Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QptABaU4cBhIIKZlsKVTujO9CpA.roa
File: QptABaU4cBhIIKZlsKVTujO9CpA.roa (raw, json)
Hash identifier: 6GY8l8KZF3PTYXA/JUOW6otc4rDaaVzVVTJD0fjHIJw=
Subject key identifier: 42:9B:40:05:A5:38:70:18:48:20:A6:65:B0:A5:53:BA:33:BD:0A:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01859CDF9F47F53C08B5252BE6DC6FE18BE6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QptABaU4cBhIIKZlsKVTujO9CpA.roa
Signing time: Tue 10 Jan 2023 18:09:38 +0000
ROA not before: Tue 10 Jan 2023 18:09:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9c:df:9f:47:f5:3c:08:b5:25:2b:e6:dc:6f:e1:8b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 10 18:09:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=429b4005a53870184820a665b0a553ba33bd0a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:43:a0:93:8e:b8:28:27:61:c2:e3:1a:28:
7b:f3:48:1f:89:1e:77:56:ce:a7:21:cf:17:3b:a8:
2a:a6:d9:35:57:ed:43:ac:e6:e5:d2:7a:af:e5:51:
83:0a:6b:14:56:54:98:46:67:46:db:70:c4:6c:22:
25:25:46:73:7f:9e:1c:4d:c7:0d:68:f2:e8:61:c4:
94:10:05:a7:cd:88:bb:fc:f5:cb:09:bb:5c:f7:72:
aa:c0:1f:1f:43:dc:1f:76:de:2b:78:a8:dd:34:37:
3c:61:da:c7:e7:73:26:4b:e4:e4:8c:a7:7b:b0:3e:
09:2c:68:1f:2c:66:56:a1:d8:e7:e0:02:0a:7a:be:
4d:9e:9f:e7:d1:53:f9:f9:2e:20:66:95:bf:a7:b5:
93:76:00:28:19:7d:2c:03:bf:4e:6a:7c:16:8e:d7:
02:51:8e:32:49:b2:a3:56:85:d0:84:3a:e0:91:13:
1d:d9:d7:01:c5:61:3a:58:77:f9:31:3b:38:ae:cf:
a1:a8:82:44:6a:b8:6b:42:3e:4d:db:75:47:0a:6c:
43:8e:3f:25:b0:98:00:a9:04:af:74:7e:90:39:ee:
34:95:67:f4:3c:77:1f:ff:f8:4c:7f:1b:79:47:fa:
fd:43:0d:0f:e0:1b:98:78:f2:18:52:25:ef:45:f6:
f8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9B:40:05:A5:38:70:18:48:20:A6:65:B0:A5:53:BA:33:BD:0A:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QptABaU4cBhIIKZlsKVTujO9CpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:2d:0e:94:fc:94:a4:b6:3e:91:f1:a5:ab:ad:04:10:85:ce:
ca:3f:16:fd:24:59:c6:dd:1c:5c:b1:10:89:f5:7b:21:cd:f6:
3f:10:a7:4b:a0:b5:c5:da:07:45:ac:a8:07:ba:ed:7e:37:a6:
9d:a7:3c:83:3a:d2:82:6e:58:7c:90:9a:d1:dd:b4:27:41:28:
7d:f5:1a:f1:62:da:ce:73:dc:8f:ba:7e:83:6a:7d:eb:b6:ea:
65:93:a5:d5:79:1f:ec:eb:db:6d:1e:49:1b:c9:e5:f9:9c:a0:
6e:34:ee:11:80:a1:38:64:69:3a:67:97:2d:dd:e4:ac:91:39:
8e:bf:ee:d5:b7:a3:0e:16:fa:6c:3e:9e:03:d5:11:19:59:fd:
1b:ca:36:a4:50:ab:85:bf:7f:13:79:60:00:72:47:f9:7c:46:
50:cf:88:8b:f3:7f:b1:df:db:0c:95:87:ea:38:d1:49:6c:4e:
15:b0:dd:48:8d:d8:02:63:53:00:09:9a:eb:e7:f8:f1:2d:af:
85:c0:e9:11:99:18:88:11:44:a1:73:9a:94:0b:a3:a5:f5:43:
2c:29:ef:7d:06:cd:6c:52:48:94:e0:5c:e6:65:da:27:9e:89:
cf:60:85:0f:ba:5f:b4:48:b4:f3:fd:ae:12:73:26:83:e0:d5:
a9:f8:74:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:49 2025 by rpki-client