Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QO0JY_ADmQZ6Wc4VuLB0bX_l0dg.roa
File: QO0JY_ADmQZ6Wc4VuLB0bX_l0dg.roa (raw, json)
Hash identifier: 1QUWpu899YiJE5j+fYl3xQQXShEPKJOW9GzFRoUnXds=
Subject key identifier: 40:ED:09:63:F0:03:99:06:7A:59:CE:15:B8:B0:74:6D:7F:E5:D1:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01860DF73DF73AF98A64C9BCBC75136DDFB6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QO0JY_ADmQZ6Wc4VuLB0bX_l0dg.roa
Signing time: Wed 01 Feb 2023 17:12:32 +0000
ROA not before: Wed 01 Feb 2023 17:12:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0d:f7:3d:f7:3a:f9:8a:64:c9:bc:bc:75:13:6d:df:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 1 17:12:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40ed0963f00399067a59ce15b8b0746d7fe5d1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:87:aa:5a:4a:10:9e:c1:6d:2e:cc:75:17:
55:e0:6c:00:da:c6:db:7c:1b:26:d8:d9:c5:9e:26:
51:2f:71:ab:20:d2:69:2f:fd:5e:5d:f2:05:7f:9f:
06:1d:f4:e1:b0:a0:45:e8:2f:27:0f:3f:84:95:70:
df:3c:d9:8a:52:bb:e8:a3:a3:2b:d5:d1:7b:54:49:
b8:b8:c0:5b:34:1b:eb:04:72:08:f0:63:9e:2e:4b:
69:96:86:a1:ac:23:9c:fe:af:30:01:6c:a6:c7:8f:
48:0c:9d:4e:b6:0e:85:e9:41:bf:f2:2f:43:5e:92:
5e:fd:63:87:b5:ff:08:bb:95:04:16:d2:aa:ac:aa:
1d:b6:d4:31:4e:1a:9c:b2:ed:15:e3:56:24:e0:e0:
77:35:1e:cd:ca:0b:98:17:c3:68:82:9e:df:e8:7d:
5e:66:15:b6:e0:14:9c:d3:01:b1:35:8d:03:7b:00:
8e:e8:ec:99:8e:cc:51:90:49:1b:62:02:5b:ba:83:
8b:96:19:9e:23:d4:0c:92:d3:74:c0:b1:af:6b:b9:
50:ae:04:0e:c7:69:8c:ad:ec:fb:75:8f:e5:f1:fe:
8f:2b:6c:92:bf:fb:3f:43:f2:02:75:86:78:08:db:
ba:1b:ca:3a:ee:4d:fe:2f:33:bd:13:3d:d0:d5:ee:
54:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:ED:09:63:F0:03:99:06:7A:59:CE:15:B8:B0:74:6D:7F:E5:D1:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QO0JY_ADmQZ6Wc4VuLB0bX_l0dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:5d:fc:2c:5b:c5:a8:6a:a4:38:13:6c:42:c0:86:bc:4a:cb:
15:58:81:bd:9d:3d:df:0d:0a:4a:34:81:bb:c6:36:9a:d7:5d:
f0:b7:44:22:28:ea:e1:b6:cc:87:fe:be:46:a4:03:be:5f:63:
ac:1b:cf:2e:c5:23:c3:d5:1a:32:8a:98:ad:27:02:ba:2e:38:
01:2d:02:b9:12:a8:89:50:d0:eb:9c:10:20:5e:e2:cc:d3:97:
88:01:5d:f8:55:6c:d0:c0:3d:83:4f:db:51:47:1d:c3:3f:2a:
2f:28:2d:a7:70:df:59:22:c2:e8:9c:41:b1:08:ac:3e:9e:8b:
3d:bd:53:86:78:4d:32:a9:f1:48:e0:9f:2a:bf:16:a4:7c:87:
fd:2f:2d:e0:27:d6:36:37:ca:3a:b8:da:37:a5:0f:e2:d6:51:
9b:16:0b:61:74:b1:95:c4:b4:85:6a:d9:02:d0:94:0c:a4:ff:
d9:fb:70:49:a6:2b:f0:43:35:de:12:9e:b9:b0:02:d2:1e:3d:
44:4a:5d:bb:8d:8a:22:39:63:42:b9:b4:1e:15:fa:ce:26:11:
91:51:09:c8:b3:fb:d3:15:27:e0:3d:c1:47:0f:f1:ac:1c:13:
23:3e:0e:ff:36:9f:1d:68:b1:c4:58:a2:7e:81:7f:9c:a6:a2:
f4:ff:e9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:49:17 2025 by rpki-client