Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QKRcPcHREuBRsWv1VMz6jD_bZBY.roa
File: QKRcPcHREuBRsWv1VMz6jD_bZBY.roa (raw, json)
Hash identifier: 7PVgzCfBf3W+xCZUl8owUPlVbt7lgfcJyJwO8wnJkec=
Subject key identifier: 40:A4:5C:3D:C1:D1:12:E0:51:B1:6B:F5:54:CC:FA:8C:3F:DB:64:16
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876B80498448C0C9DD3CBA5F503B5BA11C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QKRcPcHREuBRsWv1VMz6jD_bZBY.roa
Signing time: Mon 10 Apr 2023 14:09:42 +0000
ROA not before: Mon 10 Apr 2023 14:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6b:80:49:84:48:c0:c9:dd:3c:ba:5f:50:3b:5b:a1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 10 14:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40a45c3dc1d112e051b16bf554ccfa8c3fdb6416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:ad:8c:f7:f9:17:a7:59:8a:98:2c:8b:ae:
2c:a2:fc:87:79:00:88:65:63:80:4e:ac:3a:9f:bb:
22:40:55:de:76:53:aa:1d:1a:a0:85:7f:09:af:08:
c5:6d:53:bb:5e:b2:0f:c4:db:de:99:ed:81:ad:fe:
a3:bf:3f:a0:54:97:b2:4d:af:03:13:79:20:3b:79:
0f:af:b7:36:3c:0f:f0:b0:9f:bb:6d:bc:00:24:2f:
43:e1:c1:be:0b:8a:15:79:aa:11:12:53:3f:5c:99:
00:e4:93:83:95:00:1c:c4:f5:42:52:79:66:f5:9f:
01:be:15:b3:5d:39:85:22:11:d6:8a:33:26:7a:5b:
8a:89:70:6c:47:5c:9e:59:1e:77:ed:2d:07:c8:b9:
07:be:49:4a:14:e4:36:d7:e6:ae:be:ba:93:f3:56:
95:83:e5:f3:0c:7f:58:16:19:4e:1d:dc:8c:41:b8:
f4:e8:b6:a1:fd:1f:72:f4:19:7f:d4:fc:9b:95:02:
7f:bb:c5:33:ed:e6:8a:95:3e:64:41:bb:0f:47:8b:
ba:06:1f:ad:c7:3f:bc:37:94:64:30:2c:9a:02:dd:
a7:93:23:dc:79:49:bb:15:4e:13:49:55:2d:6e:c0:
ba:10:49:af:60:e9:f7:33:61:99:0a:03:81:ea:99:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A4:5C:3D:C1:D1:12:E0:51:B1:6B:F5:54:CC:FA:8C:3F:DB:64:16
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QKRcPcHREuBRsWv1VMz6jD_bZBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:05:b0:84:7e:48:20:f0:3b:94:39:09:93:b4:42:a9:3c:46:
50:4b:e2:9a:e4:46:90:21:dd:bd:06:6d:db:c2:a3:6c:69:a8:
b5:ea:91:3d:1f:d5:c9:f9:15:95:c4:1d:01:ed:b1:31:68:cb:
d0:c2:97:15:1a:1f:42:10:4a:f2:a6:df:61:cf:cc:61:fe:13:
3f:0d:f3:dc:d8:d2:3e:41:50:b2:84:08:2d:12:aa:db:5f:87:
b1:24:96:0f:9c:20:08:92:73:94:32:1c:78:9a:ca:09:64:44:
75:96:56:18:bf:b3:00:69:05:e3:ec:54:68:ba:67:64:e8:89:
bf:91:dd:0d:a6:02:0f:10:2a:15:bd:aa:3f:fb:51:cf:44:d2:
7f:a6:fc:5d:0e:af:06:a3:9b:c0:02:da:c7:d0:29:ae:db:e5:
9e:ab:16:dd:9b:3d:03:b5:0f:a0:32:95:60:a7:e8:2b:2f:32:
6c:9a:1a:d4:e7:b0:70:13:ae:39:38:9d:c3:af:f3:4b:14:a9:
2a:e7:3b:68:71:24:54:cf:fc:b9:b3:49:0f:2e:51:9d:f6:97:
63:40:e9:a1:a4:57:99:ab:06:d4:4c:6c:4e:a5:4d:74:29:94:
12:01:3f:a5:a6:46:5c:1a:73:d2:bb:fe:08:be:0a:d3:3c:50:
d1:c5:31:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:39:13 2025 by rpki-client