Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qB_MwM7-DFgqM-mjPSWYfy6T9Z8.roa
File: qB_MwM7-DFgqM-mjPSWYfy6T9Z8.roa (raw, json)
Hash identifier: jwSgAgjSNgMVjOLJb+PzMNgVna6iQJ07np7JVTyVgVs=
Subject key identifier: A8:1F:CC:C0:CE:FE:0C:58:2A:33:E9:A3:3D:25:98:7F:2E:93:F5:9F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CE6A9610B58FD0280657DD7A5626C7A1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qB_MwM7-DFgqM-mjPSWYfy6T9Z8.roa
Signing time: Mon 07 Aug 2023 05:13:58 +0000
ROA not before: Mon 07 Aug 2023 05:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ce:6a:96:10:b5:8f:d0:28:06:57:dd:7a:56:26:c7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 05:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a81fccc0cefe0c582a33e9a33d25987f2e93f59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:5c:2f:a7:22:47:10:74:05:6e:c5:b9:1f:
cd:8e:0f:82:ec:f2:12:9f:d7:2d:da:7a:bf:f0:11:
a1:21:04:16:7f:ea:ca:da:d3:46:1b:7d:d4:11:1d:
02:90:69:e2:34:59:95:7e:20:41:c3:3a:e9:f9:7b:
1e:72:16:40:21:2c:9a:2e:4b:9e:4f:c8:c9:8d:45:
b7:91:64:28:10:b5:5b:e1:cf:74:45:b2:73:64:2c:
9c:9d:51:11:e6:24:e3:3d:9f:78:9d:b9:df:61:81:
30:18:a3:57:b3:6e:ff:9c:fe:05:7d:bb:09:b6:1b:
d9:01:a6:07:11:ed:5c:5b:f4:1c:0c:5b:31:31:4b:
3d:69:c4:74:33:ed:b9:15:39:00:0a:6c:95:3c:1e:
cf:bc:6c:97:81:38:63:39:63:4d:81:dd:61:c3:24:
35:29:f4:0f:0f:c6:36:42:f5:98:78:57:a8:42:ac:
bc:49:29:ce:3a:6e:f1:c3:6f:d8:93:c2:0f:c9:dd:
5d:99:36:d2:ae:67:7e:af:d3:4e:dc:2e:24:7f:bf:
78:6d:71:12:f5:c5:eb:27:b6:da:85:ca:62:ba:98:
17:0c:cb:64:bf:84:d0:7d:63:0e:88:76:81:37:24:
66:ae:28:83:91:d1:ad:56:a4:ec:5c:ee:ad:ae:a5:
8a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1F:CC:C0:CE:FE:0C:58:2A:33:E9:A3:3D:25:98:7F:2E:93:F5:9F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qB_MwM7-DFgqM-mjPSWYfy6T9Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:50:4f:12:7b:a2:e3:a6:51:9a:01:f3:97:e6:92:79:1f:33:
ec:66:31:4e:b6:15:35:2b:fb:bd:0a:43:fc:45:31:53:65:aa:
7d:22:63:91:da:3e:41:3c:27:be:b6:41:16:9d:50:2e:8f:9f:
db:09:01:c2:02:2f:96:ca:d1:69:5a:87:47:f5:e4:80:80:34:
7f:8d:db:95:b5:5c:5d:ff:df:1e:40:c4:3c:09:37:a2:a9:d1:
ef:7b:37:cb:bb:b8:91:19:4a:39:ec:da:06:8e:ae:4c:95:d7:
bd:bd:a5:5e:84:32:87:20:18:2e:c3:1c:c1:86:e2:6c:50:57:
0f:65:a2:30:e0:25:82:5d:a4:39:f3:94:57:db:0d:48:23:f6:
19:8c:14:c7:1a:86:37:e2:d6:48:cd:83:f7:48:33:9f:05:96:
45:77:57:ef:98:24:55:a6:51:28:ce:4d:a4:7c:5e:c1:69:c3:
fb:de:7b:84:6e:06:4d:e4:72:64:5f:88:58:87:42:ad:17:35:
17:f8:7e:72:82:62:15:7c:39:7d:15:8b:39:18:e3:85:6c:be:
17:c6:37:80:8b:19:17:ae:75:34:0f:cb:2f:ff:ad:f6:7f:56:
a5:0b:f2:48:8b:d4:7f:29:8a:21:c3:d2:46:b4:29:f3:ed:fb:
3f:eb:53:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:52 2025 by rpki-client