Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QWEDUgyt5iJbizEzq9K1DrCBc3w.roa
File: QWEDUgyt5iJbizEzq9K1DrCBc3w.roa (raw, json)
Hash identifier: 1m4tDX4p5Tw7K/TAlFUOJWFnnpfPNs5OpIOuxhVkV2U=
Subject key identifier: 41:61:03:52:0C:AD:E6:22:5B:8B:31:33:AB:D2:B5:0E:B0:81:73:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187247BAC612B15A66D346F09B33FA731B2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QWEDUgyt5iJbizEzq9K1DrCBc3w.roa
Signing time: Mon 27 Mar 2023 19:11:37 +0000
ROA not before: Mon 27 Mar 2023 19:11:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:24:7b:ac:61:2b:15:a6:6d:34:6f:09:b3:3f:a7:31:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 19:11:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=416103520cade6225b8b3133abd2b50eb081737c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:83:4b:a5:c8:f9:ea:40:f2:59:b5:aa:3b:d9:
71:12:ef:9b:da:5a:84:3d:34:b8:3c:67:01:03:1a:
04:46:77:8e:a3:f8:18:ae:0b:7e:ca:d7:2d:6a:8b:
4f:13:35:32:fd:22:7f:0c:51:e2:33:27:73:33:c7:
fa:32:6f:c4:b5:d1:fc:95:dc:b6:e6:c6:dd:06:82:
1e:3d:94:10:83:b7:2e:05:6c:e2:eb:36:0f:3c:e5:
94:dc:66:bd:1f:2f:c8:17:61:57:4c:d9:dc:f2:6a:
dd:3d:ee:24:02:c5:21:d7:cb:a4:e9:a6:37:7a:15:
34:b1:d7:ce:0d:7f:ec:c4:d1:b2:8e:c7:4c:a3:28:
73:fc:88:d4:b4:8c:46:78:31:f2:2a:2f:23:d7:cc:
cd:db:2a:f5:4a:86:38:12:be:a2:dc:5e:7f:ff:c1:
08:5d:e3:28:4b:63:66:29:44:30:44:b4:e1:f4:08:
35:25:66:5a:ef:8e:b0:e7:d9:ce:1c:7c:d2:0f:04:
e0:fa:99:48:34:71:fc:39:e0:af:09:34:a5:9a:e0:
6d:00:9a:b3:b8:d3:9e:ed:1d:7e:58:a0:0e:5a:73:
a1:4a:94:f4:6b:2a:4f:57:5a:d8:58:74:f0:2f:61:
96:32:f8:df:79:b5:0c:56:36:f3:86:2b:0d:79:b2:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:61:03:52:0C:AD:E6:22:5B:8B:31:33:AB:D2:B5:0E:B0:81:73:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QWEDUgyt5iJbizEzq9K1DrCBc3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:ef:08:18:38:88:b3:ba:17:e9:66:80:be:a3:f4:dc:5c:0f:
42:25:f6:ab:cc:cb:ec:c7:48:cc:92:3a:de:af:8f:6a:d4:48:
1e:cf:51:ae:23:39:cc:4f:a0:e7:1b:40:b9:b6:36:ef:31:9f:
a5:6a:c8:7d:e8:0a:28:43:09:f0:06:74:c0:4f:54:b1:31:04:
c0:92:4c:3a:eb:8e:72:ff:b4:3d:c6:2b:0e:07:2e:f7:57:19:
c2:9c:c6:b4:8b:fb:28:09:83:2b:27:80:f2:a4:0f:15:91:d9:
9b:a2:46:9e:90:6a:aa:53:ff:21:80:fd:32:88:cf:2a:0b:97:
e3:c1:74:de:bc:00:6d:2a:78:7c:d3:97:4e:11:a1:4b:50:aa:
43:6a:97:95:c4:45:5c:30:58:7a:be:91:5c:9c:5a:39:a6:90:
ba:e5:aa:76:e2:df:41:35:50:62:2e:71:ee:21:ab:89:9b:f4:
34:98:c4:63:3e:63:c4:46:89:de:39:23:a4:39:af:0e:45:a6:
65:0e:10:ee:25:d0:71:d5:94:aa:20:35:8a:71:bf:cc:7b:4d:
e5:66:0a:b5:96:1a:da:e3:24:5b:fb:b7:ee:fc:79:3f:1e:5b:
60:a2:70:7c:3e:17:91:4c:dc:f8:36:de:c5:37:c2:db:85:c0:
93:3e:ac:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 09:05:57 2025 by rpki-client