Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qs_Nf5c5aJF0t-fxjj8f_7z4_Fs.roa
File: qs_Nf5c5aJF0t-fxjj8f_7z4_Fs.roa (raw, json)
Hash identifier: e0sjD8LkMTpDbaJtaMyxPg2RByRlzPz2YJHu/yfU/8U=
Subject key identifier: AA:CF:CD:7F:97:39:68:91:74:B7:E7:F1:8E:3F:1F:FF:BC:F8:FC:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186ED1F27E34E6C4E3D2AB53F363C2A32EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qs_Nf5c5aJF0t-fxjj8f_7z4_Fs.roa
Signing time: Fri 17 Mar 2023 01:11:27 +0000
ROA not before: Fri 17 Mar 2023 01:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ed:1f:27:e3:4e:6c:4e:3d:2a:b5:3f:36:3c:2a:32:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 01:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aacfcd7f9739689174b7e7f18e3f1fffbcf8fc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:34:1c:2a:80:36:a6:75:1f:43:08:dc:eb:b7:
2d:55:ff:59:f1:73:f8:98:90:47:81:17:7f:96:ba:
1e:14:96:1d:53:50:e7:ea:07:08:ca:57:b1:f6:6a:
82:61:02:c3:29:78:71:2e:db:c0:3b:b3:d9:bf:61:
45:2a:35:f6:78:fd:d5:ee:f6:d8:40:0a:2a:35:90:
47:f7:e3:c8:41:03:4c:76:45:25:75:df:d7:4f:f5:
74:c3:1f:3a:66:86:39:76:32:93:2b:86:f0:12:02:
fc:d0:2b:2b:45:79:af:f1:c0:b3:04:9c:a9:14:5b:
3e:ca:83:34:e6:ea:cc:75:36:be:0c:b0:68:cc:e8:
2c:c6:c1:1a:1c:15:e3:d5:27:04:b2:df:44:3d:fe:
8c:03:37:36:e3:93:a5:a4:6a:20:86:88:c6:dc:90:
57:69:69:14:7d:58:9f:77:65:20:57:7d:9b:44:25:
b4:1a:8e:89:f5:81:ba:81:dd:b2:c5:20:94:70:14:
f9:49:56:b5:69:c8:78:c0:58:13:22:60:9a:95:a7:
6e:ae:55:fb:23:9b:79:2d:48:35:f7:2d:50:b6:b1:
de:ef:d1:f5:75:19:29:c5:c5:5c:c5:04:41:d7:a1:
fd:58:ac:1b:4a:46:3e:87:e5:4c:1d:bf:19:2f:5d:
85:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CF:CD:7F:97:39:68:91:74:B7:E7:F1:8E:3F:1F:FF:BC:F8:FC:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qs_Nf5c5aJF0t-fxjj8f_7z4_Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:09:de:a3:6b:24:20:af:a0:c0:55:d9:09:65:31:44:3c:e0:
23:59:24:32:af:fe:77:88:98:a1:ff:ac:7b:75:65:b7:9e:bc:
ab:ab:23:5a:18:18:d9:fa:31:07:f8:00:92:85:0d:41:1e:d5:
c0:f6:c9:ea:a1:a0:ca:c3:1e:e2:28:09:86:0c:09:5c:43:95:
04:c7:17:65:b3:98:27:fa:0b:e8:9b:68:cc:e3:ff:c8:e4:b4:
60:10:ca:69:b4:ad:c6:61:df:62:6a:dd:0e:ac:df:87:a1:45:
42:83:df:fb:65:da:0a:9b:90:56:f2:e9:31:7c:0c:8f:1b:64:
89:70:3e:53:aa:89:3d:85:19:7c:d5:40:7e:f4:3f:b2:3e:5c:
d4:26:43:42:e1:2b:09:5a:45:a4:eb:c8:83:aa:b7:7a:fb:bc:
83:68:e2:69:32:38:3d:55:26:d1:52:94:6f:db:94:75:6c:08:
6a:78:7a:27:b0:fa:25:8f:82:b5:08:6f:77:bc:c1:34:65:15:
68:7f:34:cc:65:f5:45:df:5a:b0:5d:ad:1b:16:d7:82:f5:3c:
cf:a8:68:f3:cf:d4:ec:39:39:0c:f9:bd:f3:0c:96:61:f1:62:
e1:07:3d:71:76:26:60:fe:e9:89:40:10:9c:cd:33:95:32:8a:
48:ac:bd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:43 2025 by rpki-client