Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qs3-DhV1gJ7ABe7TZ4Z2rG71jYo.roa
File: Qs3-DhV1gJ7ABe7TZ4Z2rG71jYo.roa (raw, json)
Hash identifier: 5Ea8Lg2OoDODLG9LvboqJdB/pQvMptLwITxeOwqWGvU=
Subject key identifier: 42:CD:FE:0E:15:75:80:9E:C0:05:EE:D3:67:86:76:AC:6E:F5:8D:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A168143E8579A72C33D60AE5F1238FECD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qs3-DhV1gJ7ABe7TZ4Z2rG71jYo.roa
Signing time: Mon 21 Aug 2023 05:11:24 +0000
ROA not before: Mon 21 Aug 2023 05:11:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:16:81:43:e8:57:9a:72:c3:3d:60:ae:5f:12:38:fe:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 05:11:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42cdfe0e1575809ec005eed3678676ac6ef58d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0d:c0:40:bf:08:33:ba:d5:9d:69:36:72:36:
0f:71:6d:59:b2:a9:65:d3:97:91:ab:cf:1f:fe:ef:
d1:07:6e:9c:5f:2f:6b:7b:76:61:b3:bd:44:f7:6c:
f4:95:80:37:d2:00:a0:cc:02:44:55:7f:18:57:8c:
cd:16:5e:2d:54:27:b1:32:8a:50:28:9f:f5:f9:40:
d0:00:01:ea:d8:b3:6b:6e:c6:3f:5a:6a:1f:27:18:
1d:8d:f1:f4:b2:9f:bd:9d:72:22:4d:e1:dd:06:04:
47:23:45:8f:64:a0:90:b4:d7:a0:e5:b7:1e:bf:20:
37:e4:64:f1:ec:d9:d9:40:65:12:50:cc:5d:9d:3b:
43:ed:10:7b:ac:77:36:ef:9d:ed:dd:d8:c5:33:84:
43:d8:dc:a3:91:4c:dc:1c:4e:3f:49:5f:6e:5f:d5:
71:8d:64:21:87:fc:fb:8f:5e:ca:37:8c:3d:d9:96:
59:1f:15:06:5a:54:84:b8:24:65:cc:1a:2f:88:3c:
b4:02:64:9d:53:78:42:7d:6e:45:f7:3c:15:82:44:
4d:80:5f:09:0e:4d:b3:47:b8:18:a1:b4:74:33:71:
ea:51:4c:c6:6a:15:98:5c:fe:5f:74:41:1c:91:ec:
31:e3:20:d8:b1:7b:da:46:65:51:21:42:c8:3f:37:
2c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CD:FE:0E:15:75:80:9E:C0:05:EE:D3:67:86:76:AC:6E:F5:8D:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qs3-DhV1gJ7ABe7TZ4Z2rG71jYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:9c:1f:ac:58:de:b5:31:1c:df:f0:a6:68:00:0d:0b:8b:b8:
30:bd:2f:91:d2:39:78:5c:e2:75:ed:5e:81:e7:3a:c2:d1:dd:
08:79:0f:63:08:37:c1:14:b6:39:95:9a:76:16:82:44:fd:ef:
99:0a:b1:44:d0:b8:98:bf:64:5e:a1:f8:79:82:a3:78:15:c4:
97:99:8d:88:70:3c:ea:0e:eb:4b:10:c2:76:98:bc:d3:df:9e:
d1:1e:38:4c:63:65:88:75:c2:8b:a2:d4:ab:2e:2c:e2:36:51:
7d:20:7a:92:13:26:f9:d1:1a:17:77:30:0d:0c:39:41:a8:61:
73:c6:d5:6a:cf:fb:b0:e3:54:e4:fe:4a:40:08:cd:d1:ee:83:
4b:90:3f:76:4f:c9:38:12:2f:47:a8:79:37:79:4e:79:ea:68:
49:d9:57:b0:03:9d:74:98:0c:8c:5b:e9:2e:2c:f6:3d:ab:8d:
00:8c:86:30:0e:52:a4:b1:34:47:bd:ad:79:b0:88:98:f6:bb:
ad:76:c0:ac:40:b7:4c:3d:92:dd:81:f8:d4:83:17:a5:21:0d:
a7:5f:6e:a0:08:0f:78:cc:a8:6f:e9:cc:36:41:28:f6:52:f8:
3e:e7:bd:22:90:26:8f:0c:16:7a:6d:19:aa:f1:be:f8:26:2a:
7c:31:39:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:11:31 2025 by rpki-client