Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QPLcO35Gkh8iWzCGyFXp1Bn5YnU.roa
File: QPLcO35Gkh8iWzCGyFXp1Bn5YnU.roa (raw, json)
Hash identifier: Q6s76ngbTh5WKC9YAVNdvyM2b17pclsAjByHWhBpVfo=
Subject key identifier: 40:F2:DC:3B:7E:46:92:1F:22:5B:30:86:C8:55:E9:D4:19:F9:62:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182BCAC7807C60F7814B168C3F5B20801F8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QPLcO35Gkh8iWzCGyFXp1Bn5YnU.roa
Signing time: Sat 20 Aug 2022 19:13:15 +0000
ROA not before: Sat 20 Aug 2022 19:13:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:bc:ac:78:07:c6:0f:78:14:b1:68:c3:f5:b2:08:01:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 19:13:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40f2dc3b7e46921f225b3086c855e9d419f96275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:4e:79:cc:28:c9:81:70:b2:34:4c:6f:f4:
bd:4a:d8:80:61:4f:63:dd:0c:3f:e7:15:03:59:31:
4a:1a:2a:3f:88:99:f9:73:50:e3:52:3e:98:63:2e:
59:b4:c7:e7:57:63:23:ec:6e:d3:65:d7:79:11:f2:
c6:a4:d3:c4:ac:ab:2b:96:25:d0:ff:c5:3f:88:3e:
09:43:a9:6e:75:88:d3:e1:4d:5c:71:9b:4f:e4:a4:
db:c4:4d:33:9e:dc:25:8c:9f:93:f8:60:c5:fa:f8:
f0:78:4b:cd:e3:c4:12:33:30:98:e6:e0:ac:6e:9b:
a4:a2:31:7f:4b:d1:a8:b2:ea:8a:e3:14:9f:35:a4:
e5:dd:52:19:3b:75:a2:1d:15:ee:37:83:ff:49:8b:
fe:0f:3d:88:0b:c7:80:3b:87:36:85:dd:31:7f:6b:
91:c1:c1:66:ad:62:90:00:f9:96:e8:de:39:a7:8b:
26:cd:d8:5e:a7:56:81:78:72:ca:89:c5:e2:1d:75:
bb:bc:ab:21:0f:8d:0b:51:b1:ad:53:60:18:50:d1:
95:a4:07:f9:18:77:7c:77:1b:a4:58:81:39:58:75:
31:b7:05:56:3d:02:25:d4:a5:94:38:d8:58:2c:ce:
cb:ee:13:e8:d8:30:ba:10:82:8d:ea:8d:0a:f8:b3:
ec:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F2:DC:3B:7E:46:92:1F:22:5B:30:86:C8:55:E9:D4:19:F9:62:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QPLcO35Gkh8iWzCGyFXp1Bn5YnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:28:e9:e3:fa:3a:c6:05:d5:db:f1:28:f1:0f:bb:ab:ff:64:
05:56:03:55:e7:60:4c:8a:80:84:6a:2e:a4:84:1c:59:46:ea:
56:ea:d3:73:f7:f9:45:da:7e:45:05:3e:bf:44:ff:c8:6a:d9:
4a:cc:c1:84:9e:4d:8f:82:19:48:cd:48:01:08:1e:93:34:4d:
df:ca:af:a1:ae:5f:ce:3c:47:a4:b6:50:55:d9:b7:b5:bb:a5:
12:44:a7:5a:1d:d1:d5:8d:1f:a7:fb:48:62:99:23:0e:3e:96:
a7:2d:f1:71:8a:34:ca:a4:50:30:4a:ac:7b:0f:f2:7c:a3:a8:
de:50:0e:86:9b:88:f5:a2:4b:0a:b3:81:ac:6c:3b:6d:1a:b7:
58:0a:25:56:fb:77:da:90:5a:be:ad:77:3b:47:4b:6f:45:55:
fc:88:81:e0:1b:dc:0d:21:90:d3:1d:64:88:0a:cc:66:5b:cc:
4d:03:48:56:2c:8d:4e:6b:54:8d:3d:7b:19:e6:78:7c:01:31:
c1:b5:19:28:bf:0f:87:ad:87:5b:9a:7b:e1:6e:d9:35:27:5c:
00:e5:dc:97:32:7b:92:38:95:33:0e:e1:99:d9:81:ec:b9:b4:
c0:6b:05:02:04:84:29:4a:91:da:a3:7c:01:42:e1:9e:73:79:
8f:e0:3b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:27:27 2025 by rpki-client