Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QnS12KpzjxSBsYbnFppWbkHaQuw.roa
File: QnS12KpzjxSBsYbnFppWbkHaQuw.roa (raw, json)
Hash identifier: N5SWheEisVHDBB/aq9voEESadJ/jq+xLwKkFTcPQ+fM=
Subject key identifier: 42:74:B5:D8:AA:73:8F:14:81:B1:86:E7:16:9A:56:6E:41:DA:42:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187BAAE0D5B9D284BC01A06F92899E1788F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QnS12KpzjxSBsYbnFppWbkHaQuw.roa
Signing time: Tue 25 Apr 2023 23:09:41 +0000
ROA not before: Tue 25 Apr 2023 23:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ba:ae:0d:5b:9d:28:4b:c0:1a:06:f9:28:99:e1:78:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 25 23:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4274b5d8aa738f1481b186e7169a566e41da42ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:4a:da:ae:dd:75:76:dc:69:91:99:42:d9:
9f:c5:33:a4:b0:c6:df:ed:fb:bf:10:3f:32:84:6a:
9b:59:2b:9b:f0:8f:54:e1:d0:39:e4:6b:e0:68:1f:
f4:aa:45:23:18:5a:c6:43:78:6d:32:14:4b:6f:4e:
a6:b2:e9:fe:29:f2:bf:fa:f6:e1:03:53:37:06:cb:
6d:63:be:6b:3e:4a:bf:fc:d9:e0:fd:ee:f3:2d:de:
56:80:64:f5:3c:de:f8:40:f3:53:dd:15:8b:7a:4b:
9d:a6:69:20:9f:39:7c:0a:74:00:1c:88:8e:eb:2d:
da:f5:27:73:fe:80:a7:01:46:7c:20:2c:1d:10:6c:
cf:00:0b:85:42:85:72:1b:bf:6b:82:1f:64:fe:d8:
3c:51:9f:df:81:5b:d8:07:0c:bb:ed:1a:a0:bd:41:
8c:c2:1d:e1:02:28:96:c1:2f:7f:0b:bb:6a:85:e7:
c4:82:fc:f5:b9:dd:51:a0:0a:de:69:aa:0b:b9:0b:
b7:52:60:54:62:f9:24:79:61:5e:e1:1f:03:b1:96:
56:2c:e4:12:3b:2e:f2:d8:e5:a7:c8:3a:09:9f:70:
14:9e:45:b6:ce:0d:92:70:e3:22:02:4e:d9:f0:a0:
3e:b1:24:07:5f:e4:56:3f:e8:35:d1:8f:33:4c:41:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:74:B5:D8:AA:73:8F:14:81:B1:86:E7:16:9A:56:6E:41:DA:42:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QnS12KpzjxSBsYbnFppWbkHaQuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:12:ae:35:85:86:ca:9e:37:15:e7:24:0f:b8:e8:7d:b1:7a:
1b:35:74:de:13:1b:fb:62:30:0d:f9:d0:9c:99:37:ea:c3:66:
6d:b1:c2:81:d7:8e:f5:85:66:ab:3c:6e:85:e8:f9:45:9a:08:
7c:00:d9:98:eb:46:12:7a:cf:c3:7e:b6:e0:48:de:cc:33:d3:
4c:23:78:cc:1a:58:fb:c6:d2:a1:33:0c:e1:2c:cd:2d:16:22:
04:f0:c9:64:da:a1:df:17:55:03:41:ed:e7:16:4a:5f:63:2c:
4d:8a:65:1e:83:f1:45:7a:5d:19:6b:9e:ce:c4:f1:5e:d0:40:
4f:51:17:e7:f4:ed:1c:da:47:32:24:70:4a:9c:35:fb:1e:3c:
c6:ba:76:64:2d:6f:c0:75:a0:5b:4e:0b:fe:07:42:6d:b4:04:
b7:88:1f:e7:74:be:76:e4:04:64:c8:8d:0e:4b:7c:ca:1a:ba:
a4:06:46:03:c4:3d:3f:57:4f:76:61:3d:41:11:88:3d:10:0a:
13:94:68:52:52:59:2b:79:77:28:30:38:ff:7a:64:99:9f:8f:
9e:c5:3b:e1:dd:cf:c1:92:bb:5a:30:9c:9e:2b:ab:ce:1c:fc:
3f:cf:55:14:cd:ad:d7:43:d3:e6:85:4f:f0:cb:52:77:fe:7d:
76:1a:47:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:28:38 2025 by rpki-client