Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QNNggfRnz86-KDB5XZvJy81xu0g.roa
File: QNNggfRnz86-KDB5XZvJy81xu0g.roa (raw, json)
Hash identifier: FqP6+V5IChmbJiwwTOS5FgdDqXSEAmAaiUjObsKfgI4=
Subject key identifier: 40:D3:60:81:F4:67:CF:CE:BE:28:30:79:5D:9B:C9:CB:CD:71:BB:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185ED57D2C7D84F5FC20133B1C827A4C886
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QNNggfRnz86-KDB5XZvJy81xu0g.roa
Signing time: Thu 26 Jan 2023 09:10:33 +0000
ROA not before: Thu 26 Jan 2023 09:10:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:57:d2:c7:d8:4f:5f:c2:01:33:b1:c8:27:a4:c8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 26 09:10:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40d36081f467cfcebe2830795d9bc9cbcd71bb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e2:86:b5:2d:9b:80:18:26:9b:2d:87:e7:a0:
18:65:d0:1d:eb:9d:7e:15:f8:0e:4c:63:6c:66:82:
2e:1b:98:54:1b:f4:12:49:d4:cf:45:5c:82:47:49:
62:5a:42:a5:c7:67:54:83:51:95:ae:38:39:9c:a2:
c7:ab:c8:e7:de:3a:43:9e:4b:e4:57:dc:0f:c7:8a:
84:46:0d:eb:da:b0:0c:4c:4b:61:ce:2c:49:87:48:
a2:dc:a0:c6:87:6b:c7:75:a1:ed:e3:50:f8:8d:e8:
ef:b1:89:79:eb:22:e9:3d:7d:e2:40:18:0c:c2:95:
82:ff:76:12:84:21:89:c7:99:79:10:a3:a1:fe:26:
cd:9a:1b:09:8a:51:2f:d1:07:14:85:79:c5:9a:df:
ae:25:55:e8:2e:38:e5:fc:23:a7:f6:58:ea:90:b5:
e0:90:c9:01:04:f9:84:47:6b:ec:10:c7:03:89:f1:
14:3f:34:26:b8:e7:6a:46:4b:74:5c:86:fa:75:29:
41:39:a2:cb:39:af:f5:a5:64:5f:d0:29:d1:21:74:
27:86:c8:46:a6:bf:16:e1:23:a0:0d:9b:ad:e4:b9:
f8:e7:8f:c9:f8:bb:0d:3f:51:a1:24:39:0b:27:27:
f2:a5:ed:33:78:25:df:72:fe:1f:d1:00:3d:d0:ca:
4d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D3:60:81:F4:67:CF:CE:BE:28:30:79:5D:9B:C9:CB:CD:71:BB:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QNNggfRnz86-KDB5XZvJy81xu0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:36:80:93:dc:d8:37:8b:7d:ff:fb:20:13:6e:60:70:e5:3e:
20:44:6f:e0:07:08:31:1b:b2:f1:7e:a9:9d:15:3b:0d:bd:91:
65:86:7a:3a:8f:91:59:cf:a9:da:9d:f0:25:71:e3:05:1b:06:
a2:43:62:84:a8:d5:e3:8a:b3:38:4c:d3:04:02:da:6d:31:ff:
03:1f:f6:00:1d:05:2f:a7:a4:2e:64:85:04:1b:a7:83:1d:89:
84:a1:c8:aa:bf:51:12:ee:ae:c5:56:09:d8:b4:31:64:99:cc:
b3:ee:10:10:c9:3d:35:7f:c8:de:c5:dc:d3:5e:a9:7f:6f:07:
b7:72:cf:7b:1c:8f:54:87:b3:00:5a:24:d4:50:4f:27:10:fb:
b1:58:fb:8b:17:f9:cf:d7:6b:9b:69:79:54:e5:00:89:08:80:
68:49:b5:7c:21:05:dd:61:14:30:dc:06:f9:ec:5b:a0:5b:25:
a3:06:71:5f:2c:0d:85:e7:7d:ff:4e:cc:be:fb:10:d8:93:43:
35:54:29:d8:b8:9e:46:3e:66:dc:7d:c2:18:70:10:f5:5a:3b:
f6:bf:13:ba:de:8d:25:46:30:04:27:21:de:e4:88:52:79:2d:
1d:1a:fb:e2:7c:ae:41:37:79:a7:40:19:eb:76:c9:1e:56:80:
b7:7a:b3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:08:03 2025 by rpki-client