Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QgFo6U-29kj9kSAE9_W6gCazaOQ.roa
File: QgFo6U-29kj9kSAE9_W6gCazaOQ.roa (raw, json)
Hash identifier: 33MjL3kvxdR3DvWzLzE98ignbyf0nquXJmP4PMRmRDI=
Subject key identifier: 42:01:68:E9:4F:B6:F6:48:FD:91:20:04:F7:F5:BA:80:26:B3:68:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01877F76C0C50C55814D8E2EB6AC57351640
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QgFo6U-29kj9kSAE9_W6gCazaOQ.roa
Signing time: Fri 14 Apr 2023 11:11:41 +0000
ROA not before: Fri 14 Apr 2023 11:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:76:c0:c5:0c:55:81:4d:8e:2e:b6:ac:57:35:16:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 14 11:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=420168e94fb6f648fd912004f7f5ba8026b368e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:59:8d:14:1d:b3:4f:1d:dd:0d:8c:79:65:70:
62:13:d4:32:b4:00:79:ed:72:fb:5d:71:f0:f3:d2:
6a:cd:1c:ec:a5:fe:65:93:23:13:89:44:08:6f:55:
87:3b:21:d7:23:43:6b:3e:08:4f:b8:6a:c9:e5:69:
ca:a8:b0:af:fd:80:2e:ca:8c:81:4a:24:e6:76:c1:
c3:63:f3:43:f8:0a:c3:4f:e5:f0:2a:bc:5b:ee:e3:
ef:10:51:52:f3:41:a8:0b:29:ce:3e:96:a0:4d:83:
b0:de:f3:bf:44:6e:32:dd:cc:4b:e3:75:bb:3a:c0:
42:46:a1:77:1c:4a:52:28:d1:bd:a6:04:c5:ed:4c:
12:bd:a8:29:0e:70:59:a9:7e:bf:9c:e7:a4:7c:ab:
89:2d:dd:35:e1:d8:00:60:a8:e2:88:d4:f7:7a:5d:
a3:1b:75:09:56:d0:e4:f1:f3:ff:4c:07:30:33:cc:
2b:e4:74:74:39:2c:ef:30:e8:aa:75:13:c7:79:a4:
76:8e:f0:1e:6d:cc:b7:66:db:33:44:9e:fb:ce:bf:
75:ab:9b:dd:99:16:6f:88:e2:12:ce:68:d3:b2:4a:
82:62:97:0c:90:54:6e:b3:9d:c7:1a:8f:ac:5a:24:
97:63:f1:d9:da:09:e3:76:e2:7c:bf:0f:05:bd:88:
1b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:01:68:E9:4F:B6:F6:48:FD:91:20:04:F7:F5:BA:80:26:B3:68:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QgFo6U-29kj9kSAE9_W6gCazaOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:a2:36:a4:ef:a1:17:a9:a8:88:2a:27:fd:92:9e:04:36:e8:
a3:70:4e:91:58:c7:ce:cf:3a:d4:b5:55:92:c1:64:fd:d2:39:
e2:e0:3c:8e:09:53:7f:e7:94:24:30:6f:31:0e:f0:58:60:84:
db:42:24:64:be:ef:b2:1d:65:2c:16:79:96:3b:06:38:17:d5:
bb:f7:38:03:e1:cd:7d:00:e0:30:17:9e:28:c7:08:2d:88:bb:
63:56:bc:8d:a8:5e:18:f1:9f:ef:a0:a0:63:d0:cd:c3:98:13:
88:19:b6:16:a2:3f:f0:22:c2:1f:6b:11:4c:c5:3a:8f:eb:3a:
ca:e8:c3:20:31:fc:2e:ba:f5:23:09:0d:48:e2:2d:2f:e4:4f:
1e:86:87:60:64:2f:06:82:3e:1c:35:10:8f:3f:eb:e6:cb:e6:
f5:5a:3d:00:e4:04:54:c4:67:7a:59:b9:f8:22:21:f0:1c:7b:
11:6a:54:47:eb:7f:05:51:07:45:a0:0a:9d:20:e9:f4:e7:f9:
13:08:c0:47:38:92:a1:2e:e0:42:81:76:b1:f4:16:a4:28:19:
3d:04:43:9f:17:ae:e3:b8:3a:40:67:d1:16:7a:ac:1e:4c:bf:
d4:58:76:31:be:f2:31:51:67:7d:ac:c0:a3:2a:ed:a9:19:00:
a3:4c:09:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:11:27 2025 by rpki-client