Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QLu65QFJBUK9_TPMrqXPXDKpxQE.roa
File: QLu65QFJBUK9_TPMrqXPXDKpxQE.roa (raw, json)
Hash identifier: ajfPvOBXizQzXwVRlOlCuKekNak8n8pJk8wOpPuNA/M=
Subject key identifier: 40:BB:BA:E5:01:49:05:42:BD:FD:33:CC:AE:A5:CF:5C:32:A9:C5:01
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884D7423DF4310C9A29DEA40AA228BF362
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QLu65QFJBUK9_TPMrqXPXDKpxQE.roa
Signing time: Wed 24 May 2023 11:10:36 +0000
ROA not before: Wed 24 May 2023 11:10:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:74:23:df:43:10:c9:a2:9d:ea:40:aa:22:8b:f3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 11:10:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40bbbae501490542bdfd33ccaea5cf5c32a9c501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:8a:8c:5c:c2:e0:99:d8:3e:9e:52:9f:53:
af:35:ec:47:c6:30:c4:7c:1c:5b:a9:74:59:2e:b7:
81:4e:a6:f9:cf:fd:ad:04:74:8a:40:47:e0:10:ed:
40:73:91:f1:65:2b:1c:f6:1f:5c:c3:b9:ec:cb:cc:
99:44:52:3a:49:aa:d9:b4:e8:ee:11:02:19:7b:72:
2e:ec:5f:9c:df:37:7c:bf:ac:a7:0a:4e:c9:5a:60:
8f:59:d6:2e:cb:92:24:c8:1e:4b:e4:74:db:12:7b:
c9:49:99:5b:2b:0d:d0:6e:f8:33:09:cd:3a:95:71:
18:35:25:8e:eb:e5:ad:6a:89:13:35:e2:69:4e:8f:
83:7f:75:73:b6:4b:0d:5b:23:4d:db:70:ed:42:b5:
49:22:cc:c8:a2:ee:8d:37:dc:fa:68:b3:14:87:f1:
cb:78:7b:e4:4a:e1:33:31:e8:c1:01:48:44:37:82:
a0:83:bc:25:a4:23:4a:6e:86:3c:39:94:76:21:48:
e5:e4:48:13:3f:7e:fb:6e:5c:ea:52:8a:a0:91:e3:
e9:a5:d9:af:b8:73:d3:82:ac:02:5f:59:91:78:47:
4f:98:c2:bd:27:a8:a7:50:3d:6f:4d:e5:be:e0:eb:
8c:45:41:57:ad:5a:20:5e:3f:0d:42:a8:cc:67:98:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BB:BA:E5:01:49:05:42:BD:FD:33:CC:AE:A5:CF:5C:32:A9:C5:01
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QLu65QFJBUK9_TPMrqXPXDKpxQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:6e:d6:25:c6:e5:6e:32:c1:46:90:53:12:c9:9b:9c:26:69:
9a:41:7d:91:25:d3:7d:23:75:69:b9:cc:0c:3c:4c:e0:a5:62:
8e:d7:c5:5f:98:80:72:07:c2:01:c1:05:fd:8a:38:af:4c:fc:
0a:3b:2a:9f:8b:92:db:a9:45:97:97:5f:20:4e:2a:bd:33:97:
91:8a:d5:38:47:06:92:56:c1:be:ee:1f:df:4f:41:4b:72:73:
af:9d:0c:bd:98:50:da:e5:05:6d:00:f9:0b:6a:b4:ed:bf:f9:
9b:8f:42:e3:2d:ff:4b:ae:0b:d1:be:a5:6a:38:87:ea:d4:43:
7a:94:f1:44:5b:46:c2:33:aa:fe:90:8a:4c:31:08:d0:ce:bc:
5c:de:39:b7:55:e7:d8:a8:95:dc:6c:8b:b4:f3:49:07:fc:44:
97:68:cd:ff:c8:b1:67:44:f3:67:87:a0:01:06:2e:6f:54:2f:
e1:f5:61:9b:25:e8:cf:d1:4e:00:aa:88:3a:f4:5b:a7:47:3b:
2b:a7:8d:96:2a:8d:f6:3f:eb:80:3d:95:9b:0b:7c:7e:de:ec:
11:11:be:99:ec:d5:a1:04:7b:2f:43:e3:cf:20:74:65:2e:7d:
0f:d9:a2:87:99:47:25:c7:11:30:7d:45:60:1f:b8:08:44:a1:
29:69:a5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:01:19 2025 by rpki-client