Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QGHA_NEKX4xHk9hD40GHOMGezq8.roa
File: QGHA_NEKX4xHk9hD40GHOMGezq8.roa (raw, json)
Hash identifier: 4aL56GfXLoMBCFpkb1iIAOk35Lqq30gV0drm+kJGLJU=
Subject key identifier: 40:61:C0:FC:D1:0A:5F:8C:47:93:D8:43:E3:41:87:38:C1:9E:CE:AF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018263D7CC96C910009530C19331D550DB78
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QGHA_NEKX4xHk9hD40GHOMGezq8.roa
Signing time: Wed 03 Aug 2022 13:14:23 +0000
ROA not before: Wed 03 Aug 2022 13:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:63:d7:cc:96:c9:10:00:95:30:c1:93:31:d5:50:db:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 13:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4061c0fcd10a5f8c4793d843e3418738c19eceaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2e:6b:1c:a7:7b:91:77:3d:49:09:a3:c6:e6:
67:1e:6a:26:ee:63:1c:47:46:93:b0:ab:9c:89:4a:
dc:23:cc:34:d2:4c:a5:1a:45:32:94:4b:05:da:7b:
37:7f:df:e4:58:33:d8:8b:c8:f9:b8:fe:bc:cc:38:
03:26:d6:6e:cc:76:24:aa:fe:77:08:fb:cc:75:24:
cc:49:8f:c3:d2:24:f2:83:16:55:23:2c:ed:ee:0c:
d0:81:93:2b:12:a6:0a:33:ae:0c:c0:55:8b:28:fd:
13:d7:bb:a9:37:88:7d:76:85:e0:eb:b8:90:1b:98:
39:bb:45:a2:54:ae:98:a9:99:6f:2c:14:1c:c6:a6:
4c:7e:e1:c9:12:8e:ab:6c:0e:9c:76:ad:52:6a:f7:
c0:ca:df:fa:2f:9f:7f:30:c9:c2:54:a6:b1:2c:a9:
cf:35:69:16:49:2f:94:40:fc:c2:08:24:0f:fb:80:
cc:bc:8a:5b:01:1b:61:2c:95:6b:37:af:79:15:a0:
64:21:18:9e:45:a3:5e:5e:65:8d:e8:af:52:ff:77:
9a:ed:b0:ba:e6:e5:cf:e3:8a:28:f1:74:3f:68:69:
82:01:dc:7b:64:b4:d9:f7:e5:c4:d0:3f:1e:50:ab:
23:45:61:fb:c5:13:5f:b6:82:f2:1d:a1:3a:72:ff:
2e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:61:C0:FC:D1:0A:5F:8C:47:93:D8:43:E3:41:87:38:C1:9E:CE:AF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QGHA_NEKX4xHk9hD40GHOMGezq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:59:c8:4b:de:b7:be:2b:27:15:97:aa:7e:db:63:28:3f:a7:
9d:69:a1:62:cd:e7:f8:51:b1:cf:27:8e:e8:08:51:fe:d4:1a:
e7:ee:c0:92:e6:e8:90:30:cd:44:eb:55:d2:bf:9a:5d:04:f0:
b5:be:7d:8c:4a:6a:f0:22:81:b0:5c:36:d6:b3:6a:a0:69:18:
c3:a9:ef:a7:05:33:3e:90:cb:e9:2d:b4:ce:d8:33:ad:80:d5:
08:39:aa:1d:45:6f:94:24:b8:21:6b:ab:67:e2:15:f5:c4:ef:
91:cf:da:79:2c:16:a9:93:59:b2:45:36:9d:21:d0:19:e2:fb:
10:0b:7a:dd:85:b7:73:c5:d6:c8:fc:24:b7:cb:60:89:ad:d6:
d5:67:22:d3:ac:78:38:39:4a:55:87:b2:de:5e:46:85:9e:13:
32:da:08:63:d7:71:7b:91:39:42:f3:c5:08:9e:51:49:f8:24:
23:a3:c4:94:13:ee:82:85:44:bf:e6:8e:91:f5:c7:be:fe:91:
75:72:09:82:4c:51:a5:79:4d:59:b4:63:b3:69:8b:14:1b:50:
00:c7:ca:d4:af:d3:12:99:3f:3e:90:32:9c:ce:63:c6:e3:4c:
7e:49:10:44:e8:84:4c:81:39:90:ff:e0:ba:5c:6a:c6:df:a2:
16:24:5c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:32:17 2025 by rpki-client