Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QBPD_HmyWdG4LV5SctPeF7oM5qY.roa
File: QBPD_HmyWdG4LV5SctPeF7oM5qY.roa (raw, json)
Hash identifier: ZeX+yaMrr3ubkUDCcd6n/9tu87ou3wGzd4sLhhQnjuk=
Subject key identifier: 40:13:C3:FC:79:B2:59:D1:B8:2D:5E:52:72:D3:DE:17:BA:0C:E6:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B519D4F7271F3EB0C2E756FE094E4BD2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QBPD_HmyWdG4LV5SctPeF7oM5qY.roa
Signing time: Mon 24 Apr 2023 21:09:41 +0000
ROA not before: Mon 24 Apr 2023 21:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b5:19:d4:f7:27:1f:3e:b0:c2:e7:56:fe:09:4e:4b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 21:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4013c3fc79b259d1b82d5e5272d3de17ba0ce6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3c:5a:f6:d4:ab:5a:3d:b9:cd:a9:c0:9b:a5:
35:c9:29:4e:d2:8b:c9:dd:4b:7b:3d:fc:03:6f:0f:
31:2f:a8:d3:c7:9c:5d:96:50:43:71:95:0b:af:85:
e6:d8:66:85:0b:25:c6:bc:cb:93:3d:a1:9a:8f:e0:
5a:7f:63:f7:37:ca:28:70:4f:37:44:41:de:bf:d0:
93:a4:6d:56:bd:64:1b:10:11:b4:6b:4d:85:0c:60:
4f:d1:00:af:95:e0:44:36:2e:9c:8e:3e:bb:92:e5:
7d:fa:1a:82:38:b9:ca:d8:05:29:5d:9d:9d:78:fe:
05:be:e4:9b:5f:72:e5:12:47:a5:ac:6d:da:5b:3c:
89:26:ee:ad:2e:c2:8a:76:fe:39:9a:06:64:7b:cd:
18:34:33:b3:ce:f8:6f:1c:05:a4:a7:cd:e7:5f:c7:
92:5d:ac:4e:c9:5d:61:6a:80:0c:56:d2:d3:ef:43:
fc:35:1f:21:dc:a1:87:f0:48:31:5c:05:e9:80:80:
a5:77:6f:dd:98:ce:2d:da:e2:e6:ec:4a:37:01:ca:
d1:12:94:eb:52:a2:51:c7:7c:5b:bb:c7:45:3d:ea:
a4:bd:d6:7f:80:f5:64:6b:46:1d:c2:43:be:51:dc:
97:0e:a9:37:31:2e:05:fb:5b:e2:fb:00:aa:25:60:
72:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:13:C3:FC:79:B2:59:D1:B8:2D:5E:52:72:D3:DE:17:BA:0C:E6:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QBPD_HmyWdG4LV5SctPeF7oM5qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:0a:e8:dd:a0:15:8e:b0:bc:94:e7:19:22:97:b9:c4:92:b6:
34:9f:52:3c:cb:be:e3:83:cd:23:f5:fd:1d:69:2e:30:43:c9:
83:e4:09:3b:32:0c:dd:18:37:32:56:c3:99:c6:39:21:d5:f8:
f1:d9:88:d7:49:07:4d:5c:65:9f:95:73:9d:23:6f:5d:82:b2:
30:da:c6:84:91:24:8e:19:ab:75:24:b9:58:db:e6:5e:77:73:
ff:5f:5c:f7:17:0e:fb:16:f4:e3:2c:87:5a:f5:69:26:7b:2a:
1f:77:86:31:73:1f:4b:fc:64:4f:00:16:19:f7:dc:32:ff:22:
d7:4f:ba:4e:29:bb:7d:8b:58:36:aa:0e:89:e1:86:d5:ca:75:
eb:68:e5:ec:38:34:ed:e9:c5:9a:d8:e4:cb:44:2f:fe:ec:aa:
b1:4c:23:03:a5:04:0e:ee:de:30:73:e8:4d:20:8b:f4:ca:07:
e0:82:42:66:05:1c:04:cf:dc:36:a5:a2:44:64:2d:73:eb:01:
52:d7:ae:4b:5f:65:69:aa:36:dc:ef:2f:34:94:3c:e9:ee:71:
4b:34:de:cc:35:66:42:b1:12:34:0e:07:15:cf:bd:60:36:f9:
11:14:b1:0e:b5:02:ae:8d:58:47:48:53:8d:0f:33:0a:55:18:
7e:39:78:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:32:07 2025 by rpki-client