Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qscbmpg1gv3xGp855SPM5LMNGCU.roa
File: Qscbmpg1gv3xGp855SPM5LMNGCU.roa (raw, json)
Hash identifier: CVv21JZzg9f8YCs5jGs4aTpDzIbh+jQ7mkiU+XDmGdw=
Subject key identifier: 42:C7:1B:9A:98:35:82:FD:F1:1A:9F:39:E5:23:CC:E4:B3:0D:18:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C1FA5FBB1F64A418A19A4E9E1F91A3F0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qscbmpg1gv3xGp855SPM5LMNGCU.roa
Signing time: Fri 04 Aug 2023 19:15:58 +0000
ROA not before: Fri 04 Aug 2023 19:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c1:fa:5f:bb:1f:64:a4:18:a1:9a:4e:9e:1f:91:a3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 19:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42c71b9a983582fdf11a9f39e523cce4b30d1825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1f:a6:97:2e:36:c1:4f:57:de:d8:df:a0:b5:
82:7d:2c:34:36:32:c7:1a:97:34:99:9e:b3:3b:32:
1f:bd:06:b5:ab:02:9d:83:2c:e8:2e:bf:4d:a3:5e:
1e:2f:ed:3e:88:c8:c6:e8:f8:0e:64:c6:06:04:b1:
78:47:33:ba:7f:b9:c4:2d:68:ce:3d:4f:69:f5:b9:
17:15:4e:9b:9a:f5:11:ef:14:30:08:9e:81:0b:30:
f3:fc:a9:bb:4a:7a:e4:35:2a:d9:8f:b7:32:fe:53:
12:e4:28:1a:94:3f:8f:15:cc:b6:32:33:54:75:46:
9a:5c:19:d2:b0:97:b8:1b:57:50:ab:47:1d:41:f7:
30:f9:0a:fc:c5:94:1c:cb:a4:de:85:05:00:f0:b3:
84:ad:46:f8:66:84:02:4d:e4:bd:c9:b1:6c:66:44:
27:00:02:e6:eb:0b:ff:77:f6:2a:4b:0a:2d:78:ef:
7d:e3:ee:23:f3:4f:df:bc:56:e4:4e:7f:d8:85:b1:
57:73:aa:56:5d:ad:78:0b:10:83:72:a1:54:d2:4f:
47:02:33:6f:43:24:fc:29:60:74:81:e4:b7:91:3a:
26:68:17:e6:9b:88:0f:67:00:84:cd:21:51:96:4f:
d8:b8:a0:90:59:40:aa:96:9e:ca:71:93:49:6e:44:
37:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C7:1B:9A:98:35:82:FD:F1:1A:9F:39:E5:23:CC:E4:B3:0D:18:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qscbmpg1gv3xGp855SPM5LMNGCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:4d:cb:42:1b:8b:5b:04:08:19:66:68:5e:b7:31:5a:5d:a9:
74:f6:1a:eb:57:6b:c1:40:7d:71:01:9a:69:ce:0c:fe:f4:20:
22:7d:7b:a8:d8:db:c6:8f:ae:2e:65:17:c5:47:a8:3a:35:f6:
89:31:40:f1:db:13:88:30:9d:15:7a:67:c0:8c:7a:58:65:69:
f0:c2:e7:e8:52:6b:08:e5:a7:1a:e4:a8:1d:03:cc:64:48:65:
b7:97:48:b4:f3:07:a1:a2:cf:68:b4:52:07:80:80:1c:63:7e:
62:d5:97:17:e2:33:1c:0b:2e:a3:74:49:58:04:99:53:13:fb:
d0:d6:17:02:a0:16:6d:df:78:f9:a1:c7:19:5a:1b:4e:63:76:
67:5a:78:28:72:1b:50:ad:3b:db:19:01:60:5e:5f:c9:4c:42:
54:e6:95:1b:af:ba:25:10:a2:1b:3a:db:35:54:c2:0c:e5:d2:
aa:12:95:02:ec:cd:cf:a6:73:72:d7:40:1c:12:d4:e4:c4:34:
31:27:94:9d:65:b3:7d:09:e5:2c:17:6b:db:69:03:cb:db:50:
5a:3f:f4:05:59:14:66:1b:ce:9e:06:25:6c:a3:d3:ee:b8:29:
31:6d:d1:aa:18:20:b1:01:59:f9:ac:7c:9c:8e:24:18:d4:62:
73:09:db:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:10 2025 by rpki-client