Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qDWXLQklNokUUCW0uIE8id5Jn0g.roa
File: qDWXLQklNokUUCW0uIE8id5Jn0g.roa (raw, json)
Hash identifier: MD3M0xN4/oRPC/1ibAy6wKk6QrNqz1PoqtJSAUeSj6A=
Subject key identifier: A8:35:97:2D:09:25:36:89:14:50:25:B4:B8:81:3C:89:DE:49:9F:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8EC61339
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qDWXLQklNokUUCW0uIE8id5Jn0g.roa
Signing time: Tue 21 Jun 2022 20:10:44 +0000
ROA not before: Tue 21 Jun 2022 20:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2395345721 (0x8ec61339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 20:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a835972d09253689145025b4b8813c89de499f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:a6:93:67:9b:84:d3:ed:cb:92:ba:c5:09:
4e:3b:f0:c4:58:75:68:c0:f6:f8:18:24:23:cd:81:
ad:7f:2d:52:d4:7b:87:24:3d:8b:63:d7:17:77:d0:
d3:24:88:f9:ea:2f:49:7b:1a:3e:43:01:2d:af:2c:
1a:a1:67:2a:89:8a:69:44:3b:27:a0:65:aa:28:98:
fd:ee:45:84:ab:5b:1e:23:2f:9b:db:75:72:fc:39:
78:2b:65:09:2f:26:08:3a:b0:0e:00:f5:17:69:5a:
cb:90:1d:c8:24:57:40:9d:6b:59:60:f2:3a:66:76:
8c:77:b9:4d:3b:b0:7f:84:b1:3f:bc:8e:d5:40:7d:
8f:65:a0:b6:e7:b7:c9:66:bb:4e:97:99:a0:92:51:
13:1c:d3:3a:98:2c:18:7f:61:27:85:37:42:c4:70:
23:75:7c:88:fd:b5:33:36:39:12:4b:2a:b9:3f:14:
fb:7b:19:07:30:9d:86:35:95:ee:f7:b5:32:d8:7d:
8f:4b:6f:3d:68:f2:ef:14:72:13:b2:c0:6d:53:a9:
67:5e:5c:83:fe:5b:1b:e3:e4:e6:77:9d:c5:73:17:
7e:1d:1d:53:cf:1d:a7:2d:3b:25:98:c6:16:00:3e:
4b:00:6d:18:05:f8:0b:26:96:52:61:71:6a:ef:67:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:35:97:2D:09:25:36:89:14:50:25:B4:B8:81:3C:89:DE:49:9F:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qDWXLQklNokUUCW0uIE8id5Jn0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:bf:88:18:20:6d:8d:1e:0a:f5:ea:75:c3:8b:d7:87:75:a0:
fb:e0:38:45:05:86:dc:fa:77:fd:39:30:5c:29:7f:80:4d:ce:
2d:fd:42:9a:f1:f4:7b:3c:2c:ea:c9:0f:ca:ed:5d:5f:cb:cc:
74:36:5c:5f:34:bc:6d:69:27:94:e3:86:cb:2f:97:b5:e3:a5:
94:61:51:53:08:55:9e:65:b8:98:71:4a:df:83:05:bb:9d:a4:
6d:cf:34:f3:9d:41:b6:6a:0c:4b:0d:e5:37:ed:79:e8:a4:b1:
80:b0:b8:74:25:1c:e4:dd:61:7d:b1:b8:41:32:56:c8:ef:1f:
3a:fd:b6:3d:da:77:ce:2f:6a:81:aa:2d:49:ea:7f:f3:0f:4c:
b6:34:7c:95:bf:50:8c:a1:e6:3b:1e:7f:23:46:6d:f7:aa:2e:
6c:2c:9a:87:7d:c1:09:5e:84:3b:15:87:65:4a:da:01:7d:2d:
30:f1:f0:e9:03:71:d8:d0:60:f0:e7:f8:3d:91:1a:57:2e:bd:
e3:2d:64:95:6c:a6:c4:b8:5d:d3:af:d7:3a:67:65:ec:87:51:
3d:11:a2:93:ca:05:28:ae:14:ef:80:d3:2f:94:d2:b8:52:17:
9e:1f:48:2b:36:30:70:78:6e:01:01:e4:21:7d:ae:c7:67:38:
47:1e:2b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:51:55 2025 by rpki-client