Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QoutME1IRRl0fuLV7BxxkiQtCqk.roa
File: QoutME1IRRl0fuLV7BxxkiQtCqk.roa (raw, json)
Hash identifier: IctXhzajt+BMiGKinTs1WOQ1yg89vzbycCZVZRWzo1w=
Subject key identifier: 42:8B:AD:30:4D:48:45:19:74:7E:E2:D5:EC:1C:71:92:24:2D:0A:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C6E6F2E2C0702B951F49D1B50748DB70
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QoutME1IRRl0fuLV7BxxkiQtCqk.roa
Signing time: Sat 17 Jun 2023 01:10:04 +0000
ROA not before: Sat 17 Jun 2023 01:10:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c6:e6:f2:e2:c0:70:2b:95:1f:49:d1:b5:07:48:db:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 01:10:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=428bad304d484519747ee2d5ec1c7192242d0aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fa:f0:af:32:47:c8:24:94:67:be:48:5d:22:
9a:b5:d9:f1:d3:7a:d2:0a:97:d0:bc:2c:89:0d:90:
28:08:60:dd:94:56:77:e3:a4:90:af:57:0d:ae:e1:
b0:2d:a4:24:76:72:34:f4:43:51:57:51:ce:38:14:
0d:8a:25:0c:3a:33:b9:a2:5d:a4:b1:0c:b0:d9:c4:
cb:1f:c8:cc:0e:c9:92:e7:be:9c:d2:0d:2b:14:9b:
69:1f:98:ab:70:3c:0f:25:65:f3:16:84:3f:cd:77:
e8:3c:fe:02:5b:eb:30:28:d0:a2:a2:74:ad:fc:3e:
84:8e:59:8c:6b:f6:3b:0a:f5:60:0e:fb:27:01:29:
c6:7f:23:9d:0b:e5:e8:bb:5e:4b:99:a6:f1:04:ba:
2b:84:8b:17:df:3e:42:4e:d9:43:22:74:c9:4a:fa:
b9:9a:26:00:0c:8d:36:5e:e2:fa:ef:65:40:46:72:
94:8e:f9:ee:96:ae:35:48:a4:17:f9:5a:df:e1:e5:
4c:9a:51:93:65:d3:14:0a:bd:95:81:02:34:6d:1d:
7d:21:be:eb:b3:25:92:73:f9:87:6d:96:b0:11:e5:
b9:ad:3a:20:7b:6c:ef:24:54:9d:a5:9d:5e:b4:15:
61:d4:f7:fe:c1:e7:a4:16:a2:ba:a5:c1:91:f0:01:
16:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8B:AD:30:4D:48:45:19:74:7E:E2:D5:EC:1C:71:92:24:2D:0A:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QoutME1IRRl0fuLV7BxxkiQtCqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:9f:44:a1:cf:22:32:03:9e:5c:af:d5:4d:86:1f:d1:32:02:
c8:25:e5:1a:26:f1:2b:81:c8:46:0d:99:82:b2:ca:9d:ad:41:
46:16:47:d5:73:1c:6a:e0:04:4d:86:08:ab:05:b4:9a:8f:26:
22:af:c0:35:1d:8c:75:cf:76:99:27:23:7f:b8:62:77:4a:56:
50:e5:94:f1:89:fe:e2:68:f7:51:36:5a:7c:1c:74:bf:18:47:
f3:e8:27:b0:89:8a:1c:43:0c:3d:cc:f6:ae:4c:8a:0b:96:e3:
b1:3c:b0:9f:ea:c4:d2:55:42:4b:4f:60:a9:ba:dd:49:43:79:
67:df:88:b3:01:8b:1f:35:71:48:06:4c:67:c5:3f:bd:94:05:
80:8e:bd:40:e9:6c:b9:2d:72:86:d0:8d:1d:8c:9f:38:a9:ab:
b6:ff:89:bb:42:3e:da:00:77:fc:b4:73:95:48:1a:e9:1d:7d:
d4:5d:a4:75:e7:18:1c:75:da:48:a0:70:3c:42:8f:64:ac:6e:
83:79:0e:c2:ca:ab:50:1b:e4:68:c4:08:a4:65:dd:04:82:97:
13:36:ad:cb:48:ab:79:98:c3:7c:e5:28:c3:79:26:f2:3b:eb:
e3:98:3c:1a:74:79:da:19:42:d5:a6:c6:04:16:0c:36:e1:ca:
37:2d:1e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:28:48 2025 by rpki-client