Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qq_wD3wLjKv3smmzOGIYxtVAmQk.roa
File: Qq_wD3wLjKv3smmzOGIYxtVAmQk.roa (raw, json)
Hash identifier: PRmaG5iAFBRj90Fl15lvDoba6OeYzNLmecnW7vvGGOs=
Subject key identifier: 42:AF:F0:0F:7C:0B:8C:AB:F7:B2:69:B3:38:62:18:C6:D5:40:99:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185451C9ED5CDC4F0C8E1848776D0516B85
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qq_wD3wLjKv3smmzOGIYxtVAmQk.roa
Signing time: Sat 24 Dec 2022 17:09:41 +0000
ROA not before: Sat 24 Dec 2022 17:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:45:1c:9e:d5:cd:c4:f0:c8:e1:84:87:76:d0:51:6b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 24 17:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42aff00f7c0b8cabf7b269b3386218c6d5409909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:eb:bd:b2:78:e3:39:b9:01:d9:b7:90:bf:
67:14:fa:8a:42:e3:b1:6c:0c:34:7d:35:bf:13:88:
c5:49:3d:28:e6:a6:2a:c8:37:fa:41:75:b4:06:c1:
3e:ee:90:da:e1:b3:bb:60:3e:8d:13:5a:d4:8b:cd:
5f:8c:b8:e3:62:67:b0:fd:6f:2c:67:19:29:8f:cf:
44:46:fc:4e:48:c9:62:81:20:7a:2b:a3:55:b6:d0:
a0:44:ab:3f:50:68:28:d8:1f:2d:ca:bf:58:88:16:
8b:87:a5:6a:56:2f:1e:74:a8:77:60:90:c1:f8:ff:
bc:fa:cc:27:4e:ae:d7:c3:e4:cf:c9:5b:bb:ab:ea:
01:4f:22:56:8d:4b:1a:b7:ba:a8:f5:df:a5:2d:7e:
17:17:6c:7a:22:9f:23:f3:67:50:aa:fa:5f:98:9a:
50:81:c7:e2:45:5f:d1:38:f5:46:95:8c:4f:47:b3:
92:cc:6e:8e:c9:8b:be:61:6c:ac:d7:91:00:ab:c5:
f7:96:bd:d4:6e:b2:e1:6b:07:ef:a7:f7:2e:55:87:
2f:d6:c1:28:a5:98:1b:f0:4c:98:57:ed:fe:5f:e5:
d3:d4:b0:f3:a1:d9:91:66:bb:46:5f:c0:61:11:eb:
ca:f6:37:bc:70:9b:1f:68:5d:24:a1:a9:05:4e:43:
71:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AF:F0:0F:7C:0B:8C:AB:F7:B2:69:B3:38:62:18:C6:D5:40:99:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qq_wD3wLjKv3smmzOGIYxtVAmQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:30:26:de:25:23:ff:67:a4:a3:fd:1d:6f:49:1b:c5:e1:7c:
0d:29:0c:75:bf:10:12:6e:29:5a:f4:2e:e9:e4:31:69:dd:f7:
a3:e6:1f:2f:e7:de:43:f8:f4:66:12:ac:d1:48:fd:e3:bb:62:
b0:3c:18:ad:47:14:03:c4:15:4d:5a:46:4c:60:d1:f2:7c:ae:
cd:bc:2e:50:4a:ed:25:00:9c:f0:3d:fb:14:de:a9:63:f1:14:
88:bf:4f:04:35:a2:a8:f2:06:0c:bd:07:89:96:50:1f:70:5d:
5e:a8:d3:b1:9a:e4:48:76:5d:12:0b:77:76:e7:3d:6e:17:e9:
85:6e:06:36:6c:85:56:f5:a7:6c:c8:38:67:90:d2:3d:9c:9d:
e8:b9:07:d4:60:eb:c7:dc:83:7a:fe:6e:60:fa:74:46:1d:e2:
96:24:93:31:80:13:bd:eb:91:4e:98:e5:1a:e0:85:ed:51:c1:
b2:4a:5d:fe:90:cc:35:0d:3a:ec:de:4e:e9:48:ad:c1:ef:00:
da:38:a5:77:81:09:43:3e:8b:75:0c:4d:c2:42:f2:bb:9c:18:
1f:10:ac:e5:4b:a1:01:45:e9:a5:cb:1e:80:b2:7c:cb:03:08:
dd:17:d2:ed:95:fb:53:7d:83:b8:00:4a:98:84:b3:26:d1:be:
65:7b:d1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:25 2025 by rpki-client