Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qhq2a3pUUCbC-2I4sIkmpjnAOyU.roa
File: qhq2a3pUUCbC-2I4sIkmpjnAOyU.roa (raw, json)
Hash identifier: rDEZwjgmW97DzZ/KdlJ1GA0ADctSQ4cxl+UU4Y8mXxE=
Subject key identifier: AA:1A:B6:6B:7A:54:50:26:C2:FB:62:38:B0:89:26:A6:39:C0:3B:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189777A8B9FFE331A749A9F0D1D8887F717
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qhq2a3pUUCbC-2I4sIkmpjnAOyU.roa
Signing time: Fri 21 Jul 2023 08:04:27 +0000
ROA not before: Fri 21 Jul 2023 08:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:189:777a:5fae/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:77:7a:8b:9f:fe:33:1a:74:9a:9f:0d:1d:88:87:f7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 08:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa1ab66b7a545026c2fb6238b08926a639c03b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f3:c7:41:dd:be:f8:2e:d4:b1:a0:7a:9e:9a:
17:d1:10:06:5a:cc:c8:75:ac:73:eb:23:9c:59:ab:
ef:48:92:18:f5:24:cd:65:d5:29:93:f9:c7:69:db:
d4:02:b6:e5:93:41:fd:85:56:ef:88:02:01:c8:8c:
83:3a:96:b3:5e:33:b2:74:ec:ee:35:ae:1e:22:83:
c5:e2:6a:7d:ea:2b:94:12:f8:7b:9e:a7:cf:00:98:
f5:98:54:b0:85:f6:12:a7:4c:01:4c:42:2a:56:ef:
d0:36:11:79:9b:bc:85:34:16:a0:ab:98:69:27:77:
c6:c8:44:9b:10:7a:d8:0f:6f:8a:a7:ab:af:43:57:
7f:7f:dd:6f:cb:17:ad:9a:23:df:66:34:c1:8f:06:
7a:90:63:98:96:ee:61:0f:f8:63:37:9d:c9:85:f3:
80:64:4b:73:3c:3a:95:e3:eb:de:27:9c:d3:0c:03:
2e:10:1b:28:0b:93:e4:c3:ca:80:50:1b:93:d4:52:
bd:45:e6:dc:ef:62:3e:e8:78:79:c5:72:2a:61:1b:
de:74:f6:5b:66:93:48:1d:53:5c:97:b0:c9:50:30:
31:ad:70:97:b5:ad:05:96:30:77:f7:c6:44:17:ac:
14:36:03:ba:a0:65:cf:c0:ef:f8:7b:f3:08:9c:9b:
8f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1A:B6:6B:7A:54:50:26:C2:FB:62:38:B0:89:26:A6:39:C0:3B:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qhq2a3pUUCbC-2I4sIkmpjnAOyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:73:f0:18:a4:4c:a2:a1:8d:21:dd:64:5b:55:d8:0a:c9:0e:
24:bc:dd:a6:59:a0:f5:19:4a:32:0a:ce:5c:b5:7f:e5:cc:c8:
43:fd:50:57:b3:84:36:62:00:b9:ff:07:86:3c:13:07:7a:62:
a1:8d:ef:33:c5:e9:e6:df:de:5d:35:3a:da:43:d9:c1:b2:27:
82:0b:b8:1c:90:80:fd:16:f1:01:b3:92:ae:76:4e:6d:e7:5b:
1e:63:51:9a:82:36:94:52:f2:fd:b2:e3:e3:e0:6d:95:fc:4b:
23:e6:4d:87:5f:07:94:44:bd:60:9f:e8:3b:fe:f4:fe:99:15:
8f:c7:7b:e5:f5:24:a4:77:13:e5:ce:4f:e3:0f:be:7a:f7:31:
75:8f:4f:4b:7e:31:66:a6:b3:55:a1:92:ae:60:06:e5:05:b1:
09:3d:36:55:2f:0f:99:02:d6:b7:dc:55:28:e7:df:49:36:a1:
21:61:8e:47:39:17:56:05:35:bc:37:77:d6:35:0a:8f:a3:f3:
57:08:f7:7f:5a:64:2e:a5:28:70:03:fd:f8:68:dd:7b:14:6d:
3a:07:41:8f:15:c1:b8:c7:73:f2:fa:fe:a4:f9:b4:20:1b:20:
3a:5e:3b:d1:49:96:df:cc:ac:56:d7:10:fc:b8:bc:25:cc:02:
71:e3:98:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:45:48 2025 by rpki-client