Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QxY__xAUFB_9aHxUM7vRmH48InM.roa
File: QxY__xAUFB_9aHxUM7vRmH48InM.roa (raw, json)
Hash identifier: 5QtZbjZqtRJipJBsyNnTrdRGmWCwrC7ACavGAWiVt6c=
Subject key identifier: 43:16:3F:FF:10:14:14:1F:FD:68:7C:54:33:BB:D1:98:7E:3C:22:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BFCAFBD2CA3D59CD8B1DB3EE296AD3FC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QxY__xAUFB_9aHxUM7vRmH48InM.roa
Signing time: Fri 04 Aug 2023 09:04:58 +0000
ROA not before: Fri 04 Aug 2023 09:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:bfca:4555/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bf:ca:fb:d2:ca:3d:59:cd:8b:1d:b3:ee:29:6a:d3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 09:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43163fff1014141ffd687c5433bbd1987e3c2273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:e2:e1:65:5d:99:f9:a2:50:e5:b3:49:d7:
49:73:ff:ff:fa:c5:fe:80:0c:00:08:fa:92:3c:64:
ef:30:77:aa:61:23:07:0e:15:81:6a:1c:ab:2f:98:
17:41:ae:67:3a:ba:09:ac:1d:bb:21:94:b6:c2:78:
1a:82:47:78:f0:c0:75:8c:fd:a9:45:52:e2:bc:ba:
77:e8:12:6c:57:3f:29:00:41:cf:a3:a3:6d:3a:cd:
87:67:4a:8e:1d:b2:0f:2b:a8:ca:87:97:17:bd:a6:
a9:fe:3a:8d:6a:33:0a:f1:52:c2:79:70:b9:ff:b8:
38:f7:28:1a:8b:df:f5:67:79:52:8c:4f:dd:cc:6a:
71:47:18:46:5c:0c:8b:82:17:8b:b7:58:2a:4d:ef:
61:63:81:4a:c0:7d:64:22:9c:3c:e4:38:28:73:47:
af:2d:7c:fc:f0:2b:01:ec:c3:f8:18:54:ab:c3:a9:
cd:5f:89:ad:31:3d:ca:06:04:c4:d6:b8:4a:ba:2a:
fa:c3:23:1c:e7:fb:00:40:f9:ff:21:f4:f2:36:49:
2a:26:76:2f:76:0c:27:10:26:f1:bd:65:5e:82:fb:
eb:9c:e1:e2:25:45:75:e7:33:7d:64:32:f9:2b:03:
04:dd:25:cc:85:44:64:b0:8d:38:61:ac:e7:ea:8e:
b0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:16:3F:FF:10:14:14:1F:FD:68:7C:54:33:BB:D1:98:7E:3C:22:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QxY__xAUFB_9aHxUM7vRmH48InM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:ce:cc:af:82:56:1a:1d:0a:c2:c2:5c:3f:3a:93:31:44:5d:
b0:77:fe:91:52:0b:41:5f:91:ce:b7:c8:39:cc:5b:e8:f6:93:
db:2b:c7:69:bd:7b:71:b6:db:fe:f4:83:fe:68:a1:9d:19:22:
7e:77:b9:43:a5:a9:81:46:cc:7a:e2:a3:5f:c4:8d:18:42:43:
6f:23:7e:b7:4c:e5:df:f0:bb:e0:a2:6c:7d:36:c1:a2:e5:c2:
fd:0b:d3:72:1c:7c:20:b2:1a:c2:cb:4e:b6:c8:2b:84:42:d6:
61:2c:82:f5:30:53:1d:fc:b3:3c:24:7d:cb:b3:bb:a3:fa:a4:
43:7a:39:5e:3b:eb:3f:87:86:c6:85:da:69:d2:b8:8c:08:3a:
f0:99:9a:a7:04:cc:02:f1:93:e9:46:61:83:62:18:fb:f6:1c:
61:68:61:28:51:2c:7f:42:67:f5:5d:42:5e:57:95:97:00:ae:
bd:92:79:b6:03:5a:95:ba:4d:6a:f1:b1:57:0f:9b:9a:b1:01:
5f:66:75:69:1a:bc:24:d5:61:95:f9:14:6a:15:2a:ce:91:d3:
8f:94:44:05:d3:62:e2:43:9d:5b:a6:8f:9c:e3:5b:be:14:81:
a0:5b:61:4d:04:23:b7:9a:9e:7e:04:76:9a:f7:1e:bf:36:4e:
97:2e:c2:5f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYm/yvvSyj1ZzYsds+4patP8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA0MDkwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzE2M2ZmZjEwMTQxNDFmZmQ2ODdjNTQzM2JiZDE5ODdlM2MyMjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSXi4WVdmfmiUOWzSddJc///+sX+
gAwACPqSPGTvMHeqYSMHDhWBahyrL5gXQa5nOroJrB27IZS2wngagkd48MB1jP2p
RVLivLp36BJsVz8pAEHPo6NtOs2HZ0qOHbIPK6jKh5cXvaap/jqNajMK8VLCeXC5
/7g49ygai9/1Z3lSjE/dzGpxRxhGXAyLgheLt1gqTe9hY4FKwH1kIpw85Dgoc0ev
LXz88CsB7MP4GFSrw6nNX4mtMT3KBgTE1rhKuir6wyMc5/sAQPn/IfTyNkkqJnYv
dgwnECbxvWVegvvrnOHiJUV15zN9ZDL5KwME3SXMhURksI04Yazn6o6wXQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEMWP/8QFBQf/Wh8VDO70Zh+PCJzMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUXhZX194QVVGQl85YUh4VU03dlJtSDQ4SW5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABfOzK+CVhodCsLCXD86
kzFEXbB3/pFSC0Ffkc63yDnMW+j2k9srx2m9e3G22/70g/5ooZ0ZIn53uUOlqYFG
zHrio1/EjRhCQ28jfrdM5d/wu+CibH02waLlwv0L03IcfCCyGsLLTrbIK4RC1mEs
gvUwUx38szwkfcuzu6P6pEN6OV476z+HhsaF2mnSuIwIOvCZmqcEzALxk+lGYYNi
GPv2HGFoYShRLH9CZ/VdQl5XlZcArr2SebYDWpW6TWrxsVcPm5qxAV9mdWkavCTV
YZX5FGoVKs6R04+URAXTYuJDnVumj5zjW74UgaBbYU0EI7eann4Edpr3Hr82Tpcu
wl8=
-----END CERTIFICATE-----
Generated at Fri May 2 13:18:51 2025 by rpki-client