cc:17:9f:be:cd:
aa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9A:87:0B:D2:C9:02:FB:4D:50:24:01:AA:1A:DF:AF:49:0D:46:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QJqHC9LJAvtNUCQBqhrfr0kNRio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:6f:8d:7d:7d:49:fd:30:cf:cf:27:f3:35:b5:fc:ea:c7:71:
9a:7d:ac:78:7a:72:33:81:7c:1d:9c:f8:b7:a2:29:eb:e5:ea:
1e:79:8a:3a:c9:94:d0:cb:23:f9:51:8b:a5:69:59:b1:f9:96:
49:27:11:ad:60:c2:b7:ac:43:3b:3a:a5:50:47:45:25:47:f6:
85:a7:41:d8:a3:70:d4:bb:36:62:ce:57:99:c9:82:2e:ee:c5:
83:ba:38:4f:78:f2:e7:24:85:3b:16:83:da:ea:42:76:3d:21:
2a:1e:1e:47:de:29:9d:de:e5:bb:fd:18:58:2d:c8:a0:67:45:
f8:4e:ea:68:5d:7c:d1:58:6a:00:38:67:d0:59:8b:b7:8a:9f:
ab:10:a3:72:b2:04:b4:0a:ed:1a:8d:28:70:b9:f6:37:7e:6a:
15:d1:5e:8b:48:c9:20:30:81:27:52:e6:00:af:e6:b9:c0:a4:
fc:95:ec:3e:11:e2:10:98:ce:49:97:9c:c5:25:27:82:df:ff:
f4:03:05:4c:2a:05:00:d5:39:36:7a:e4:f7:5f:49:fa:2c:77:
5a:11:9f:67:36:88:e0:86:66:ed:6e:4f:d1:7c:e0:ec:36:01:
95:90:b0:50:de:84:3f:76:1b:58:d5:0b:36:0f:0f:7a:92:6f:
f7:0d:8d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:41:11 2025 by rpki-client