Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QLpmUFdAdZBTXobNWIVQIY00oUI.roa
File: QLpmUFdAdZBTXobNWIVQIY00oUI.roa (raw, json)
Hash identifier: 2NQGyKLkA28STC4AZoxEXUjye1Y0Ih6chILRtyt4aL4=
Subject key identifier: 40:BA:66:50:57:40:75:90:53:5E:86:CD:58:85:50:21:8D:34:A1:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868322673D0B4C9A3F12194D3DB3A440FA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QLpmUFdAdZBTXobNWIVQIY00oUI.roa
Signing time: Fri 24 Feb 2023 11:15:15 +0000
ROA not before: Fri 24 Feb 2023 11:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:83:22:67:3d:0b:4c:9a:3f:12:19:4d:3d:b3:a4:40:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 11:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40ba665057407590535e86cd588550218d34a142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:94:ca:28:3a:35:97:4f:50:23:f5:ab:f4:
db:1b:33:61:30:1e:31:b0:e2:33:f2:54:2c:29:a0:
a5:6f:eb:be:46:c5:89:33:7f:79:44:c9:34:e3:e8:
ba:ae:28:cc:55:c5:8d:59:ca:7e:9b:ba:da:ee:b1:
b6:17:3b:34:b7:f7:3f:3b:44:d0:c0:63:39:be:4c:
05:f0:93:b3:3f:c9:aa:0b:0f:b2:80:0b:49:32:be:
4d:2c:25:9c:35:b7:6a:31:25:61:70:d5:37:b5:b5:
42:91:da:c0:6a:29:dc:58:14:34:66:d1:e7:45:cf:
1a:b3:1c:e3:5d:2e:38:c5:3c:42:a2:37:5a:38:e4:
0a:6d:b6:5a:9a:31:22:58:8e:e1:0c:8f:9f:45:f7:
7e:04:4e:9a:13:78:98:0c:99:c6:5a:b8:b4:25:2f:
cd:6c:56:a4:af:ef:0c:93:9c:73:6a:87:9b:a6:8d:
84:7a:4a:71:ac:2b:4c:be:a3:d9:ee:25:5d:a1:60:
e2:10:01:50:34:ae:8f:60:d1:ec:84:c5:a7:6c:f3:
9a:7c:ac:c8:71:40:62:5d:22:e1:7a:e4:95:3d:eb:
36:c8:a9:88:01:76:8d:89:c9:e4:12:28:d3:c6:0f:
e5:62:95:e7:86:39:34:23:ea:97:b1:95:b0:38:a8:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BA:66:50:57:40:75:90:53:5E:86:CD:58:85:50:21:8D:34:A1:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QLpmUFdAdZBTXobNWIVQIY00oUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:cf:7e:e6:94:cc:28:97:34:2b:0f:65:c5:81:0d:8e:36:34:
d5:1b:83:70:ed:f1:91:fb:9c:fa:43:3e:68:16:a6:64:af:2b:
e4:cb:c8:e6:56:f3:98:72:19:b3:f1:2b:64:b1:03:35:c6:22:
a2:5a:a5:cd:50:7a:4b:44:f7:6a:2c:d4:37:d1:00:66:76:ac:
d7:7c:77:18:71:c3:21:08:3f:4c:97:8e:5b:af:5a:b6:1a:02:
0d:b1:bf:34:f7:65:e7:bd:15:97:64:4b:be:a7:a9:11:97:39:
65:b0:44:92:f8:a4:1c:f4:7f:7b:ec:31:cc:74:ff:aa:5c:69:
e5:a5:4b:b3:c2:1e:73:cd:79:3e:3d:33:c1:62:28:94:0c:ed:
e0:cb:e7:44:98:13:23:30:b6:42:2f:68:a6:18:11:54:cb:52:
d0:d2:ad:21:f7:87:f8:cb:7f:49:a0:2c:c7:85:03:c0:ba:f7:
0b:0a:16:b3:73:1a:5f:97:93:69:c6:b9:74:2a:97:0a:32:98:
c8:0b:53:22:8b:4f:88:d9:88:d7:fd:30:d0:fa:3d:29:16:a0:
32:2c:2f:ac:c4:12:6d:6b:1d:f5:bb:b7:2f:3d:b7:cf:dc:e1:
92:f9:71:44:e1:c7:81:23:f2:fd:b5:5d:65:40:fc:c6:ff:73:
ce:cf:2c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:56:16 2025 by rpki-client