![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.qs.nu/repo/qsnu/1/323630323a666235623a61633a3a2f34382d3438203d3e203537373832.roa
File: 323630323a666235623a61633a3a2f34382d3438203d3e203537373832.roa (raw, json)
Hash identifier: lkwAobIBChBhcXSDV/THwuPTp8AyJ/yJf74c3MPHPo8=
Subject key identifier: 38:79:B2:C3:49:6C:00:27:71:C3:B1:65:07:BC:0A:2F:36:FB:90:2F
Certificate issuer: /CN=cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8
Certificate serial: 7C81CBBFCCF598771BA22CB9F30F44C348311852
Authority key identifier: 24:AB:EF:D2:EF:B3:FE:31:9A:14:51:9E:A4:98:91:20:B0:AE:CA:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8.cer
Subject info access: rsync://rpki.qs.nu/repo/qsnu/1/323630323a666235623a61633a3a2f34382d3438203d3e203537373832.roa
Signing time: Tue 25 Jul 2023 21:33:50 +0000
ROA not before: Tue 25 Jul 2023 21:28:50 +0000
ROA not after: Tue 23 Jul 2024 21:33:50 +0000
asID: 57782
IP address blocks: 2602:fb5b:ac::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:81:cb:bf:cc:f5:98:77:1b:a2:2c:b9:f3:0f:44:c3:48:31:18:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8
Validity
Not Before: Jul 25 21:28:50 2023 GMT
Not After : Jul 23 21:33:50 2024 GMT
Subject: CN=3879B2C3496C002771C3B16507BC0A2F36FB902F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6d:b2:11:c4:14:7d:5f:29:64:51:a2:99:74:
3c:dd:6a:bd:ab:04:75:d9:27:52:7a:b6:a6:82:e6:
2e:fb:cd:d7:57:2c:58:a5:d9:18:1f:bb:e4:39:e5:
26:65:d5:9e:fe:b1:47:e7:5c:f6:78:45:d2:03:ff:
04:56:a4:eb:dd:db:af:74:19:19:fb:6f:a4:69:e7:
c8:3d:f5:56:25:84:1b:e3:41:28:58:72:6a:4b:63:
1f:81:0f:5a:6e:0f:40:50:f3:4d:7b:c2:82:ad:00:
1f:25:b3:b0:95:5a:df:67:06:18:31:67:50:7f:b0:
aa:ac:da:aa:1c:5e:85:63:95:9a:20:af:31:5e:2a:
5a:de:ef:bf:0e:03:3a:61:5e:e0:9b:04:3a:67:41:
d1:63:e1:c5:fc:1e:2b:0d:01:39:93:c8:8f:95:9f:
cb:2b:d3:1c:70:e7:f3:b0:c5:2a:f2:ad:dc:b1:24:
cd:92:05:e0:c5:cd:98:1b:fa:b2:27:be:65:ac:1d:
dd:ad:dc:02:07:7b:76:e0:79:a5:a2:f1:43:05:58:
4f:af:70:81:f5:bb:ab:44:5b:c9:44:ba:43:1e:17:
61:63:15:66:37:ca:66:50:ef:fc:ea:92:b0:e0:3a:
3c:02:43:6c:1e:1e:91:aa:69:ba:64:c1:1c:b6:c1:
18:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:79:B2:C3:49:6C:00:27:71:C3:B1:65:07:BC:0A:2F:36:FB:90:2F
X509v3 Authority Key Identifier:
keyid:24:AB:EF:D2:EF:B3:FE:31:9A:14:51:9E:A4:98:91:20:B0:AE:CA:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.qs.nu/repo/qsnu/1/24ABEFD2EFB3FE319A14519EA4989120B0AECA3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.qs.nu/repo/qsnu/1/323630323a666235623a61633a3a2f34382d3438203d3e203537373832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fb5b:ac::/48
Signature Algorithm: sha256WithRSAEncryption
b1:c7:08:e3:97:05:b1:f8:21:0a:73:f1:95:eb:ac:73:22:27:
9a:0a:05:d5:47:fd:e3:40:55:be:3e:98:8a:0c:7d:87:a1:9d:
89:e4:77:d4:b0:9f:f6:83:f6:13:34:cd:07:ee:d1:b4:f2:a4:
05:e6:0f:0d:ad:e9:a0:10:8a:99:71:8f:cb:ed:47:c1:5e:26:
a4:44:ad:ed:08:0e:00:ec:e8:80:3e:7a:33:10:3f:d3:99:c0:
b4:67:3e:f6:27:9c:50:ab:19:ac:b5:ba:ee:3d:5c:6a:7e:65:
1c:ee:d1:d5:b1:b4:8c:da:c3:9c:1c:fa:f1:ac:1a:80:4d:04:
6d:a6:f9:82:be:6b:3d:85:7a:e6:b1:45:6b:c8:f4:16:95:24:
71:de:70:8a:6e:a9:99:b6:b9:1c:58:48:50:cc:ee:80:01:58:
8d:df:91:18:1a:aa:ee:f0:c2:27:95:f3:4a:18:73:41:07:5a:
03:74:08:b9:09:78:55:ce:a1:e5:38:20:cf:cf:12:05:4b:c0:
bb:89:2c:9f:89:a7:c8:25:c4:b4:97:49:e3:a9:99:6a:a2:07:
4c:31:a1:fb:78:82:2a:72:96:a3:3b:64:1d:d3:06:dd:40:24:
93:83:ba:a6:6d:0d:4b:cf:3f:c8:97:57:0c:3e:2f:5d:76:cf:
80:e2:aa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:59 2025 by rpki-client