Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qc-MPCX-zKA0alXeP2kg_Q028oo.roa
File: Qc-MPCX-zKA0alXeP2kg_Q028oo.roa (raw, json)
Hash identifier: D5E8JR4zoVu+7l3TjQEyM4GRypZjRI645NhtqIP/zhY=
Subject key identifier: 41:CF:8C:3C:25:FE:CC:A0:34:6A:55:DE:3F:69:20:FD:0D:36:F2:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F7D4D6F11DD63965BEBEF5644FAAD914
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qc-MPCX-zKA0alXeP2kg_Q028oo.roa
Signing time: Tue 15 Aug 2023 06:14:28 +0000
ROA not before: Tue 15 Aug 2023 06:14:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f7:d4:d6:f1:1d:d6:39:65:be:be:f5:64:4f:aa:d9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 06:14:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41cf8c3c25fecca0346a55de3f6920fd0d36f28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0d:8c:c8:31:79:77:54:44:c5:de:bc:64:77:
4f:fe:9e:cd:10:41:af:29:41:1c:a8:d7:dc:02:2d:
98:a9:8a:f5:90:1e:77:58:e8:23:d4:13:99:4a:f2:
2b:b7:54:05:42:57:65:5e:8d:6d:a3:71:64:9f:25:
47:af:51:9f:ac:44:55:9f:ec:1a:f1:93:5e:2c:52:
7d:20:60:63:8a:83:bc:99:e3:32:b8:24:11:50:d0:
b2:7b:4b:f2:1b:09:23:ea:04:91:85:4c:bb:ec:b8:
86:45:71:8a:c8:4a:9d:f5:d0:93:3a:6c:6a:d8:95:
8f:b6:58:29:a7:8d:fe:4a:ca:05:02:d7:70:44:2f:
63:ff:ff:97:02:30:00:9f:f7:2f:b1:5d:16:e7:41:
f2:00:16:16:96:e7:e3:9a:cf:2a:90:99:2b:41:02:
41:79:ef:fa:07:37:12:94:15:6c:9a:89:51:2e:f5:
fb:28:3e:3e:36:fa:a5:23:a6:56:1a:55:ca:cf:a8:
25:0c:d9:7c:75:4a:de:03:7f:3a:2e:b3:0f:f5:a1:
83:db:28:7f:db:7e:38:90:9e:de:ed:b5:5a:1a:95:
84:a1:33:71:43:08:a6:0f:ed:c7:23:7d:30:72:a2:
6c:36:48:2c:a8:6a:cb:2c:75:cb:f4:b6:49:4b:96:
cb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CF:8C:3C:25:FE:CC:A0:34:6A:55:DE:3F:69:20:FD:0D:36:F2:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qc-MPCX-zKA0alXeP2kg_Q028oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:50:00:a2:83:e5:d6:94:23:84:6d:34:fa:6a:b1:b9:da:94:
36:33:48:83:7e:84:94:11:1c:d7:9f:cb:c1:35:b8:9d:3b:72:
91:36:d7:8b:03:f6:0b:36:93:32:4d:67:89:fd:af:35:38:1c:
36:03:47:6e:72:fe:a1:62:09:cb:a3:25:17:cc:b9:ec:d4:cd:
bc:35:ac:5e:96:6c:23:23:7d:8e:15:5b:8a:8b:9a:f3:83:8e:
5a:b4:87:87:db:51:95:4f:89:6a:f4:bc:ec:6b:44:25:97:00:
ff:ac:cc:66:4a:11:6d:30:bf:3a:d5:41:96:dd:8e:fd:fd:8f:
cc:12:9e:5c:be:1a:69:39:35:22:99:95:c9:5f:84:32:68:2f:
16:75:45:07:17:04:4e:c2:32:fe:ef:7d:a4:47:c1:5e:c2:34:
e6:9d:9d:62:38:b3:ae:9f:15:75:99:89:76:14:bb:d0:04:16:
12:99:cc:97:de:67:7c:3f:35:2b:41:69:f7:1a:55:75:11:06:
1a:37:e8:99:71:4b:10:6f:f7:c0:b3:18:66:7a:6d:32:fa:ca:
21:e3:18:ae:17:cb:07:63:4d:b8:61:f7:b0:e3:a1:d8:53:08:
25:b5:25:2e:d9:bf:19:52:2e:c3:ce:60:d4:63:3d:f9:b8:3a:
06:6d:a7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:01 2025 by rpki-client