Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QYxYjVoALU3Dv6tfvmJzf5P_0Pc.roa
File: QYxYjVoALU3Dv6tfvmJzf5P_0Pc.roa (raw, json)
Hash identifier: Lgl1c3d4i2Hl8/vdX0/s4YuQL0uDW+uGo8QNGodcEjY=
Subject key identifier: 41:8C:58:8D:5A:00:2D:4D:C3:BF:AB:5F:BE:62:73:7F:93:FF:D0:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01836968066FBF31E9B6A1C524134BC7518B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QYxYjVoALU3Dv6tfvmJzf5P_0Pc.roa
Signing time: Fri 23 Sep 2022 08:12:48 +0000
ROA not before: Fri 23 Sep 2022 08:12:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:69:68:06:6f:bf:31:e9:b6:a1:c5:24:13:4b:c7:51:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 23 08:12:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=418c588d5a002d4dc3bfab5fbe62737f93ffd0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:ae:6f:75:c9:8d:c0:c5:2c:12:dc:47:db:
1c:bd:90:a0:6b:91:ea:4e:98:50:3f:95:ae:d3:f9:
bc:d9:b9:9f:7b:c0:3c:3a:bb:68:a7:c8:57:c5:ea:
7f:24:47:8f:93:3f:eb:53:8f:74:23:d2:d1:f9:19:
78:0c:48:90:91:fe:91:b4:ed:a4:2c:1e:86:cd:b0:
dd:e1:cc:ca:a4:d0:5b:2f:29:1d:dc:49:9f:14:85:
d4:84:26:1f:09:ac:b1:6b:e5:9f:65:66:5a:5b:2a:
e3:a8:28:40:36:d0:2d:8b:54:1f:41:81:85:76:8f:
59:44:b2:58:21:3c:4b:09:f6:07:95:b2:2d:b7:a1:
19:dd:f4:fb:36:0b:73:a9:6c:14:73:a2:0e:26:c3:
fb:31:04:60:01:57:c8:c1:30:db:a2:4b:01:e2:b7:
8f:cc:eb:08:85:3c:43:3a:57:1f:43:d6:52:29:d7:
6a:d7:3a:b4:a1:99:7d:af:53:fa:97:f4:e4:89:97:
d8:51:e4:da:fb:5a:b8:73:f1:7b:b8:1f:1d:e4:a5:
7f:29:97:0b:6f:c3:ed:7a:8f:e4:af:46:bd:f7:49:
aa:f0:be:b1:44:75:17:48:d2:2a:d3:08:1d:07:f5:
e2:5b:9a:65:06:48:ff:62:e2:02:6e:af:5e:25:99:
04:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8C:58:8D:5A:00:2D:4D:C3:BF:AB:5F:BE:62:73:7F:93:FF:D0:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QYxYjVoALU3Dv6tfvmJzf5P_0Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:42:9f:aa:ae:b0:66:b3:f5:96:38:0b:27:77:63:37:55:7d:
f6:40:6d:44:df:2a:66:b8:0d:de:12:ac:db:57:66:5c:f4:0e:
c3:bc:85:18:bb:13:5b:c7:ef:0b:61:4a:f8:cc:a8:bf:93:cb:
4d:e4:fa:d0:43:16:cf:76:ae:79:eb:84:d1:e8:3f:25:e6:6b:
62:8f:5b:75:e6:d2:f9:a3:54:e3:41:f3:88:09:67:7f:e4:81:
0f:66:a7:20:80:3b:fe:6e:d6:c8:80:4f:6e:c8:d2:a3:32:93:
13:64:80:86:5e:bd:81:48:fe:e8:9b:17:00:67:62:63:af:7b:
ba:c3:b1:93:50:eb:2b:8b:dd:0d:f9:1c:1b:f6:c8:f4:46:05:
92:94:c0:be:67:c7:dd:c1:db:f2:bb:12:39:20:4b:08:33:93:
fb:8a:4e:26:98:31:46:23:47:cb:e2:0d:df:e1:c7:aa:f1:f9:
8d:0a:11:cd:1e:fa:49:52:fe:c1:1d:da:8e:04:46:c8:76:5c:
2c:56:70:5d:d2:f2:fe:be:82:e1:3a:16:be:94:ee:87:d2:29:
d6:0a:be:a1:78:7a:15:d1:f3:41:30:60:17:60:36:f8:01:dc:
97:b0:8a:30:ce:32:b8:ec:17:44:04:f3:c5:45:16:8a:33:b1:
ae:8c:2c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:20:27 2025 by rpki-client