Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QKgPfGbXmjYPTWbwa_eMOnbIPQs.roa
File: QKgPfGbXmjYPTWbwa_eMOnbIPQs.roa (raw, json)
Hash identifier: 4HVFEpeeZrITYzNaOXy5XgxpSNDa1zS6Pqkg+yiV47s=
Subject key identifier: 40:A8:0F:7C:66:D7:9A:36:0F:4D:66:F0:6B:F7:8C:3A:76:C8:3D:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187CD92C8800C7A3B62B88DCFE0809DE055
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QKgPfGbXmjYPTWbwa_eMOnbIPQs.roa
Signing time: Sat 29 Apr 2023 15:12:41 +0000
ROA not before: Sat 29 Apr 2023 15:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:cd:92:c8:80:0c:7a:3b:62:b8:8d:cf:e0:80:9d:e0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 29 15:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40a80f7c66d79a360f4d66f06bf78c3a76c83d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:d1:d7:45:67:81:00:4f:cd:a4:d7:94:0e:
a3:d2:09:e2:b3:bd:33:06:b2:d8:a0:17:98:14:1b:
c8:ca:62:a3:2b:4e:69:e7:be:64:e5:57:50:39:44:
62:f5:11:7c:a2:43:fb:f8:e0:44:88:8a:78:69:8f:
c0:6a:b6:2a:ac:c5:76:35:12:56:2f:cd:f6:e7:af:
4b:82:06:5f:09:a7:46:31:2d:61:45:34:bd:52:fd:
a9:57:da:5f:f9:4c:ff:9c:31:09:0d:4d:7c:a1:e0:
78:7a:5c:30:cd:e8:ab:bc:50:ec:e7:d9:bc:39:80:
c4:3f:a0:1d:8c:4a:28:37:a7:08:82:e7:2e:7f:71:
d2:66:85:85:af:08:d0:0a:80:da:a2:9c:73:e1:d9:
85:95:88:64:79:6c:34:51:ab:ca:cb:44:1c:70:b3:
e6:00:14:6b:78:d9:01:58:67:ba:22:67:f4:91:7e:
ee:a4:17:45:30:b4:6d:d7:e6:0a:b9:3d:bb:21:e8:
2f:c7:16:fa:af:be:95:90:6c:76:b4:8f:6f:96:ae:
b1:b8:23:5a:93:08:fb:1a:b7:82:83:a1:75:00:29:
d9:03:8e:9b:06:aa:e1:1a:51:4a:4c:c4:a1:5c:47:
87:5a:fb:32:2e:4e:99:2b:83:b6:2e:5e:8b:fd:d1:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A8:0F:7C:66:D7:9A:36:0F:4D:66:F0:6B:F7:8C:3A:76:C8:3D:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QKgPfGbXmjYPTWbwa_eMOnbIPQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:51:46:2a:7b:46:e0:76:ff:95:31:b1:0a:66:90:5d:38:bf:
07:88:f7:1d:f0:ad:4d:9a:bf:12:cd:7a:c1:d4:f8:b7:9a:2c:
10:8e:e5:87:98:af:c6:c8:26:4b:12:80:d9:42:23:10:eb:64:
5f:ce:0c:8f:ad:94:3e:57:d0:22:6d:67:1d:12:6f:64:0c:3a:
4d:8b:be:f1:54:08:ce:a6:1e:ed:ae:45:71:82:c2:40:2d:6f:
ba:86:73:07:a3:88:19:65:93:b6:2e:1a:cd:e8:c8:d5:d5:c3:
22:6e:b4:da:e5:4a:50:af:bf:6b:bb:b0:3c:83:e4:46:c1:6e:
0c:6a:3a:4d:21:a6:09:e0:bf:4d:f2:9e:35:3e:47:14:36:c3:
42:fd:b6:30:db:22:ac:bb:a5:fa:d0:50:e9:5d:9d:f0:ed:c4:
20:ca:f8:07:65:e0:d1:0d:21:ea:6b:a6:7e:40:53:bd:5e:03:
8b:7e:dc:fa:1c:2b:cf:98:37:cf:b0:1a:6f:b0:c1:43:c3:6f:
ea:5c:8f:1b:a3:90:86:6a:b8:90:d1:e1:c6:6f:f7:96:9a:d8:
cd:62:da:1d:69:ee:03:2f:e6:f2:04:4a:61:8c:9e:d6:a9:6e:
c0:23:b6:8f:90:b4:b1:99:13:d7:3e:76:88:83:b9:94:f5:b0:
4a:bf:da:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:09 2025 by rpki-client