Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QaR7dwodbueXzVS4pmicTo0LbEo.roa
File: QaR7dwodbueXzVS4pmicTo0LbEo.roa (raw, json)
Hash identifier: xOfX0Z1jvofgTDpN5VDkDKItGdbEeZz26ttB2B2LSms=
Subject key identifier: 41:A4:7B:77:0A:1D:6E:E7:97:CD:54:B8:A6:68:9C:4E:8D:0B:6C:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 66D8162D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QaR7dwodbueXzVS4pmicTo0LbEo.roa
Signing time: Tue 01 Feb 2022 06:09:26 +0000
ROA not before: Tue 01 Feb 2022 06:09:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1725437485 (0x66d8162d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 1 06:09:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41a47b770a1d6ee797cd54b8a6689c4e8d0b6c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8a:c0:cf:b9:81:0f:40:a5:fd:b7:aa:b7:21:
a3:5f:90:89:4a:ac:e2:fc:0a:ea:5f:c9:19:89:4c:
28:20:61:99:d1:f1:29:3e:c1:61:a9:8a:de:29:e8:
76:7d:c8:60:0f:a9:47:da:72:6c:a2:61:df:29:9b:
53:a3:07:31:04:38:b4:d3:16:09:fd:b2:2d:6d:be:
12:ff:b0:a4:0e:97:0a:d1:59:be:8c:8c:e9:81:db:
e0:f9:9b:97:87:41:28:b6:4f:15:8f:ed:a7:7d:25:
74:de:5b:71:ea:2c:7f:dc:b1:3f:37:98:d3:f3:b6:
9f:a0:e1:60:a5:d8:f1:02:42:5e:ff:d0:67:30:e1:
48:41:cd:65:67:42:23:a7:d1:35:f9:84:4e:da:3f:
23:35:f1:5a:83:ec:01:b5:df:bc:91:82:0c:e1:d7:
08:15:ad:98:ee:36:19:1e:d4:84:29:8b:ae:a7:ae:
c3:50:38:b6:c0:97:8c:10:a0:c5:2a:c6:6a:22:22:
07:8f:fc:99:c6:cb:ed:e8:30:29:d2:65:85:58:c1:
cd:f1:f7:fd:ad:34:ca:cc:b4:93:51:60:d8:d2:cb:
39:7c:8f:11:55:a3:6d:52:d3:22:57:02:8f:42:61:
2b:b4:0a:71:90:5b:77:8d:7e:31:98:f3:f0:d2:00:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A4:7B:77:0A:1D:6E:E7:97:CD:54:B8:A6:68:9C:4E:8D:0B:6C:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QaR7dwodbueXzVS4pmicTo0LbEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:1e:7e:2c:a8:d7:bb:01:dd:3e:8b:f8:9b:2d:42:c8:1a:be:
98:4f:68:cd:e8:a7:0b:7b:ee:f2:7a:86:cd:3a:0a:a6:87:d9:
0f:27:cf:a3:6d:2a:03:66:3d:b3:2d:a7:5e:27:97:4e:df:3d:
fe:f7:5e:d5:34:b1:a2:2b:f5:83:6e:35:e1:09:a8:a7:68:b0:
1e:a0:07:69:5c:a9:0c:52:61:ec:bd:e7:81:b5:8f:83:a5:f3:
6b:4a:be:7a:86:ec:ef:1d:51:c3:0c:77:5b:17:c2:36:bf:44:
25:fa:2a:ed:3e:10:fd:b7:e7:0f:26:5d:42:ec:a0:77:0a:f9:
7b:d8:38:75:da:b4:ea:51:6a:d8:66:c4:80:f4:b8:85:7e:76:
b3:e5:33:e1:9c:c9:7d:93:27:1e:d6:a3:e7:f7:a9:11:40:7c:
19:7a:03:b2:8e:69:a1:23:62:f8:77:d4:da:57:78:a4:2e:d8:
84:30:4f:75:93:27:d6:b2:39:aa:e6:a7:1a:27:2c:84:64:51:
40:b3:55:14:21:d1:d4:25:e0:55:e9:36:88:78:0c:ca:eb:cb:
6a:71:0b:4c:21:60:04:dc:e0:d5:7c:fa:46:e4:ce:30:ff:4c:
5f:e5:b6:3c:c3:84:9d:65:c9:e3:28:63:70:29:68:99:f3:33:
0f:f5:68:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:12:16 2025 by rpki-client