Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QRUtv31a-Wscy8eOeYmmIJlQNEg.roa
File: QRUtv31a-Wscy8eOeYmmIJlQNEg.roa (raw, json)
Hash identifier: T2PaNvIykUqJr8tRV5CZ+5DU0nQxqIORuHTB4HaWEtc=
Subject key identifier: 41:15:2D:BF:7D:5A:F9:6B:1C:CB:C7:8E:79:89:A6:20:99:50:34:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B1A9320608C68851DA8952C1DCEB4C13
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QRUtv31a-Wscy8eOeYmmIJlQNEg.roa
Signing time: Sun 05 Mar 2023 12:05:00 +0000
ROA not before: Sun 05 Mar 2023 12:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:b1a8:e480/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b1:a9:32:06:08:c6:88:51:da:89:52:c1:dc:eb:4c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 12:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41152dbf7d5af96b1ccbc78e7989a62099503448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9a:0d:3a:34:13:60:1c:fa:18:94:44:d4:51:
58:6f:89:59:38:a4:bc:5b:ec:fc:55:d3:1f:af:7d:
cd:1a:f6:dc:09:89:c7:e8:08:71:6f:35:0e:c6:2e:
9a:7b:94:87:e3:70:ff:41:41:07:ca:16:31:93:71:
c5:31:dd:8d:78:aa:76:7e:8a:06:e4:19:60:76:50:
38:37:c5:ff:e6:ac:cf:06:98:5d:f2:ee:e9:d2:6e:
7a:1d:c4:01:64:8c:2b:c5:15:4f:72:8f:18:e8:7f:
a6:ff:4b:36:42:54:6d:0b:49:cd:0c:f2:43:87:5a:
91:9d:71:1c:75:15:89:4b:0c:5c:4a:a8:3f:b5:4e:
0e:61:c7:27:56:1d:a3:32:f1:23:21:2f:30:42:45:
2f:d6:3b:ec:14:07:c5:6e:15:b0:da:a8:f1:00:5c:
06:41:28:36:e1:d0:69:fb:bc:92:d7:1f:85:32:03:
34:01:6f:a2:0c:1f:e7:4b:54:65:e3:b0:b6:c7:32:
21:b1:c3:64:f3:42:b8:5e:6a:19:12:94:d2:97:8a:
91:d4:d1:cc:77:7c:ad:69:fd:63:1a:23:0a:d5:9e:
84:bb:84:89:42:f1:c3:6d:8e:ce:bd:f2:00:fe:b6:
a4:f7:13:c0:20:1b:58:eb:83:c2:8a:c6:70:43:a9:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:15:2D:BF:7D:5A:F9:6B:1C:CB:C7:8E:79:89:A6:20:99:50:34:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QRUtv31a-Wscy8eOeYmmIJlQNEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:81:0a:10:96:e1:21:11:9d:08:71:1c:ed:69:17:48:e7:b5:
54:0b:04:a4:03:fd:64:a1:05:1d:8e:0d:e3:e6:4d:7b:7e:46:
cf:05:06:3d:c8:59:65:50:26:12:08:7b:f9:e8:4d:98:b9:5c:
03:e9:1b:f3:15:84:86:69:93:75:13:54:c9:7a:09:e1:f4:39:
df:4a:ba:29:ec:e5:6b:51:67:7d:05:fc:91:91:c8:36:68:69:
fb:bb:d9:bc:ca:ae:28:41:ca:1d:1d:66:d2:c4:a2:e8:da:cb:
a4:cc:15:4c:e9:91:2e:79:d0:4b:29:91:07:e9:d8:ea:fc:4e:
48:49:ca:bc:2c:e3:cc:5f:d3:9b:75:28:ac:fb:e2:37:09:a6:
58:84:8d:f4:0e:4d:33:73:b1:b2:7b:57:82:5e:54:26:cb:13:
48:ab:5f:9f:12:0d:e7:1e:5f:45:80:22:3f:08:32:3b:cf:11:
e7:a1:f3:06:78:47:fa:4b:37:b1:74:76:ef:83:b2:5d:b0:a3:
3c:91:92:11:af:af:03:56:55:96:d4:b4:91:1e:24:19:7d:bf:
27:a2:5d:ef:86:52:00:23:2d:cd:0a:7e:6d:5b:cd:71:ce:ae:
8b:e8:22:ad:c1:98:e2:a5:e1:fa:c0:72:4e:a0:80:84:dd:5c:
de:3b:82:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:44:26 2025 by rpki-client