Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QyO6cH0yweyaf6xkLexmRKoVaII.roa
File: QyO6cH0yweyaf6xkLexmRKoVaII.roa (raw, json)
Hash identifier: bclhIUolWy1svGiY6j4w3NvWfbLBzh8CzubcWo1zBVw=
Subject key identifier: 43:23:BA:70:7D:32:C1:EC:9A:7F:AC:64:2D:EC:66:44:AA:15:68:82
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869AF3F9CDF94E27EE8450BCF5A9C3CE8D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QyO6cH0yweyaf6xkLexmRKoVaII.roa
Signing time: Wed 01 Mar 2023 02:15:25 +0000
ROA not before: Wed 01 Mar 2023 02:15:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9a:f3:f9:cd:f9:4e:27:ee:84:50:bc:f5:a9:c3:ce:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 02:15:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4323ba707d32c1ec9a7fac642dec6644aa156882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:94:f6:00:3c:2e:eb:5e:88:a9:af:10:b2:
be:20:cf:e5:59:25:0a:b9:10:1d:d7:3b:ce:8d:b8:
bc:a1:d3:38:81:ca:ae:f4:3c:b4:4d:ea:01:0e:72:
02:54:7e:ff:b4:0e:a3:01:4d:5a:bd:44:6a:8c:b0:
38:4f:1c:95:b2:87:17:39:87:96:13:d5:5c:01:18:
3c:85:49:0a:38:ac:a5:42:1c:fa:c8:f8:b3:f3:fc:
96:77:88:73:da:d1:95:2a:97:9d:38:cc:37:1b:b9:
a4:1b:60:e2:b6:70:19:d4:70:74:57:70:af:b1:ab:
d1:52:c9:fd:7f:e1:b5:20:df:73:69:07:b6:6d:8e:
dd:af:56:4e:cb:42:56:70:4d:e2:1e:20:27:36:f4:
ff:da:c6:b5:1c:cb:b7:24:fe:26:74:7f:24:7b:60:
ef:f9:1e:e1:a1:99:f5:f1:4d:81:85:1a:8c:7c:bf:
12:ce:08:6c:39:33:73:17:73:55:06:a4:1a:d5:a3:
d0:7d:45:12:8e:3b:b1:03:c6:78:7c:74:45:e0:c6:
4e:61:a0:35:8c:e0:43:2e:50:9d:91:83:4b:a2:b3:
d1:87:d1:04:e6:70:05:da:ff:4c:f8:79:87:61:f8:
05:0e:ee:1c:fd:8a:65:f9:0f:00:bb:76:bb:3b:3c:
af:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:23:BA:70:7D:32:C1:EC:9A:7F:AC:64:2D:EC:66:44:AA:15:68:82
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QyO6cH0yweyaf6xkLexmRKoVaII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:06:42:1e:f2:ff:02:f0:12:31:5c:64:d5:6e:14:46:7d:f5:
6f:7d:b3:4c:24:14:99:6d:f4:f3:7a:7b:7d:69:bc:de:0e:cb:
a4:0a:4d:4e:b8:da:67:27:13:44:d8:c3:8e:45:e9:67:e3:99:
de:23:23:7e:ae:bf:d3:36:f9:fc:77:be:73:e5:f7:2d:f0:23:
97:9d:53:ef:b6:af:91:e7:a7:55:46:d9:11:e8:d4:ee:7f:c9:
b8:29:47:1d:e6:f4:10:16:54:8c:e9:6b:ce:64:75:fe:e2:9c:
6d:20:53:08:b3:34:d3:8f:88:df:c8:66:85:7e:01:ae:f1:e3:
64:0b:58:11:56:58:05:7d:9e:69:ee:97:cc:5b:82:04:21:e1:
ff:bd:f9:0f:e5:fe:d2:9b:73:42:ab:4f:64:79:6f:39:89:4d:
11:30:d7:20:25:5a:7c:12:07:a4:45:d3:62:d4:02:73:db:6d:
96:97:ee:c6:7c:8b:81:be:c2:56:bf:ec:2a:d7:4b:f2:10:03:
9f:f7:13:07:5a:70:df:78:6f:18:5d:da:bb:34:76:01:48:c0:
28:51:8d:64:3b:06:27:f4:95:1b:fe:c4:4e:28:63:68:77:71:
b4:27:fe:93:48:f2:f8:fd:33:a9:8c:7f:f3:14:a6:76:6f:25:
3a:57:c0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:28 2025 by rpki-client