Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qjzyq-t7j46Kay_dCQBEWXRwyQs.roa
File: qjzyq-t7j46Kay_dCQBEWXRwyQs.roa (raw, json)
Hash identifier: OC/YROxHugGwYH7V0iGaQDbc7YMf0dtvo0Ehq/1P3VE=
Subject key identifier: AA:3C:F2:AB:EB:7B:8F:8E:8A:6B:2F:DD:09:00:44:59:74:70:C9:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EDF49C3A331DC07DFC915939C37B9431
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qjzyq-t7j46Kay_dCQBEWXRwyQs.roa
Signing time: Sun 13 Aug 2023 08:12:58 +0000
ROA not before: Sun 13 Aug 2023 08:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ed:f4:9c:3a:33:1d:c0:7d:fc:91:59:39:c3:7b:94:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 08:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa3cf2abeb7b8f8e8a6b2fdd090044597470c90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:50:b8:d4:05:06:99:cf:44:9e:2a:01:95:ae:
38:c7:66:c9:a6:b0:c9:ed:ad:56:f7:80:8b:61:53:
57:b2:23:5e:ee:85:c4:21:80:58:86:ea:cf:a2:f3:
96:c3:45:76:0d:01:1f:c4:cc:1a:25:06:83:24:74:
8a:32:a4:fd:23:23:4c:6c:db:fe:b8:21:25:93:c7:
07:af:ca:52:81:41:fe:9c:9a:71:99:67:b8:dc:f1:
e6:e3:bc:e9:a5:40:79:ef:9f:b8:e8:ae:3c:10:f6:
c8:3a:40:8e:e0:80:af:ac:7d:47:fc:fd:d4:0b:aa:
0d:85:46:10:77:a6:4f:79:ff:98:ef:15:df:d2:30:
db:1a:18:ae:e5:6c:70:27:63:c0:77:b4:11:9c:8b:
38:fd:93:25:f9:25:0d:7c:a7:92:c7:06:76:39:39:
f2:d8:6d:72:b8:b1:05:76:f9:fa:d1:27:b1:fe:12:
7c:5e:9d:28:85:81:d7:4d:42:87:92:86:7a:88:bc:
a3:d6:fa:41:b9:64:db:a6:d6:69:37:8f:9f:9b:29:
f6:fa:54:b5:8d:13:3b:5a:71:04:a7:2c:99:c7:a7:
cd:4e:5a:31:0b:50:b0:6a:7a:a6:60:7f:41:63:51:
03:b6:bf:ad:ee:92:d6:09:cc:53:ce:e5:4b:9d:37:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3C:F2:AB:EB:7B:8F:8E:8A:6B:2F:DD:09:00:44:59:74:70:C9:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qjzyq-t7j46Kay_dCQBEWXRwyQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:77:6f:36:42:69:3f:f5:62:1f:7c:fa:d5:02:d8:2e:fa:b3:
e0:c5:a9:22:16:d3:05:29:46:25:7a:8c:f0:51:d0:ea:51:e5:
b4:95:45:1f:ea:5c:14:16:46:ae:f7:0b:bf:bc:80:31:f0:0b:
38:a4:bb:06:39:e2:eb:f4:fa:7f:53:40:eb:16:1a:97:e4:81:
26:bf:99:de:02:ba:49:13:48:f7:91:51:66:7e:68:15:85:ae:
4e:5d:56:f3:e6:bd:e6:12:9d:0a:59:58:1c:f1:53:03:41:15:
25:06:df:8a:f2:20:ec:35:b3:67:aa:71:cc:66:07:1d:e4:f9:
06:83:c7:0b:ff:20:b5:38:f7:d3:b1:9b:23:da:36:1d:b4:5c:
1e:93:33:e7:9a:e6:79:f5:d7:4e:06:16:5b:63:3c:c2:0d:18:
2a:2a:9e:95:d8:8c:68:a0:71:d2:8c:89:ee:4b:65:38:c2:86:
a5:9d:71:89:e2:62:81:91:9e:eb:f7:3c:ca:35:d8:88:6a:36:
bd:6e:07:76:53:53:ed:93:ca:a7:6d:a4:be:6e:08:15:a3:1b:
0d:16:d6:6b:e7:21:48:0d:49:d1:98:8f:e6:f7:66:36:cc:cf:
81:5f:59:fc:1c:36:d3:97:cf:31:2e:d9:ec:08:ff:91:90:49:
40:af:d4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:47:54 2025 by rpki-client