Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qDBG-9sD6h8427sGI1On7BWKO4E.roa
File: qDBG-9sD6h8427sGI1On7BWKO4E.roa (raw, json)
Hash identifier: b1rQjHWvOwuMgmELAc4sSqZpw5ZUk8Ck/ro+duBC08M=
Subject key identifier: A8:30:46:FB:DB:03:EA:1F:38:DB:BB:06:23:53:A7:EC:15:8A:3B:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866EF7C6443E86513E881AE77F0AABFC7F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qDBG-9sD6h8427sGI1On7BWKO4E.roa
Signing time: Mon 20 Feb 2023 13:16:17 +0000
ROA not before: Mon 20 Feb 2023 13:16:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6e:f7:c6:44:3e:86:51:3e:88:1a:e7:7f:0a:ab:fc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 13:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a83046fbdb03ea1f38dbbb062353a7ec158a3b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6b:72:15:3d:ec:b6:d3:a2:39:64:dc:21:34:
dd:de:b1:ac:0b:10:7d:ce:43:64:8f:98:4b:ee:41:
cc:7f:01:04:74:dd:10:f6:c2:2c:28:40:66:b0:18:
aa:7b:d6:c0:1c:53:a6:9d:e0:af:a7:3c:1e:aa:2b:
ea:ee:af:2e:f6:7d:b0:de:a9:e2:81:a0:a3:39:f1:
85:fb:5f:95:90:06:ef:3c:fd:9f:64:b8:dd:85:58:
bb:a9:3c:66:60:eb:d8:5f:ee:0f:40:7c:3f:d3:74:
68:80:54:89:a1:29:fe:57:0f:d3:12:70:ef:e9:65:
f4:2c:65:2d:96:a5:c5:99:73:37:28:fe:b5:ee:c1:
a7:df:27:4e:68:b8:f0:8d:bb:83:71:d7:d0:bd:f6:
c6:53:c5:67:78:61:1a:ec:f5:8a:77:e7:72:f0:78:
21:ac:f7:56:47:77:f3:44:f1:1a:85:5b:14:a6:56:
18:6e:2d:82:aa:ed:b6:10:d6:36:28:01:1d:b0:fd:
25:70:45:12:40:1e:52:9b:ba:7f:c2:0e:fc:02:cf:
b8:f9:8b:c8:04:cf:9e:76:62:c6:09:f2:de:d1:47:
96:5e:01:23:80:1e:ea:37:dd:98:51:ea:c0:98:ca:
ea:c7:a7:c7:20:ef:19:55:50:73:e4:f6:a7:75:6e:
8f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:30:46:FB:DB:03:EA:1F:38:DB:BB:06:23:53:A7:EC:15:8A:3B:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qDBG-9sD6h8427sGI1On7BWKO4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:26:a5:14:3c:14:5a:60:e6:bb:be:a2:c0:d9:2a:2d:75:df:
67:97:eb:a8:ab:b7:e2:f4:ae:91:32:2f:e4:03:7d:5e:96:19:
78:36:6c:70:3d:95:10:81:2a:29:af:22:1b:c5:9d:38:a2:48:
8f:d8:4c:37:2b:12:13:ca:fc:87:53:68:4e:b6:41:f3:75:d2:
00:1d:a1:6c:55:0f:98:68:a5:bc:0b:c8:9e:8b:23:dd:00:d4:
ac:fa:32:1e:ff:1a:dd:98:10:d1:63:f1:f1:1d:a2:9e:8b:95:
81:4e:12:bc:6b:54:22:5a:53:a0:f7:df:6e:35:d6:8c:c4:cb:
83:75:13:ac:3e:5d:f2:13:c6:11:55:22:5f:85:94:dc:08:b6:
58:8b:d9:0c:69:5b:fe:7f:e3:a1:0a:8f:15:05:3f:3e:31:14:
ba:ad:fc:64:0a:58:63:55:1d:35:f7:93:09:da:97:f7:a2:4f:
8d:af:24:4c:ca:a1:58:ed:01:01:4c:24:d4:95:0b:35:eb:4b:
1e:e1:e7:a3:02:41:70:bd:a6:cf:72:73:96:64:d2:fa:26:b5:
84:d6:48:8c:cf:0e:6c:60:d4:03:ca:fb:c9:30:ab:27:e1:2c:
67:22:37:19:10:1b:e4:c1:27:54:ef:88:75:c0:e6:dc:02:c6:
fe:48:34:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:50:37 2025 by rpki-client