Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qf5YW5L6b4P1cGH6SoQkjx3is6s.roa
File: Qf5YW5L6b4P1cGH6SoQkjx3is6s.roa (raw, json)
Hash identifier: g/sZwPxEpLHCTOQHEL4MiTdSdsS8XdOcLMM4GGS1Jak=
Subject key identifier: 41:FE:58:5B:92:FA:6F:83:F5:70:61:FA:4A:84:24:8F:1D:E2:B3:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01877824A9DD3704963CC0394F8D70C2CCA5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qf5YW5L6b4P1cGH6SoQkjx3is6s.roa
Signing time: Thu 13 Apr 2023 01:04:41 +0000
ROA not before: Thu 13 Apr 2023 01:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:187:7824:5ea8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:78:24:a9:dd:37:04:96:3c:c0:39:4f:8d:70:c2:cc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 01:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41fe585b92fa6f83f57061fa4a84248f1de2b3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7b:30:d7:93:55:9f:b5:db:a0:9e:53:3a:92:
f8:51:91:d6:46:c7:c0:85:e5:7e:48:c2:1b:47:0a:
b5:a7:c7:cb:a1:71:c0:f3:d3:52:ae:d9:06:6e:b1:
bc:99:72:15:c0:e2:dd:8c:1c:a0:e3:da:86:ce:0d:
33:c1:cb:a2:d3:7f:69:64:ba:37:36:6e:cd:4d:21:
84:e3:60:cd:48:ba:30:d9:e1:8e:7d:d5:75:3d:a9:
2d:53:8f:8c:34:45:14:76:a5:17:1d:59:f9:ee:10:
08:07:57:eb:3c:69:01:5b:67:3a:f8:25:d4:bb:38:
36:9b:1f:ad:30:aa:5d:38:c8:f1:e8:0d:81:cb:f2:
5c:2f:3e:fb:2b:44:5a:de:18:90:08:ac:ba:72:71:
c7:1b:20:f1:7a:2d:7d:57:98:d1:67:21:eb:04:9b:
69:b1:2a:01:41:62:65:50:50:74:98:fd:a7:75:31:
76:98:bb:36:a1:ee:b9:1f:57:0e:ce:ed:d6:fe:6d:
c2:a8:4a:50:7e:22:f1:dc:20:8a:37:63:9a:29:3d:
6c:a4:04:0b:5a:8e:2e:66:90:5c:b2:e9:60:c0:e0:
8d:ba:b8:91:3e:6f:12:94:87:55:ab:db:a9:4e:0f:
23:68:41:84:41:8e:3e:e3:c4:f8:1b:22:7d:d7:3b:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FE:58:5B:92:FA:6F:83:F5:70:61:FA:4A:84:24:8F:1D:E2:B3:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qf5YW5L6b4P1cGH6SoQkjx3is6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:dc:1d:58:5a:66:1b:fb:94:59:ec:02:cf:5b:f4:8c:0d:f4:
47:21:c7:5d:07:4e:29:58:ad:be:fc:79:58:fb:cc:47:95:53:
7e:a9:48:e3:ca:0f:55:65:02:f7:88:1d:2f:b8:d1:36:a5:75:
bc:c7:3f:ac:7c:13:95:bc:83:54:b8:74:f4:45:f3:48:4b:99:
0d:aa:60:ce:f7:3c:d4:61:33:3c:88:08:01:81:48:ba:2d:02:
8c:0b:9e:c5:43:f1:36:ef:2e:f1:09:cb:12:1a:3e:d3:87:f9:
35:5e:fc:66:ff:1e:07:20:a5:90:e9:48:16:b2:70:8a:2d:f3:
2a:cf:bb:cd:5f:8d:d6:ef:e9:11:0c:29:f0:11:bf:51:f2:3c:
05:3f:6f:ec:9b:ad:82:8f:95:c8:6a:f1:fe:b2:c4:9e:38:6e:
86:a0:53:81:97:39:7b:7b:e2:48:1a:46:21:46:b8:a8:45:c0:
73:e2:77:16:0a:3a:67:68:19:b4:c1:79:62:f2:22:4c:5c:04:
55:41:ae:99:fe:26:15:28:a6:b8:4b:7e:10:21:a8:ec:53:ab:
db:1a:4c:55:71:95:8e:37:6c:d4:e2:29:5f:3d:a6:fb:9f:e6:
3a:f9:3e:d6:24:c0:34:cc:c0:60:96:b6:3c:cc:d8:74:ef:b6:
3e:0b:c1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:15:25 2025 by rpki-client