Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QjeMJWk1W90hBxaMBQTxqFcl_Q0.roa
File: QjeMJWk1W90hBxaMBQTxqFcl_Q0.roa (raw, json)
Hash identifier: iea2FKjY+fld4nT08IFYkV7B2O1P0juC/WgZVh/VCvk=
Subject key identifier: 42:37:8C:25:69:35:5B:DD:21:07:16:8C:05:04:F1:A8:57:25:FD:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184C83B4DFCC606F05A97B9C7D0EACF6FFF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QjeMJWk1W90hBxaMBQTxqFcl_Q0.roa
Signing time: Wed 30 Nov 2022 11:10:40 +0000
ROA not before: Wed 30 Nov 2022 11:10:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:3b:4d:fc:c6:06:f0:5a:97:b9:c7:d0:ea:cf:6f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 30 11:10:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42378c2569355bdd2107168c0504f1a85725fd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:31:90:98:89:5f:b7:01:df:fe:11:df:63:
ae:4c:d8:51:46:06:31:bd:d5:58:be:a9:91:66:0f:
b2:d3:7c:57:32:ca:32:19:00:f0:c5:51:be:2d:2d:
4d:4e:c4:5d:fd:90:0e:15:71:54:53:4e:91:67:31:
5c:f3:87:7e:c9:6f:56:4f:35:d2:8d:54:cd:19:89:
23:31:4e:a2:b3:00:9f:83:36:b0:d2:24:a2:cb:bd:
9c:4f:ac:be:24:6e:62:d1:63:2c:18:5e:49:80:20:
e5:f1:74:f2:23:d5:67:13:34:79:e1:f3:22:9c:45:
ea:8e:47:86:fb:51:77:50:2f:de:f8:cc:73:f6:93:
44:9d:fa:9d:74:65:8e:ba:c5:4c:c1:39:bc:c0:22:
31:f5:4d:13:3b:61:0f:ee:6c:eb:ed:e3:f1:1d:7a:
01:e9:52:9b:de:1e:af:6c:c1:cd:a6:18:71:08:b5:
8f:89:dc:55:fa:b3:da:b3:97:1d:a4:69:ec:e7:5d:
b1:28:a6:dd:a1:a9:09:de:8c:b1:e1:57:cb:29:4d:
cd:56:5b:c5:8a:47:ef:b9:92:c8:5a:08:30:c5:cf:
58:52:f0:a1:76:0d:fa:a6:ba:08:e4:51:c6:21:67:
76:22:81:b0:66:e1:dd:95:32:9a:93:ab:22:90:19:
de:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:37:8C:25:69:35:5B:DD:21:07:16:8C:05:04:F1:A8:57:25:FD:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QjeMJWk1W90hBxaMBQTxqFcl_Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:d9:92:e0:23:e0:80:44:7e:64:f8:3b:25:3c:70:c7:32:b4:
f3:b7:f9:56:7c:4c:88:13:13:56:87:28:03:c8:c3:14:cc:54:
12:0e:d6:6a:d2:6a:50:e5:c9:3a:d1:ed:98:cb:6a:a6:3a:92:
35:b0:26:1d:45:67:34:0b:c5:aa:e0:53:ae:78:2d:93:1b:39:
4d:40:38:fc:9d:3a:7e:bf:59:b7:7b:f0:de:82:50:41:6e:06:
b3:2e:62:82:d7:a3:78:d7:81:ff:05:2d:fe:99:78:b5:9e:73:
05:58:d6:b4:c9:64:4a:c2:3f:f0:6e:30:67:c2:c4:e6:95:45:
b4:e3:4d:60:87:1a:e9:3a:00:82:b9:7e:71:17:fe:96:74:f3:
2c:8f:86:ee:7a:83:a2:d9:23:63:29:54:a2:3c:0c:34:eb:80:
89:94:79:67:f4:6b:40:8a:25:e5:a5:94:df:19:03:1b:84:68:
ff:3d:fa:f9:1a:31:aa:a4:97:17:0b:bc:94:c9:0b:89:23:7d:
7f:d0:08:37:02:b8:8e:de:64:60:5a:55:07:2a:75:e6:1a:b3:
26:8a:a5:e4:e8:a1:04:33:18:91:95:3b:38:bc:6a:ad:cb:04:
13:ab:24:94:26:18:04:a9:f2:ab:70:bc:67:ad:95:ef:e0:f9:
60:0e:a4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:24:29 2025 by rpki-client