Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qnh8-ZLHk8fPXQofgPQXN1B2KOg.roa
File: Qnh8-ZLHk8fPXQofgPQXN1B2KOg.roa (raw, json)
Hash identifier: OIamrzTUB156krebi1C/uhf6F75uquru/1PvuATmpyM=
Subject key identifier: 42:78:7C:F9:92:C7:93:C7:CF:5D:0A:1F:80:F4:17:37:50:76:28:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B7E79A8481BFEF81246FF48101300D78
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qnh8-ZLHk8fPXQofgPQXN1B2KOg.roa
Signing time: Tue 25 Apr 2023 10:13:41 +0000
ROA not before: Tue 25 Apr 2023 10:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:e7:9a:84:81:bf:ef:81:24:6f:f4:81:01:30:0d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 25 10:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42787cf992c793c7cf5d0a1f80f41737507628e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:64:80:d8:c8:f2:f5:ff:a9:98:bd:94:73:
59:02:c4:bf:09:fe:ff:9c:4b:cb:84:8e:a9:05:7e:
96:19:ca:3a:9b:89:9d:e9:fd:59:90:b4:bf:09:0a:
6a:57:67:2d:be:50:cb:c1:38:d5:72:f6:02:9f:ae:
9f:ca:87:77:d6:0d:8a:b0:f3:26:5a:fe:de:0f:d4:
41:96:f4:87:26:c7:d2:e7:45:a9:7a:53:ff:92:fd:
d3:22:2f:d4:de:80:07:46:f3:44:eb:d0:d8:eb:12:
4c:65:13:a4:1b:ea:1a:cc:8a:95:56:e2:ca:35:26:
fb:bb:18:84:df:8d:57:da:93:2f:74:4a:d9:bf:46:
d1:e0:d2:15:21:90:1d:d0:7a:7b:95:dd:f1:ae:64:
f3:54:43:3c:6a:c4:0e:74:1e:00:86:65:9b:9b:e9:
12:25:98:4a:d4:b2:7e:28:ee:c0:87:48:a3:b9:d2:
a0:49:56:4c:d5:c4:f7:ad:6d:be:38:da:06:57:44:
30:a7:06:46:c4:21:a9:9e:a0:7d:45:cc:95:a6:f9:
5f:ca:83:07:09:47:a0:f0:54:bd:25:94:68:8f:0f:
02:ea:4b:3e:8a:5d:54:2a:fb:68:4a:46:4e:a9:b2:
df:8f:a8:df:ad:cd:ab:44:a5:f4:fa:83:94:68:63:
3b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:78:7C:F9:92:C7:93:C7:CF:5D:0A:1F:80:F4:17:37:50:76:28:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qnh8-ZLHk8fPXQofgPQXN1B2KOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:02:be:3a:51:c4:80:c4:47:1c:b3:6a:d4:6e:68:5a:da:54:
f6:1c:6f:52:bd:af:87:ba:9c:f0:2a:06:20:c6:6e:bb:c5:d3:
cd:6b:c9:6d:a8:44:6d:05:ab:df:36:d1:11:c9:c6:cd:05:6f:
6e:7c:f3:5e:78:06:5a:d0:e6:44:8a:96:24:66:0e:c1:cf:5d:
0a:bd:0a:ad:a5:01:b4:1c:2b:2a:bd:25:cc:4b:f0:c6:22:63:
2e:2b:5c:4e:06:fc:7e:d9:da:43:ba:83:bf:b9:b4:ca:28:6d:
87:7d:39:be:f4:10:1f:d4:16:f7:63:3a:8b:56:0f:b6:78:8f:
07:55:47:45:76:c4:6c:a0:04:ad:10:97:2d:10:c8:2c:34:29:
f3:c9:14:ad:7a:1c:66:6c:4a:82:52:a8:d9:3d:0e:27:59:e0:
5d:9e:21:f2:a8:e8:7e:3f:bb:d0:fc:dd:db:7e:ca:7c:2c:9a:
9a:1d:03:ec:47:bf:3a:d7:e8:5e:26:41:6b:61:f0:8d:46:8a:
d1:6a:ec:df:44:45:ed:00:bb:98:b2:ec:c7:9b:0b:b3:84:cf:
44:8e:4c:bb:9c:e9:1c:b4:6c:c0:97:c9:73:45:c7:77:ad:c8:
e6:29:f9:6d:a3:d3:5a:1f:ed:b9:92:22:61:a3:50:44:34:9f:
3b:c7:e2:8f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYe355qEgb/vgSRv9IEBMA14MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDI1MTAxMzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Mjc4N2NmOTkyYzc5M2M3Y2Y1ZDBhMWY4MGY0MTczNzUwNzYyOGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIZkgNjI8vX/qZi9lHNZAsS/Cf7/
nEvLhI6pBX6WGco6m4md6f1ZkLS/CQpqV2ctvlDLwTjVcvYCn66fyod31g2KsPMm
Wv7eD9RBlvSHJsfS50WpelP/kv3TIi/U3oAHRvNE69DY6xJMZROkG+oazIqVVuLK
NSb7uxiE341X2pMvdErZv0bR4NIVIZAd0Hp7ld3xrmTzVEM8asQOdB4AhmWbm+kS
JZhK1LJ+KO7Ah0ijudKgSVZM1cT3rW2+ONoGV0QwpwZGxCGpnqB9RcyVpvlfyoMH
CUeg8FS9JZRojw8C6ks+il1UKvtoSkZOqbLfj6jfrc2rRKX0+oOUaGM7jwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEJ4fPmSx5PHz10KH4D0FzdQdijoMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUW5oOC1aTEhrOGZQWFFvZmdQUVhOMUIyS09nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACcCvjpRxIDERxyzatRu
aFraVPYcb1K9r4e6nPAqBiDGbrvF081ryW2oRG0Fq9820RHJxs0Fb2588154BlrQ
5kSKliRmDsHPXQq9Cq2lAbQcKyq9JcxL8MYiYy4rXE4G/H7Z2kO6g7+5tMoobYd9
Ob70EB/UFvdjOotWD7Z4jwdVR0V2xGygBK0Qly0QyCw0KfPJFK16HGZsSoJSqNk9
DidZ4F2eIfKo6H4/u9D83dt+ynwsmpodA+xHvzrX6F4mQWth8I1GitFq7N9ERe0A
u5iy7MebC7OEz0SOTLuc6Ry0bMCXyXNFx3etyOYp+W2j01of7bmSImGjUEQ0nzvH
4o8=
-----END CERTIFICATE-----
Generated at Thu May 1 05:55:53 2025 by rpki-client