Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QNhjQe9wbP_pHJfpcedEBqikN90.roa
File: QNhjQe9wbP_pHJfpcedEBqikN90.roa (raw, json)
Hash identifier: bZ3v9wditKQcqz/I5aAYo21nM+FYHQIwi/e7+tucl+o=
Subject key identifier: 40:D8:63:41:EF:70:6C:FF:E9:1C:97:E9:71:E7:44:06:A8:A4:37:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880B26C247AB08B4B25DE7D819BC9B76EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QNhjQe9wbP_pHJfpcedEBqikN90.roa
Signing time: Thu 11 May 2023 14:11:09 +0000
ROA not before: Thu 11 May 2023 14:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0b:26:c2:47:ab:08:b4:b2:5d:e7:d8:19:bc:9b:76:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 14:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40d86341ef706cffe91c97e971e74406a8a437dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:5c:f6:e1:9c:eb:29:e2:af:d4:08:32:41:
11:72:fa:f0:d7:c8:03:06:cf:2a:77:f1:cf:0b:eb:
46:46:45:7f:7c:d1:01:b5:9b:0f:a1:7d:af:37:d9:
22:f3:2f:88:0d:61:4a:d7:e0:3e:6f:59:89:87:47:
a4:e4:8c:17:40:e7:9f:94:31:af:77:9e:a7:89:c8:
49:9e:90:a8:38:d9:b7:83:56:43:07:54:b9:da:8e:
f8:1a:f4:80:5a:a2:1e:a7:86:b2:af:bd:c8:4c:f0:
2f:56:54:bd:ce:a5:b4:d3:cd:8a:27:12:9d:ae:40:
72:6b:ca:d3:1d:07:0a:d3:9d:76:00:35:73:8d:80:
99:b5:78:a8:18:47:2f:a2:e7:62:7e:0c:08:d5:a0:
b3:ec:87:4f:77:8c:43:ef:4e:d1:58:21:b0:0a:64:
2c:53:b1:d2:40:7b:79:f4:e1:87:54:ba:91:22:29:
13:bd:98:1a:57:eb:44:e6:dc:0e:98:11:31:fc:a3:
3b:e9:89:df:c3:3b:e1:cd:f2:d8:b4:b2:3d:8e:59:
ce:3a:23:c0:6e:d0:47:5c:2a:bd:dc:71:1e:db:0c:
56:95:85:05:07:c9:38:f2:a4:83:4c:6c:24:37:13:
c2:fe:77:c1:67:a9:69:1a:64:75:68:d8:cd:06:e5:
31:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D8:63:41:EF:70:6C:FF:E9:1C:97:E9:71:E7:44:06:A8:A4:37:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QNhjQe9wbP_pHJfpcedEBqikN90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:d2:52:a8:6c:87:4b:f4:73:12:96:9f:4d:6d:a1:13:3d:55:
26:c3:77:68:9c:eb:e4:19:90:42:1f:33:0a:d3:5c:45:fd:b6:
03:25:13:78:d0:2e:47:e0:18:8d:0d:e6:6a:9c:83:2b:f6:0a:
1a:35:7a:7a:cd:e3:42:fa:c6:b8:d3:c7:00:37:5f:3a:31:44:
20:0b:ac:79:51:cd:37:d4:d0:56:91:c2:80:b4:e3:ea:d6:be:
b3:cd:72:3e:33:88:b4:5d:24:75:74:61:cd:14:6a:d3:b5:81:
8a:19:b3:da:28:34:e5:9c:18:e2:bf:0e:60:50:3b:7b:fe:fd:
90:eb:ab:dc:5d:bc:9b:e2:3c:f5:56:6d:eb:f9:a7:43:fc:29:
b5:72:ea:18:cd:e7:2f:08:ca:58:d7:77:a3:80:87:25:04:58:
2e:f0:5e:15:ed:e6:27:20:13:38:72:9e:8d:45:3b:22:24:5d:
67:b1:c3:eb:bf:6f:ee:a4:75:3c:ef:2b:90:eb:17:e4:0d:76:
d5:cf:5a:89:72:06:98:76:2b:6a:48:f9:25:e0:0f:be:05:c5:
30:9c:43:ed:d6:3e:af:c5:ef:7e:e8:30:61:2a:1a:ee:b0:20:
a9:28:5e:fc:20:b6:02:e0:b6:60:99:c4:e6:c7:92:60:9d:0d:
ad:ac:db:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:49 2025 by rpki-client