Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qe48Ibxib3Wn4JJPP2wzMVGLggg.roa
File: Qe48Ibxib3Wn4JJPP2wzMVGLggg.roa (raw, json)
Hash identifier: qovAhIVdGWcYKsofYUcjCLyf58r+zN+U8E8ka4Vn8fM=
Subject key identifier: 41:EE:3C:21:BC:62:6F:75:A7:E0:92:4F:3F:6C:33:31:51:8B:82:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187BEFA84F8830E2941EBE12E73AB07F815
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qe48Ibxib3Wn4JJPP2wzMVGLggg.roa
Signing time: Wed 26 Apr 2023 19:11:41 +0000
ROA not before: Wed 26 Apr 2023 19:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:be:fa:84:f8:83:0e:29:41:eb:e1:2e:73:ab:07:f8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 26 19:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41ee3c21bc626f75a7e0924f3f6c3331518b8208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:42:0c:df:37:99:d8:c4:df:0d:31:f8:63:18:
fe:1e:cb:cd:d7:6b:f8:6c:7e:ad:fb:43:8c:6e:ca:
b9:a0:59:2d:53:52:60:37:38:51:d6:9b:b9:ee:3b:
26:c3:cc:7b:bc:43:b6:d9:04:e5:ed:52:74:e6:73:
d3:ab:a9:e0:7d:86:ec:3e:08:de:a5:a9:c8:e3:e2:
9b:e8:2e:49:0c:63:ac:6a:2e:e4:6e:c7:6f:ef:38:
f7:e8:18:86:1b:60:10:8d:25:bb:83:40:ac:cb:ca:
a4:44:5f:8d:bb:eb:66:39:2a:2e:4f:5f:74:c5:28:
53:2a:7e:30:45:b4:34:29:9e:cb:da:9b:1b:e0:36:
73:57:1e:f0:d1:0c:d6:42:f2:38:70:82:b5:c8:e5:
b0:46:41:86:86:5c:3a:47:87:b4:ba:74:95:20:0c:
8c:d0:3d:d0:52:14:45:2c:ef:45:7e:08:23:33:68:
6c:0c:4d:98:13:10:5b:7f:e1:ec:04:0f:d1:2e:49:
2b:e7:42:98:f1:82:a9:7f:36:9a:57:dc:97:55:78:
97:f9:3a:e2:9d:6b:b9:6b:4f:97:0d:8c:5a:6e:f0:
24:65:00:fa:e5:01:b9:ee:3e:df:66:b5:ff:b8:c2:
4d:1d:ff:c9:90:66:4c:75:0c:14:10:2b:e8:ed:04:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EE:3C:21:BC:62:6F:75:A7:E0:92:4F:3F:6C:33:31:51:8B:82:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qe48Ibxib3Wn4JJPP2wzMVGLggg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:66:e2:aa:58:55:89:f2:bf:d0:9b:2b:ff:51:a5:17:4c:80:
97:f3:94:b8:08:a9:ce:9c:f5:a1:26:e6:f1:e1:7b:cc:fa:ca:
13:1b:bc:2c:5e:24:1e:f2:dc:e9:e1:97:ce:1a:cf:f5:56:19:
cd:4a:1b:ba:57:7b:a6:49:f0:61:85:04:d4:28:7a:4a:86:14:
13:f9:5a:dc:30:db:74:2e:8b:bc:90:b5:6f:36:35:62:b7:4d:
61:37:5b:33:8b:f6:36:20:b9:4b:d7:fd:b2:73:30:3a:48:97:
a0:43:0a:f3:d5:a3:ac:34:e1:41:98:6e:75:37:b3:af:1a:48:
0b:30:53:8b:5c:e1:f9:a5:1e:f1:57:f9:93:f6:66:fc:03:d7:
25:f8:35:21:4e:e0:e2:61:f9:f2:5b:9e:7c:70:a5:b2:52:92:
0d:ff:dc:ea:25:fb:56:61:6e:9a:34:ce:43:c2:c0:80:35:10:
23:60:79:04:b5:c5:26:00:7c:ad:2a:5a:58:80:35:fe:fe:7d:
45:0d:26:a4:dd:7c:d6:1b:4a:0e:c6:f3:c3:93:b2:bb:cd:52:
25:80:d7:bc:b2:40:1c:36:17:20:b5:c6:ec:80:a1:95:d1:fc:
1f:f1:1f:55:34:2f:6c:23:af:fb:60:25:7d:eb:db:26:4a:f0:
1a:4d:4f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:10:43 2025 by rpki-client