Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qUQFtyevPuOC-evjCc7GI11mGhs.roa
File: qUQFtyevPuOC-evjCc7GI11mGhs.roa (raw, json)
Hash identifier: xL+SMeSAlbNo5kCd9b6z1/1vgjE3VA+S15ZWDUkr/Ys=
Subject key identifier: A9:44:05:B7:27:AF:3E:E3:82:F9:EB:E3:09:CE:C6:23:5D:66:1A:1B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F2082DECB213FB14E90D5E1EB7D8F6A9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qUQFtyevPuOC-evjCc7GI11mGhs.roa
Signing time: Sat 18 Mar 2023 00:04:27 +0000
ROA not before: Sat 18 Mar 2023 00:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:f208:55a/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f2:08:2d:ec:b2:13:fb:14:e9:0d:5e:1e:b7:d8:f6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 18 00:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a94405b727af3ee382f9ebe309cec6235d661a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:c1:81:58:5a:1f:21:3c:9a:70:92:3c:d1:
b3:55:82:17:8e:3c:dd:81:c7:c7:ef:05:be:aa:e3:
5e:8f:66:ae:ad:c1:35:7c:57:7e:17:1b:70:42:d0:
f6:f7:66:eb:d3:81:4c:18:5d:68:22:2c:cd:8e:c2:
db:2c:25:91:98:93:27:36:71:c7:f0:ef:ea:94:d1:
b2:4e:a7:69:88:df:9c:4c:12:6c:d1:9f:84:b7:81:
3b:1b:47:9f:4c:17:2c:66:f6:43:22:60:d7:1c:e9:
4a:8f:6c:97:05:aa:f7:6b:05:52:cc:8d:49:53:51:
b9:27:81:d6:fd:a6:ee:99:97:74:e3:2b:37:ee:d5:
8f:39:c0:e9:aa:e8:e7:b8:8d:84:82:0b:a3:6c:66:
4e:71:5e:2f:90:57:ae:1c:80:a7:4d:8e:31:b6:bf:
f8:59:e4:21:10:03:b5:97:50:da:58:ce:51:ea:c1:
2d:9c:84:3f:22:36:ce:7c:53:63:38:da:82:e1:48:
e7:b8:a7:8b:d8:81:fb:6e:97:12:7f:79:d7:fc:d8:
ab:37:71:57:c3:06:c0:79:f8:a5:2b:0e:3c:61:8f:
58:8c:02:b5:f6:07:03:c8:0a:68:b3:d4:d3:6a:cf:
5c:46:c1:3b:40:11:b2:ed:52:66:98:2a:ce:28:2f:
d3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:44:05:B7:27:AF:3E:E3:82:F9:EB:E3:09:CE:C6:23:5D:66:1A:1B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qUQFtyevPuOC-evjCc7GI11mGhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:d4:11:62:dc:60:32:89:61:cc:43:bc:19:c3:7c:d7:b8:3a:
eb:b8:3e:ab:a9:1e:d8:ad:c0:56:57:f3:73:0e:b4:8c:79:9b:
50:71:c0:02:b9:72:3b:e6:27:b3:89:91:bc:9a:55:3d:9d:c5:
c6:f8:70:5f:b5:22:3a:3d:77:d1:41:21:7d:94:1c:35:1a:0a:
da:42:1e:fe:cd:58:1a:aa:b4:f8:f4:81:81:b9:b3:48:95:dc:
7e:af:3c:ac:82:27:60:c3:e9:c4:99:01:cd:7a:da:95:bb:c9:
05:eb:8e:10:e8:ca:3e:b5:8f:d2:1c:1a:ef:96:c6:9b:10:5e:
1d:62:1b:60:56:48:04:16:c3:be:b6:b5:ce:4c:1a:7c:b0:cd:
08:f1:b6:41:43:35:1d:3c:7d:d1:f6:0e:1f:44:4a:60:2a:80:
21:65:b9:f7:dd:5e:74:d6:89:cf:75:8f:e9:16:b5:10:1c:70:
0c:e4:fa:11:85:97:c1:36:54:d8:3f:49:b2:7e:d9:cb:3e:4b:
cb:d7:7e:ed:ee:11:61:4c:2b:6a:ac:b0:a5:42:28:5b:b4:56:
f0:5a:ff:c3:b2:e1:60:d8:38:98:3d:b8:ad:37:ce:c1:39:70:
03:7a:e7:5a:25:8e:d5:3a:f8:09:4f:53:4b:0e:e7:7e:5c:79:
c0:6b:59:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:28:50 2025 by rpki-client