Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qRnSfKRwFQg9XcAeZ27HYoEZezI.roa
File: qRnSfKRwFQg9XcAeZ27HYoEZezI.roa (raw, json)
Hash identifier: 4E9TqIE9PMNWpfJyPryckBnSLNlR5cDV3Eik+M2Y3aY=
Subject key identifier: A9:19:D2:7C:A4:70:15:08:3D:5D:C0:1E:67:6E:C7:62:81:19:7B:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188902ECE7AB166DBCAFDC23727FA27CFD0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qRnSfKRwFQg9XcAeZ27HYoEZezI.roa
Signing time: Tue 06 Jun 2023 10:09:26 +0000
ROA not before: Tue 06 Jun 2023 10:09:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:90:2e:ce:7a:b1:66:db:ca:fd:c2:37:27:fa:27:cf:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 6 10:09:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a919d27ca47015083d5dc01e676ec76281197b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c5:e3:5f:da:30:4d:1e:65:7a:fc:55:ae:93:
01:06:4e:b5:74:27:25:c1:32:cf:f0:5f:d7:bc:28:
09:c4:c2:97:e9:66:f4:93:f4:73:b9:b1:b4:42:0a:
60:e0:9a:20:a0:dd:c6:27:98:78:a8:66:2d:03:7a:
21:ea:96:80:79:41:21:cb:4a:75:1e:07:06:43:45:
ac:36:e5:be:00:d4:95:c8:2d:2d:db:4e:77:4b:dd:
59:be:12:f4:0e:8c:bb:aa:fa:a4:f8:ea:5f:7a:73:
4f:de:e3:e3:6f:55:f0:9f:f1:9a:0a:bf:6c:14:a7:
e7:73:5b:76:77:af:40:8b:25:96:be:82:04:be:63:
de:80:c3:4a:48:38:f4:22:bd:e0:6e:14:b2:e1:a3:
af:d0:e9:7c:43:56:f1:6f:9a:58:63:53:aa:d4:46:
df:a6:2b:57:47:54:be:5f:c3:de:87:eb:5b:3d:1e:
21:8f:5e:56:d7:88:27:94:4b:46:6d:f2:04:eb:3e:
b2:eb:2d:b9:c6:85:82:5f:c9:6d:ab:88:44:b8:d5:
d7:aa:ba:e9:9a:0c:57:3b:24:ca:9a:a8:cc:ca:b6:
ba:24:ce:48:7b:ea:11:13:99:db:39:9f:83:0c:84:
d4:44:c2:0d:a2:31:be:fb:2a:91:50:b8:74:26:87:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:19:D2:7C:A4:70:15:08:3D:5D:C0:1E:67:6E:C7:62:81:19:7B:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qRnSfKRwFQg9XcAeZ27HYoEZezI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:8e:4e:04:55:6f:29:81:9a:a9:9a:64:27:da:0e:29:6c:ee:
8a:d3:80:d5:21:1a:85:66:48:46:fe:e6:ff:cb:ab:8d:e7:4b:
e5:0e:77:df:c7:97:27:74:b6:d1:2b:94:1f:c1:c5:e4:d9:64:
a3:3d:e7:37:d0:0e:f5:7f:54:d1:f5:b9:81:db:03:b7:d9:92:
33:03:93:43:4d:ad:51:c6:ea:97:57:50:17:31:ce:d6:f3:a3:
e8:50:00:55:38:0c:42:6b:aa:c4:f4:65:57:16:29:3b:2c:f9:
51:87:21:36:a4:eb:9c:a0:7e:2f:cd:bc:cd:44:5f:22:0f:65:
22:e2:9b:9c:79:ce:c2:78:d4:c1:dd:a1:f7:7a:ce:ed:0a:ad:
1f:fa:4e:70:d5:71:1f:80:1b:52:2f:7d:9b:02:46:73:9a:59:
1b:b9:46:6f:7c:0c:d6:48:62:fb:d8:48:e5:a9:ef:1c:f1:4f:
35:f6:f6:f0:0b:5f:8d:1c:12:c3:95:46:74:11:6f:de:31:79:
38:25:3e:82:5d:83:8c:21:f4:d3:2f:ce:75:ec:82:aa:b9:e7:
b1:2d:65:88:14:26:80:cf:ef:db:7f:2a:ad:6c:c1:09:5f:d0:
ae:9c:22:2c:de:88:f9:81:63:0b:bc:32:83:71:f7:16:23:61:
aa:6d:09:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:40:26 2025 by rpki-client