Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QRscjCbmZz_qkVC69xCRmdrEHX0.roa
File: QRscjCbmZz_qkVC69xCRmdrEHX0.roa (raw, json)
Hash identifier: NiO8fpwDmnPdPoUvdEK6GDmDLXYNOuchVgUHm2YYLLE=
Subject key identifier: 41:1B:1C:8C:26:E6:67:3F:EA:91:50:BA:F7:10:91:99:DA:C4:1D:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 90FF54AB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QRscjCbmZz_qkVC69xCRmdrEHX0.roa
Signing time: Wed 29 Jun 2022 22:11:02 +0000
ROA not before: Wed 29 Jun 2022 22:11:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2432652459 (0x90ff54ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 29 22:11:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=411b1c8c26e6673fea9150baf7109199dac41d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:09:c6:cd:98:78:5b:49:65:f2:df:93:92:
53:ff:f8:a9:5a:7b:23:5d:f0:88:34:a7:3d:4e:a7:
56:c2:e2:4b:8d:cd:20:5a:84:75:6b:99:b0:dc:1d:
ba:59:6e:b8:94:17:43:30:b9:b2:08:00:df:5c:70:
7f:15:09:af:49:73:1a:ac:bb:99:1a:c9:af:99:a6:
fe:54:2a:14:5c:88:cc:be:c7:b2:a4:4c:71:6d:1d:
b9:ee:4c:5c:e9:f0:44:8c:63:40:42:17:4e:85:7f:
4f:85:2a:c8:64:15:c0:ad:10:6f:9b:f5:77:52:5b:
f4:66:aa:10:47:f3:f1:d6:01:d2:c1:cc:ae:d8:99:
6c:d4:8d:3c:4e:a8:43:de:59:90:26:05:47:a2:02:
01:f7:54:d2:ba:cf:1e:13:bc:8d:a8:4a:4c:f8:41:
5e:aa:4e:32:b0:5c:6e:04:b4:c1:85:c7:62:8b:14:
9f:8a:40:f8:57:c9:a7:65:cf:12:ba:af:41:53:3b:
0d:23:ec:9d:95:f2:d5:5e:1f:4a:80:de:95:2d:0e:
69:f4:76:a1:72:61:f5:c7:4a:27:cc:ed:96:ce:87:
7b:3b:5e:68:af:6e:a3:13:ca:c3:35:75:36:82:bc:
71:fa:ff:7d:db:06:05:81:b3:d9:7c:8c:c1:e9:5c:
03:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1B:1C:8C:26:E6:67:3F:EA:91:50:BA:F7:10:91:99:DA:C4:1D:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QRscjCbmZz_qkVC69xCRmdrEHX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:9f:42:d4:e1:ca:9b:03:cb:1d:4f:cf:b0:4f:02:73:59:09:
24:48:e5:71:b2:c7:4b:57:2c:2a:70:cb:eb:24:89:de:94:45:
66:3c:f2:45:d6:d9:8c:4f:a7:57:ee:ea:53:32:a8:21:10:f5:
d5:a7:67:52:96:46:56:6c:b7:e9:f6:87:de:7e:40:a2:fa:02:
df:20:a1:72:43:5b:af:ea:81:4c:5a:46:ac:e4:fa:53:d8:68:
f4:6e:5f:4c:6f:fa:7f:01:9c:6b:55:05:a7:50:8d:63:f7:58:
1d:ed:ec:3e:70:51:f3:68:36:a2:a2:0e:6d:c4:f2:e3:02:f1:
50:4a:2b:08:7c:60:fe:e9:34:0c:fc:c7:f7:5f:c0:71:89:37:
2d:28:ab:6e:71:2b:4d:73:47:e8:70:b5:5c:3d:0a:c4:54:9e:
97:e4:d6:12:1a:eb:cc:f8:d0:0e:4e:a4:6c:ce:ec:2b:fb:36:
5f:46:24:95:ab:0c:b7:5f:17:8c:44:0a:24:9e:79:f7:e0:c3:
18:75:95:5b:8a:f1:39:bd:c3:3b:68:8a:9e:3a:b0:3f:77:74:
5e:dd:61:4a:3b:47:4c:73:5c:cb:25:86:ca:e5:26:7c:62:00:
41:1a:89:49:bb:92:83:d1:f8:77:26:3c:f6:c0:62:16:94:c3:
31:be:e1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:01 2025 by rpki-client