Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QQ4Xj0mHkFlZ829KzKPsSNLJTFI.roa
File: QQ4Xj0mHkFlZ829KzKPsSNLJTFI.roa (raw, json)
Hash identifier: XqKR6/+ARlWeN1mkgAEeM+fttO1TCENpRQ0xvHBiMGE=
Subject key identifier: 41:0E:17:8F:49:87:90:59:59:F3:6F:4A:CC:A3:EC:48:D2:C9:4C:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E07805536DB7093964DC8389C57481DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QQ4Xj0mHkFlZ829KzKPsSNLJTFI.roa
Signing time: Tue 14 Mar 2023 14:13:27 +0000
ROA not before: Tue 14 Mar 2023 14:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e0:78:05:53:6d:b7:09:39:64:dc:83:89:c5:74:81:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 14:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=410e178f4987905959f36f4acca3ec48d2c94c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:01:ee:0f:07:77:8b:73:90:d7:34:30:1e:
b4:83:10:88:54:f7:d3:28:3a:83:50:52:92:98:60:
df:fe:b7:d5:ad:29:fe:a1:64:5e:e0:e0:e3:10:5b:
ff:a4:f5:21:91:c8:ba:53:0b:35:4f:9e:c1:1f:ec:
2b:aa:3f:b1:98:4f:98:e1:ea:c6:03:44:6c:58:fd:
da:61:80:aa:2f:ed:77:e9:78:b8:c0:db:09:36:03:
9f:32:59:c0:2e:64:4a:5c:b4:f6:0c:71:20:a6:7e:
b6:40:8c:62:aa:3e:26:ad:b6:79:94:be:3c:d5:35:
57:8d:e7:fb:82:bd:45:6d:b5:74:b9:8e:fe:64:70:
bb:f5:05:e5:ee:ba:80:f3:da:f8:f7:5c:d1:e8:18:
b1:86:9f:b5:22:c2:7b:17:13:6e:77:4a:54:86:76:
84:82:57:cf:2e:8d:83:c0:e6:47:4b:39:28:17:58:
be:61:16:71:a3:ae:7f:53:d1:18:90:63:f4:9e:e3:
a5:70:b9:f0:db:b5:40:4d:41:b5:d0:b6:b0:8c:64:
85:3f:87:c5:c7:3b:99:4c:64:f6:99:84:51:3b:e9:
65:ff:1c:2b:19:9b:1f:f7:bc:33:5f:3b:93:b2:8d:
74:48:e1:e4:cf:e3:29:31:5b:ed:c7:8d:7a:56:48:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0E:17:8F:49:87:90:59:59:F3:6F:4A:CC:A3:EC:48:D2:C9:4C:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QQ4Xj0mHkFlZ829KzKPsSNLJTFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:7e:25:11:01:09:40:e2:ca:83:51:f0:ae:83:55:37:41:cd:
df:5a:da:17:6d:89:32:53:49:a1:9c:7a:ec:32:85:13:b8:bb:
45:12:87:d8:e8:86:c8:8f:91:0a:62:13:ac:f6:25:bf:f1:4e:
ae:3f:c3:ca:36:f6:8c:e0:a6:d4:69:c0:fc:67:7b:e2:05:23:
a6:b8:d6:87:50:20:a4:c6:1f:81:8a:66:ef:bf:14:fc:17:ef:
6b:07:bc:7e:02:e2:76:c3:8a:65:c7:3c:12:6c:56:99:ee:78:
4c:b1:c4:f1:6a:6b:f3:34:bc:44:7b:55:97:9f:90:83:80:49:
fa:84:78:ab:3f:80:a5:84:01:7c:39:43:c5:7d:59:68:71:bc:
d7:e7:de:22:cb:6e:5d:63:80:2d:d8:7d:f3:ee:dc:40:17:78:
fb:d4:40:af:03:8e:53:e5:8e:5e:96:bb:62:a8:5e:c3:49:d2:
5a:93:ba:87:99:bb:ad:15:4f:9e:53:5c:a1:f7:f9:6d:d2:dc:
d5:59:8a:7c:b8:dd:b0:14:07:7c:49:8e:78:08:67:3b:66:26:
11:c1:55:2d:ad:fa:be:0b:4a:d6:d7:c2:a7:73:13:04:49:a1:
a4:02:df:05:08:73:24:f2:3a:62:bd:15:1a:b4:59:cb:22:26:
1b:38:7b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:44 2025 by rpki-client