Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QzX9RwTVjpNezy3enheDa4KotyI.roa
File: QzX9RwTVjpNezy3enheDa4KotyI.roa (raw, json)
Hash identifier: c8ZEej9VfnJXkd7tsbbqj3agjQA5keFntFmbr5RnpUg=
Subject key identifier: 43:35:FD:47:04:D5:8E:93:5E:CF:2D:DE:9E:17:83:6B:82:A8:B7:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187096C4B18F8ABF896C1B5E0BE2B6E4B14
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QzX9RwTVjpNezy3enheDa4KotyI.roa
Signing time: Wed 22 Mar 2023 13:05:04 +0000
ROA not before: Wed 22 Mar 2023 13:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:187:96b:9a48/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:6c:4b:18:f8:ab:f8:96:c1:b5:e0:be:2b:6e:4b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 13:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4335fd4704d58e935ecf2dde9e17836b82a8b722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:31:d8:23:cd:94:e4:17:41:0f:d2:9d:2b:3a:
fd:db:d3:6a:cc:15:01:f5:5a:25:4c:54:1e:68:97:
0a:b4:7b:1e:39:3a:76:b0:c9:e8:86:9a:f9:d1:e5:
2d:7a:3c:06:11:50:a8:07:bd:6b:63:7d:1f:44:86:
44:d8:79:6b:21:3c:3e:b0:f9:ae:71:24:e8:97:6c:
bc:37:4c:69:22:0e:1d:74:a8:e3:db:6f:69:09:2f:
4e:30:fc:28:be:e8:f5:0c:ec:32:0e:11:2c:de:c4:
9c:37:d4:45:68:a7:99:f8:ba:d5:2f:b3:52:b2:b3:
b2:66:98:38:d0:bd:b7:29:61:a7:68:e1:a8:8d:f2:
83:87:5f:85:ef:21:ad:0c:a9:53:d7:12:02:62:3c:
a6:d0:27:b9:e9:3f:ec:e3:6a:45:08:89:87:56:df:
0d:f7:be:a2:65:67:6d:5c:a3:2e:44:d0:1a:7f:1a:
35:51:27:c6:e5:a5:ac:96:d3:87:9f:0a:b8:55:69:
d3:52:3d:a7:74:ed:69:80:6d:99:d6:10:96:24:ee:
d6:62:93:9c:ac:c0:9d:cf:25:7c:36:cb:0f:38:fb:
15:60:53:13:59:fd:a9:52:99:44:0a:3d:e7:9e:70:
6c:de:80:10:4b:1e:db:ea:57:0e:98:59:60:59:0d:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:35:FD:47:04:D5:8E:93:5E:CF:2D:DE:9E:17:83:6B:82:A8:B7:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QzX9RwTVjpNezy3enheDa4KotyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:f9:d6:a8:85:4b:9d:83:22:71:b0:01:fb:a0:53:10:d4:fc:
be:fb:0c:93:5f:cb:b2:3f:7a:1b:f9:25:2d:d9:9c:e8:83:68:
b1:74:05:37:b1:6c:95:5b:a5:bf:c8:11:9f:2b:43:f9:5f:64:
a6:bf:9f:a6:59:98:b3:78:27:1a:8d:b7:99:9f:af:1f:bd:b0:
cc:30:f2:35:05:9f:01:b5:2a:e6:e6:75:cf:bc:be:04:d8:25:
b6:09:c8:4d:f1:b7:fd:e4:22:50:ec:77:88:72:cb:0d:1d:cf:
2a:e8:bd:fc:3c:2e:39:31:c2:11:a6:ec:2f:8c:2c:e2:08:bb:
71:6c:d4:48:d9:c6:13:80:f3:be:7e:46:f5:56:45:97:e7:3d:
ed:59:c3:5f:c0:38:de:a8:0f:82:c4:e5:ef:da:da:45:75:92:
69:96:44:95:aa:95:a5:0c:0a:3b:0f:7c:44:22:ca:e2:0b:00:
a8:2a:bf:b0:9e:3a:36:b1:7a:67:f9:b4:6a:b6:a6:c2:ed:c0:
a1:76:50:b8:d7:40:d0:33:c6:37:14:be:e6:e0:1e:f0:ce:a3:
96:06:8e:55:de:12:34:07:ee:99:c0:53:fc:0c:25:69:82:03:
f3:e3:d3:19:b8:3f:bd:ac:c6:04:f3:c6:e0:50:35:fa:8a:58:
7c:30:b2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:40:00 2025 by rpki-client