Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qwdh-SMIXQZROBpHMk_IQkpfCCU.roa
File: qwdh-SMIXQZROBpHMk_IQkpfCCU.roa (raw, json)
Hash identifier: wE9PL6BkNOEz9IkX8dj5/Q1yne3nZbmUaWaUTlECHBQ=
Subject key identifier: AB:07:61:F9:23:08:5D:06:51:38:1A:47:32:4F:C8:42:4A:5F:08:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8D708F5D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qwdh-SMIXQZROBpHMk_IQkpfCCU.roa
Signing time: Fri 17 Jun 2022 05:09:44 +0000
ROA not before: Fri 17 Jun 2022 05:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2372964189 (0x8d708f5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 05:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab0761f923085d0651381a47324fc8424a5f0825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1e:ed:15:d4:7a:eb:4b:aa:ed:85:fc:5d:4b:
1b:60:50:52:04:12:0b:3c:d0:ad:98:65:5e:0f:f2:
ce:f7:0b:d7:e9:65:71:98:fd:46:8b:2e:a2:56:e8:
b5:f0:1f:43:0e:c0:be:27:68:6d:88:15:26:fe:d7:
9f:4e:80:6e:fd:d0:ec:ca:f0:b0:5e:c9:bc:c6:9d:
3c:b5:48:71:e2:b9:66:b6:7c:ab:e7:c5:f2:84:53:
09:bb:44:aa:eb:96:82:1c:cc:2e:51:72:7f:bd:7f:
69:3e:6c:0f:6e:64:34:41:5e:a4:c6:1d:c2:a6:e4:
c7:9e:f5:47:77:36:ab:48:92:99:32:64:7b:03:73:
c2:35:40:5e:e8:53:ac:2b:7a:fb:d0:e2:92:1f:00:
a3:c9:36:21:46:66:03:6f:bb:99:16:44:b8:be:06:
92:10:fb:6c:da:0b:53:0f:ca:33:bf:69:2d:49:3b:
e3:c3:6e:38:d8:21:21:a1:8e:11:6e:c2:15:4d:26:
e9:c1:ab:c2:3d:3d:80:0e:b8:1c:28:bf:80:84:21:
66:c2:3f:11:4c:aa:c5:2d:c8:39:23:47:1d:bc:24:
26:cb:a0:5e:1f:5f:8c:0c:5f:6e:50:d9:b3:f8:a9:
56:c7:96:36:27:e3:84:18:8f:98:ce:f1:88:5e:6f:
9e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:07:61:F9:23:08:5D:06:51:38:1A:47:32:4F:C8:42:4A:5F:08:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qwdh-SMIXQZROBpHMk_IQkpfCCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:e7:9e:cf:4f:3a:0f:f3:ee:76:0a:b2:49:d0:b7:99:01:8f:
72:b1:eb:82:a2:ce:62:1a:7a:db:cd:22:a4:e8:c6:3f:7a:b9:
f6:d9:8c:78:92:5e:39:98:3f:23:fd:7c:20:29:4d:52:12:0d:
98:ec:d2:b6:a7:1a:9c:b9:b8:2e:6d:17:72:d3:73:1f:62:79:
b5:7e:f8:14:e0:db:65:e2:ab:e9:f3:ec:51:11:07:da:c5:8e:
dd:e3:4d:6a:d6:1e:c0:9d:1e:bb:76:28:5c:42:57:e4:62:bb:
2a:57:ee:13:0a:57:41:fc:9a:ea:f0:72:4f:43:a6:a9:f1:84:
ad:a4:d0:40:78:1d:ff:47:09:f5:d7:ff:3e:38:e0:88:c7:e1:
54:ba:bd:00:6e:1b:64:b7:fd:d0:aa:de:c6:ee:7e:ab:0f:8f:
ac:14:2b:09:1c:7e:06:c7:30:19:f7:20:06:17:cb:d8:18:e0:
a7:3e:40:d2:0c:62:d7:7b:95:c3:12:b2:3c:b0:5e:49:ec:d3:
a4:6f:10:33:27:85:4d:92:64:4a:b8:7f:35:31:ca:86:0e:35:
8f:fc:93:40:ce:ad:b7:43:a3:b1:d4:3f:16:4b:fb:ea:7b:65:
4b:fd:ad:06:aa:f7:8c:e7:b7:25:2f:1d:1a:55:46:dc:c2:52:
10:40:89:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:36:38 2025 by rpki-client