Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QpYs7LPq4NoP-wb5pWiU3VYXXCM.roa
File: QpYs7LPq4NoP-wb5pWiU3VYXXCM.roa (raw, json)
Hash identifier: YP6BUEXvbs4hwmDg0bl3mCbUmf2TZXTEx/H7AKVvrQA=
Subject key identifier: 42:96:2C:EC:B3:EA:E0:DA:0F:FB:06:F9:A5:68:94:DD:56:17:5C:23
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185D774DC771CE3B685E79C6ED9D4101EF1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QpYs7LPq4NoP-wb5pWiU3VYXXCM.roa
Signing time: Sun 22 Jan 2023 03:10:38 +0000
ROA not before: Sun 22 Jan 2023 03:10:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d7:74:dc:77:1c:e3:b6:85:e7:9c:6e:d9:d4:10:1e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 22 03:10:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42962cecb3eae0da0ffb06f9a56894dd56175c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d0:cc:e7:b1:e4:dd:44:8d:96:f9:41:48:e5:
c1:2c:33:26:61:7a:11:6b:24:15:80:f0:44:f0:13:
6a:eb:ed:f4:e4:03:6a:73:a0:db:18:d5:27:b3:5e:
fe:32:b5:4b:9e:ea:03:49:fd:08:b2:d1:36:20:0d:
f4:41:63:7a:61:f0:19:f8:9a:cf:c0:6b:d5:d1:59:
80:69:95:27:17:7b:f4:df:0b:d6:26:bd:f4:96:25:
7d:03:a1:d7:99:2f:04:d4:9a:46:7e:f0:e7:43:e5:
a6:0e:59:1b:84:6f:f5:48:8f:b3:46:ac:eb:0a:86:
8b:59:97:a8:33:41:d9:41:39:3a:27:b8:71:08:4f:
3c:cd:d3:68:cb:f8:ce:d3:8c:a5:19:fa:7c:38:39:
87:6f:fa:78:ab:aa:f5:c2:4b:c1:5e:8a:d5:4e:c2:
0c:5d:99:38:14:db:6c:af:15:e1:0d:b0:25:d8:53:
a6:e5:92:87:1c:0f:5a:57:84:9f:14:95:37:b7:b1:
8b:e9:2f:68:cf:90:d7:10:8a:bb:8e:b7:1d:3d:4d:
a6:e0:1f:25:38:20:07:1a:b9:79:80:a9:66:4e:8f:
00:b7:c1:52:c1:04:9b:1e:45:67:b4:69:32:69:f0:
3a:9c:86:83:03:a8:ab:d6:17:4f:29:6f:d1:72:5c:
63:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:96:2C:EC:B3:EA:E0:DA:0F:FB:06:F9:A5:68:94:DD:56:17:5C:23
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QpYs7LPq4NoP-wb5pWiU3VYXXCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:c8:3a:e7:96:94:37:46:3a:a4:1a:2f:a1:01:25:5e:8a:66:
f3:41:dc:9b:0f:22:aa:54:c5:4c:d3:0c:6d:41:29:45:f8:e4:
3b:bb:fa:51:53:0c:4f:24:30:8e:ea:0e:8c:e2:8d:b4:c7:cb:
03:0b:60:5b:85:b6:f9:11:56:ac:c0:fd:93:d8:f0:a1:d0:f8:
de:6a:04:66:70:69:f7:8c:65:d2:99:f6:79:7d:96:46:ce:4e:
51:50:a4:0c:97:2f:1b:0a:b9:63:6e:3e:49:a8:88:be:ac:d4:
bc:a6:58:f4:16:a0:58:8e:01:40:2d:51:a4:e7:14:ab:3d:02:
74:aa:65:53:03:2f:70:2d:a1:1d:d6:df:32:81:c1:b6:c2:b4:
a4:a3:54:85:8f:e0:ad:1c:1a:c9:44:12:47:79:6e:cc:2a:63:
c1:34:e9:24:16:e8:46:e4:97:ad:9f:73:9a:02:8d:9c:af:db:
ab:5e:e1:43:ea:7a:56:a8:b2:59:14:a8:91:fb:c8:50:10:de:
6f:fc:da:96:91:c0:d4:54:d9:c3:77:d9:cd:a9:1f:ff:c6:f9:
78:e8:cc:5d:af:eb:74:6c:3a:88:ce:de:d2:87:0b:5c:1c:7c:
65:ee:86:25:07:56:f7:04:8c:3d:7c:77:ab:e4:17:36:02:67:
8e:d5:4d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:15:53 2025 by rpki-client