Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QXGoQu1ywCbYuUVM8HWsNkYMOK0.roa
File: QXGoQu1ywCbYuUVM8HWsNkYMOK0.roa (raw, json)
Hash identifier: TJ02Lya1QVTUoeN4benUjSD+GOfChe7Nbw9gg8rLnIY=
Subject key identifier: 41:71:A8:42:ED:72:C0:26:D8:B9:45:4C:F0:75:AC:36:46:0C:38:AD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6FD331A5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QXGoQu1ywCbYuUVM8HWsNkYMOK0.roa
Signing time: Sat 05 Mar 2022 07:09:33 +0000
ROA not before: Sat 05 Mar 2022 07:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1876111781 (0x6fd331a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 07:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4171a842ed72c026d8b9454cf075ac36460c38ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a0:05:92:b0:25:04:62:bd:fd:0d:3a:e3:f0:
1c:de:15:b6:d2:e3:32:51:6b:ca:2d:4e:c5:25:9b:
f5:cd:cb:6d:b9:f4:79:2e:e6:ad:37:d7:96:ef:83:
61:97:29:f9:02:95:6f:14:25:98:8a:81:1d:3e:93:
77:bf:e3:17:ea:50:da:bf:63:84:d1:d9:9f:7b:20:
89:1c:ce:56:a4:e8:9e:46:8b:10:40:f2:0a:35:d9:
13:ce:41:10:3a:1f:cd:b6:e9:01:68:a2:35:ca:67:
a2:12:e0:99:2d:5f:b2:d5:8a:cd:73:82:7d:e7:ae:
0d:20:52:96:ad:c8:9b:c7:94:94:38:b2:38:1e:6c:
0f:71:df:19:8d:1b:c2:08:c9:04:6b:b6:10:e5:8c:
48:62:b8:b0:05:cb:a5:92:0e:34:32:bc:9a:05:6c:
15:b2:19:c6:0b:2c:df:9e:87:4b:96:0d:15:cb:a6:
8c:ac:54:ec:3d:fb:8d:c5:6a:0e:8e:f8:73:2c:1f:
07:1f:5a:c0:0d:28:b5:b6:5f:3d:6a:bd:08:94:54:
3b:4c:62:6f:73:11:db:bd:bd:d3:ba:5d:0d:d3:ad:
1b:c7:f4:f2:4b:43:bc:ab:aa:55:c5:7d:95:c8:93:
e5:20:51:42:46:ee:85:9c:9a:b5:95:d9:d9:42:9d:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:71:A8:42:ED:72:C0:26:D8:B9:45:4C:F0:75:AC:36:46:0C:38:AD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QXGoQu1ywCbYuUVM8HWsNkYMOK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:11:11:4e:5a:e7:96:a9:ad:dc:23:02:13:68:1d:9a:52:4f:
2f:42:c1:ec:a7:01:07:8e:5a:02:18:5f:7f:60:c1:3b:bc:24:
81:a5:15:37:c8:9c:3c:0e:c9:89:49:8d:b1:3d:fb:63:58:1c:
b7:c6:21:98:99:c8:d0:b3:c4:c0:ac:0b:61:49:e3:95:38:71:
08:6d:ee:59:02:e6:c1:ba:b4:36:0d:73:86:b5:ff:2f:ba:41:
a3:0b:1b:3f:5f:d2:3c:99:9d:e2:46:66:c6:8f:e1:e5:aa:16:
fb:a6:a2:a2:55:58:59:81:8e:af:58:8c:6c:18:de:34:03:39:
48:d2:c0:77:47:de:05:0c:3b:df:df:03:c1:4b:2c:ea:1d:3c:
f1:13:c0:2a:d9:14:56:de:42:4c:7b:86:bf:e3:f7:65:fc:f3:
e2:cb:d5:22:1d:1b:00:07:5a:35:eb:f9:39:14:6a:ad:46:fc:
ef:2d:8b:99:d5:f8:54:12:1d:e6:01:52:dc:aa:49:e3:ef:27:
c3:ba:8b:85:78:47:cf:56:1c:f3:52:6b:62:76:fd:79:d5:db:
c4:f6:1a:fe:fb:f9:26:69:2e:23:06:b8:d0:71:03:77:9d:63:
95:45:03:d0:18:6e:e9:9f:f4:d0:80:a6:6c:68:47:6c:95:16:
c1:59:c9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:43 2025 by rpki-client