Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QK8KY0C5LDoaeBhTQKO7KHtRlmo.roa
File: QK8KY0C5LDoaeBhTQKO7KHtRlmo.roa (raw, json)
Hash identifier: S4K7AUoQ+XtUwuW9kEU4gZe/J6aNIb4PKCfI4kkaD+g=
Subject key identifier: 40:AF:0A:63:40:B9:2C:3A:1A:78:18:53:40:A3:BB:28:7B:51:96:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855CEEF4C93766C8A453BECE218A88D042
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QK8KY0C5LDoaeBhTQKO7KHtRlmo.roa
Signing time: Thu 29 Dec 2022 08:10:41 +0000
ROA not before: Thu 29 Dec 2022 08:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5c:ee:f4:c9:37:66:c8:a4:53:be:ce:21:8a:88:d0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 08:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40af0a6340b92c3a1a78185340a3bb287b51966a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:44:df:6a:95:63:44:03:76:6d:7b:ef:4b:
50:55:b1:ca:12:50:c5:3a:f1:3f:28:94:6c:41:d7:
91:26:85:77:d0:05:e0:61:c0:a6:d1:ef:0e:21:f6:
00:3c:60:5a:fe:83:ba:b8:a7:5a:c5:ec:58:e0:5f:
c6:43:80:1d:c7:56:2b:81:01:e5:04:c2:e4:ff:a5:
f9:33:4e:3d:fe:9f:b0:43:a4:5c:61:0b:32:44:48:
ac:b4:ea:4f:a2:a5:32:70:34:66:b1:a0:f5:ff:69:
a9:a3:48:fd:66:d3:2a:49:da:d1:59:0c:28:e7:b3:
24:7b:97:99:96:c9:d7:4b:63:f7:3c:4d:d7:a4:7a:
99:83:b4:48:d8:bc:9f:c7:5c:1a:3a:5c:bf:a4:3b:
39:e7:85:ad:cb:5f:b5:00:97:e1:d4:e2:21:4b:92:
70:d1:4f:27:4e:84:b6:f9:0d:b0:5c:dc:24:2b:21:
d3:e6:8d:16:04:77:1b:27:f5:63:bd:d2:93:ff:a7:
b0:40:34:45:3b:a0:8e:2b:9d:09:84:78:d1:3f:dc:
de:ea:77:eb:37:7e:2e:eb:31:39:27:28:3f:25:0e:
22:56:d7:be:05:d1:32:b0:8e:8d:ff:6f:ae:e3:65:
3b:bb:a4:ae:d3:be:13:ec:21:91:0c:43:5e:d8:e9:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AF:0A:63:40:B9:2C:3A:1A:78:18:53:40:A3:BB:28:7B:51:96:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QK8KY0C5LDoaeBhTQKO7KHtRlmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:20:16:ab:d4:5a:40:f0:8f:e9:b3:01:09:8e:fc:b8:9b:56:
d2:56:c2:90:a2:03:80:a7:bf:44:cd:69:c0:0d:3c:fc:f0:1b:
43:e0:59:14:5a:aa:65:08:a7:d4:9c:02:ba:39:11:a3:62:7e:
cb:5b:e4:e3:61:55:fa:7f:6b:cc:74:0f:58:f1:c6:f1:fd:38:
7e:a9:ca:a5:00:18:b7:a7:af:9e:7c:79:7a:29:bf:34:9a:56:
52:bf:c1:97:8a:05:6f:9d:8f:69:16:65:39:4e:e5:82:f7:86:
e7:67:b4:4c:b5:8a:10:02:82:8c:de:ae:ec:c3:7f:9f:4e:f0:
9e:fa:fd:af:2f:bf:89:60:00:ce:ee:d2:12:94:60:01:37:13:
49:44:33:a6:0a:7e:90:84:5b:aa:f3:43:19:36:dd:60:da:6e:
45:9e:99:7c:c9:5c:51:7f:12:08:e0:55:f5:9a:2c:2b:4b:0f:
2b:10:0d:b9:f9:92:40:a6:2c:c2:f2:72:f4:72:8c:4c:37:6c:
86:1e:98:4d:d9:74:b6:02:21:a8:61:12:c6:8a:32:eb:85:a0:
a6:72:27:67:11:b6:26:18:6e:53:94:a9:a9:fc:b8:a0:70:3e:
7c:fc:4e:17:c1:a4:e0:98:57:71:21:00:dd:cb:fe:59:f5:11:
a9:15:43:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:28:14 2025 by rpki-client