Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QtJMq7LLuhwdbd0od4W1GuZ3T7Q.roa
File: QtJMq7LLuhwdbd0od4W1GuZ3T7Q.roa (raw, json)
Hash identifier: 7mgVwLoA+s/oEgoF+IBT0BKls5DsLCrFNqSWjFt7wTA=
Subject key identifier: 42:D2:4C:AB:B2:CB:BA:1C:1D:6D:DD:28:77:85:B5:1A:E6:77:4F:B4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01883AC7FD5A1D5CA129010A7EE746318502
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QtJMq7LLuhwdbd0od4W1GuZ3T7Q.roa
Signing time: Sat 20 May 2023 20:09:24 +0000
ROA not before: Sat 20 May 2023 20:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3a:c7:fd:5a:1d:5c:a1:29:01:0a:7e:e7:46:31:85:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 20 20:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42d24cabb2cbba1c1d6ddd287785b51ae6774fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:be:f8:8a:e0:23:09:93:82:12:e7:c9:f7:97:
04:03:c2:bf:79:04:50:57:f8:83:5b:74:e5:d4:9c:
e2:9f:82:82:c6:ce:75:f4:50:1f:a3:91:10:8c:ee:
a4:95:f1:c5:1b:c2:eb:f0:72:b3:bb:34:87:80:9c:
ea:76:4f:4b:c7:74:54:23:e4:25:0e:45:d3:4b:03:
37:bd:a0:d8:87:a5:89:d0:80:00:c6:c3:1d:e9:a1:
90:2b:2e:00:4f:53:fc:9a:b6:d5:63:e6:01:1a:5f:
fa:bd:49:da:55:88:fd:0c:ae:e3:42:7e:eb:a4:be:
9c:77:d4:bd:ef:8e:10:b8:7f:58:da:72:e7:d1:65:
15:ba:28:4a:dd:66:84:58:e8:d5:75:80:fb:84:14:
6d:f1:9d:0d:b9:1b:8e:03:16:36:97:1f:5f:58:b2:
a7:2b:37:b5:bd:20:ee:8b:8f:16:af:1d:ea:ec:6c:
e5:4f:61:6d:8b:72:99:8f:76:04:a8:bb:59:59:1c:
9f:20:d4:f8:1a:20:1a:bb:44:aa:6a:07:69:57:74:
ea:59:3a:a3:e2:da:26:17:d9:8f:f0:8d:73:e4:f0:
dd:83:4c:2a:3e:1a:1e:90:9c:1b:93:77:a1:f3:98:
2f:79:12:c0:f7:42:0e:3f:ea:16:c7:f1:cd:ec:f7:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D2:4C:AB:B2:CB:BA:1C:1D:6D:DD:28:77:85:B5:1A:E6:77:4F:B4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QtJMq7LLuhwdbd0od4W1GuZ3T7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:b2:d5:0b:c6:f0:07:8e:40:c3:8e:6a:37:19:fa:a6:15:b3:
29:c3:5a:38:7f:91:3f:5d:13:e3:71:0f:de:51:e5:d1:8a:d0:
b5:7d:c1:84:1d:76:54:bb:54:5e:13:b0:f4:97:96:eb:a8:44:
00:5e:79:b3:6d:f8:16:44:e6:35:2c:3a:62:53:7a:20:f7:c7:
8e:e1:97:1a:c7:df:34:18:2d:cf:0b:7b:55:a0:f2:cb:20:f3:
71:e1:af:81:9f:7a:1a:60:9d:eb:8d:cc:6f:dc:c5:3b:14:16:
dd:17:b0:47:a8:b3:af:d0:8d:d3:29:31:53:32:fe:c3:8e:4d:
ef:c8:87:36:e8:42:fd:1d:ff:e0:9c:8e:bf:ba:92:ee:b1:0e:
d0:13:f5:6f:33:2d:07:f4:f1:28:97:84:6d:e8:5c:02:35:09:
eb:0a:1c:76:83:d1:06:8f:c5:42:2b:49:1c:1a:bd:28:e0:1f:
17:f1:a3:ab:e8:9a:5f:fe:fb:e7:d1:c2:ce:49:82:b4:3f:b9:
1d:fb:a1:36:92:01:a3:dc:05:ac:e3:dc:ca:f0:75:03:4a:3e:
d4:a4:db:8a:25:e5:1e:89:1f:7d:24:b8:e2:09:09:00:37:e5:
8e:78:ff:bc:21:36:8c:2e:d5:27:16:77:5d:9e:c0:b5:fc:21:
c6:a5:40:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:27:15 2025 by rpki-client