Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/QGISyX_n_vrxwWB2OSS3BHse5_0.roa
File: QGISyX_n_vrxwWB2OSS3BHse5_0.roa (raw, json)
Hash identifier: va2Zr9pHiDCrSSbOgw33PGEqAL0JO2aBPkbyBrbcleQ=
Subject key identifier: 40:62:12:C9:7F:E7:FE:FA:F1:C1:60:76:39:24:B7:04:7B:1E:E7:FD
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C957DCA8844BBE7F5349CA4B9C1C5D189
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/QGISyX_n_vrxwWB2OSS3BHse5_0.roa
Signing time: Sat 23 Dec 2023 07:04:58 +0000
ROA not before: Sat 23 Dec 2023 07:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:957d:464b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:95:7d:ca:88:44:bb:e7:f5:34:9c:a4:b9:c1:c5:d1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 23 07:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=406212c97fe7fefaf1c160763924b7047b1ee7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:17:b9:e6:8a:09:aa:e1:2e:47:08:fc:6e:b5:
09:9e:5c:05:00:99:03:3f:77:ba:38:9e:0b:fd:55:
48:54:29:2e:84:b9:39:e6:6e:ca:46:75:44:57:d3:
07:48:76:f8:e7:5e:1d:b6:1a:63:4b:1c:e9:ab:9a:
4d:b8:fa:20:a8:51:d6:05:09:86:ec:ee:cf:64:f7:
85:e2:5c:bc:6a:89:ed:fe:26:73:05:e3:9d:81:f4:
5d:f3:09:74:b7:ee:95:cb:b4:75:df:af:40:11:18:
7c:b8:ef:59:4c:41:95:79:7e:37:88:dd:7e:2e:3a:
dc:9d:30:7b:40:3a:de:82:cb:8b:13:c2:d3:d0:81:
c5:77:d7:a0:92:d7:ad:95:79:9f:bd:3b:68:3d:e6:
0d:b9:e9:1d:8e:e4:6d:91:d6:a7:a0:08:cb:ae:c7:
3f:b3:73:ad:36:e4:67:ff:e2:c1:0e:b3:95:a4:b6:
91:f8:4c:df:67:98:c6:18:95:be:7d:34:5c:8e:ff:
3b:5f:65:0d:68:4c:c2:93:a7:00:8d:67:9a:ed:3d:
ac:55:a3:f7:90:e3:36:66:6f:29:24:79:cc:d4:1b:
5a:02:f2:bb:1d:ad:2e:10:f5:a4:65:09:3f:6a:0d:
57:a1:f0:49:99:d2:df:82:4a:d1:0e:8a:ee:95:98:
c4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:62:12:C9:7F:E7:FE:FA:F1:C1:60:76:39:24:B7:04:7B:1E:E7:FD
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/QGISyX_n_vrxwWB2OSS3BHse5_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:3b:dc:b3:e2:89:0e:10:37:50:7b:27:5f:4d:27:84:be:64:
7e:c8:21:55:6c:55:a0:fd:c3:94:15:46:8c:56:67:ce:6b:7c:
09:e6:e5:c5:bc:fc:cd:93:ef:95:37:c4:b1:e3:20:c8:db:43:
a7:e3:e0:ed:98:fa:71:61:aa:b5:ba:a3:48:fb:6c:21:45:12:
07:f9:12:ae:2f:3f:83:d0:85:30:a9:e1:31:a8:0f:39:62:7a:
b2:16:70:69:89:d8:e9:4f:61:00:33:ee:60:e9:db:fc:9d:05:
1b:b8:4b:89:38:2f:ed:8c:bb:50:bd:30:2f:be:96:59:a5:ea:
46:15:9a:5c:bd:71:d4:cf:9b:57:02:e4:29:aa:88:bb:3b:a6:
03:b5:96:db:06:0f:8a:5c:cc:0d:58:e9:f0:a0:15:ac:ff:79:
1e:1e:a5:2b:1e:15:46:d9:91:44:24:d3:59:39:f1:aa:41:d9:
18:57:05:0d:bd:62:7b:ac:2d:62:d8:c1:de:91:89:17:c2:f8:
99:f5:85:2a:c4:45:f8:a4:95:a0:b2:3a:9c:88:23:78:a2:55:
42:88:61:1c:0b:e1:0a:09:8f:a4:b3:0c:b6:49:a9:73:0b:d1:
3f:f6:04:ba:c7:c5:35:f6:1c:67:c1:26:0f:ab:ba:8e:b7:60:
8c:2f:e5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:55:22 2025 by rpki-client