Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QbioVge10GaTpWA4QkHsX8rCH70.roa
File: QbioVge10GaTpWA4QkHsX8rCH70.roa (raw, json)
Hash identifier: QG7I3npLRmez7YjHz/2QCI73yJBv3VM7FTUX02tKOLE=
Subject key identifier: 41:B8:A8:56:07:B5:D0:66:93:A5:60:38:42:41:EC:5F:CA:C2:1F:BD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 778557A7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QbioVge10GaTpWA4QkHsX8rCH70.roa
Signing time: Fri 01 Apr 2022 14:10:04 +0000
ROA not before: Fri 01 Apr 2022 14:10:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2005227431 (0x778557a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 1 14:10:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41b8a85607b5d06693a560384241ec5fcac21fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:11:e4:79:bc:08:a6:52:28:7e:3c:57:bc:
64:46:a7:27:cc:78:2a:c1:57:18:7d:ca:3b:06:d1:
9b:d8:3e:71:08:47:90:dc:ad:62:cb:07:d3:33:be:
66:e3:b8:ac:49:32:e7:e4:c3:36:c0:2b:6f:61:4a:
9e:5b:a0:02:e6:c1:1a:d5:24:78:1e:35:da:00:c0:
9b:de:0f:b2:92:fb:a1:ac:ff:80:ac:23:56:f6:eb:
6f:ef:01:12:f2:27:2f:c4:bb:78:3a:fa:47:73:ef:
5a:01:95:a7:fb:22:09:fb:52:db:6f:12:59:d8:ae:
c8:e4:ee:97:5d:83:1a:96:78:f3:20:7e:51:eb:28:
03:7a:d5:1f:3b:28:95:5c:fa:f7:20:97:a9:aa:c1:
fb:8f:95:11:a5:f9:67:a2:4c:29:8e:93:e3:2f:48:
c4:fb:4b:8c:25:cb:a1:d6:a8:43:fc:45:3f:99:c3:
f4:fd:f7:2e:7e:dc:db:85:c1:c9:0f:ff:51:11:13:
97:52:5f:42:39:1c:7e:72:df:b5:8e:f7:13:eb:de:
5b:16:fa:08:6e:76:c5:03:b8:82:1f:c9:6e:4d:9c:
f6:25:e4:a1:f2:d3:05:7c:d8:6a:25:4f:2b:f0:1c:
6c:03:c7:a3:53:23:24:cb:af:dc:1b:eb:b5:87:f5:
8e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B8:A8:56:07:B5:D0:66:93:A5:60:38:42:41:EC:5F:CA:C2:1F:BD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QbioVge10GaTpWA4QkHsX8rCH70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:b4:06:a4:08:2f:25:89:3f:da:12:df:d4:38:f3:7b:89:5c:
1d:84:8e:e8:fb:88:6d:aa:73:7c:ea:35:8c:12:df:a9:37:87:
22:20:e1:7e:28:e7:2d:ed:32:ec:ba:de:63:0b:ad:45:34:62:
39:7e:0f:a8:19:06:9b:0b:8c:7d:30:a8:70:0a:2f:74:38:7f:
3e:18:d9:6a:d1:3f:1e:af:4f:b4:b9:4e:ac:11:ed:db:b3:a0:
88:ca:bf:0a:f5:cf:ec:10:d6:0f:ba:bb:71:a4:98:c5:11:4f:
e5:77:22:2d:70:5d:25:a6:42:49:7f:76:4b:44:8e:ea:a1:c7:
c4:c5:22:0b:37:8f:f7:5c:7a:44:23:04:a4:e2:04:d3:ac:ea:
3f:81:ab:19:1a:d5:c5:e9:ce:de:24:26:70:e0:1f:3b:ce:a2:
1e:18:3e:46:a2:7f:0c:47:4f:c2:f1:ea:e1:36:93:9c:95:bb:
30:49:9c:22:fa:8e:26:15:7a:9c:54:63:17:b3:3d:12:cc:28:
f6:ed:19:67:90:33:a9:d6:1a:74:a7:3b:5f:58:be:9c:ba:33:
b5:fd:09:3a:2c:33:57:bd:5e:c1:94:b0:ac:a3:54:57:c4:99:
5b:8f:89:dd:61:70:43:9b:10:6a:c7:2a:ce:38:61:c3:8c:f1:
ad:3b:8b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:09:09 2025 by rpki-client