Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QUQa5nH7nM0kX9zz4UZaPfnY24s.roa
File: QUQa5nH7nM0kX9zz4UZaPfnY24s.roa (raw, json)
Hash identifier: pnSVrudC7cMjlSuh9Bwys2q7Rzq9CoMIYRSsiVma/+g=
Subject key identifier: 41:44:1A:E6:71:FB:9C:CD:24:5F:DC:F3:E1:46:5A:3D:F9:D8:DB:8B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EF0745502E31E793AABAF1B180E58FE6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QUQa5nH7nM0kX9zz4UZaPfnY24s.roa
Signing time: Sun 13 Aug 2023 13:12:58 +0000
ROA not before: Sun 13 Aug 2023 13:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ef:07:45:50:2e:31:e7:93:aa:ba:f1:b1:80:e5:8f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 13:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41441ae671fb9ccd245fdcf3e1465a3df9d8db8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:cf:54:e4:04:bd:8b:79:98:de:f1:45:b8:
eb:6a:ca:ef:0e:94:3a:d0:a2:a9:b8:f4:e3:96:9c:
f1:97:ad:81:85:16:b5:ee:bf:2a:d3:35:d3:78:0c:
8b:db:a0:27:f0:7f:e1:2e:b2:b6:1b:de:7e:47:17:
c4:e1:46:d1:c6:e1:ec:02:f9:97:d8:a1:29:d9:6b:
56:cc:b9:a1:b4:e5:d9:86:3d:b5:51:c3:ae:36:e0:
df:f6:5a:be:a2:70:b9:da:78:4a:86:76:58:7a:b0:
81:44:7f:cd:2d:04:10:fb:4f:35:f9:20:f1:94:f4:
b5:71:21:a9:1f:8d:94:e9:7b:4a:9b:8c:28:74:9d:
35:89:ae:32:51:d4:9e:6c:1b:a5:5c:ef:75:71:b3:
a4:78:58:1d:ff:6e:8c:16:9c:71:66:ed:45:3e:0c:
aa:89:a2:3d:74:b6:61:e5:65:a0:67:d2:5c:df:b5:
95:ff:05:65:9b:fb:96:75:e1:cb:16:20:23:3b:2d:
d6:10:57:38:fc:aa:83:8e:8f:b0:c9:cb:2d:1c:f5:
2a:c5:ac:ff:ca:28:73:c7:6c:a4:79:1b:32:4e:d1:
2a:1f:70:8d:03:4f:6a:db:85:43:cf:9c:fa:2a:00:
68:75:e3:19:37:0c:8f:42:f1:84:2c:79:2d:57:9b:
ef:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:44:1A:E6:71:FB:9C:CD:24:5F:DC:F3:E1:46:5A:3D:F9:D8:DB:8B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QUQa5nH7nM0kX9zz4UZaPfnY24s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:f2:96:c3:b6:5f:4a:73:67:5a:81:21:0a:be:52:b3:87:91:
1c:d9:a0:41:f0:85:13:34:fa:c3:e7:07:91:af:ac:c9:fe:ae:
c5:90:ef:5f:5f:f8:e6:37:48:ae:e7:c2:ca:b7:8a:65:34:9a:
9e:20:0b:2a:ff:48:8f:da:4f:1e:53:53:4e:85:84:dc:4d:b4:
63:16:f1:9f:ad:7b:fc:57:2c:42:3c:da:eb:94:d5:ac:84:5f:
fc:3e:0c:4b:a5:ae:e4:34:af:07:a7:b7:7e:bd:3c:21:75:06:
4c:75:11:a0:cb:59:a1:a7:2d:4b:4f:63:24:9e:7e:ad:6c:01:
ad:09:6f:33:7e:a5:cb:a3:ee:9b:5c:42:0f:fa:4f:26:d2:02:
31:02:cc:f8:73:7c:59:8c:a1:0d:19:f1:fc:a7:1c:32:42:9c:
5b:7f:14:e1:67:12:d7:1f:94:72:2c:61:67:44:7c:66:3d:c3:
9a:00:24:8c:c3:67:50:f8:27:73:78:de:09:0b:ee:eb:01:ea:
f5:73:1a:41:e5:65:5e:d0:4f:27:c9:6b:a3:8f:b8:2f:c3:c3:
13:22:a7:7d:0b:c4:0e:f8:3e:46:d1:da:bc:bd:c0:53:0c:fa:
97:22:ba:00:37:c0:e6:55:4b:25:08:11:d3:7f:35:3c:d3:13:
3a:65:cc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:27:26 2025 by rpki-client