Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QsTWzCI3AcVUDU9y7Ld5arPoAlo.roa
File: QsTWzCI3AcVUDU9y7Ld5arPoAlo.roa (raw, json)
Hash identifier: k9Eacg0LXSKFpJ8TLu7Pl/Tksbjzlhdy9gXXE+WNJaY=
Subject key identifier: 42:C4:D6:CC:22:37:01:C5:54:0D:4F:72:EC:B7:79:6A:B3:E8:02:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186760273B6C4CF081E48710719175DA394
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QsTWzCI3AcVUDU9y7Ld5arPoAlo.roa
Signing time: Tue 21 Feb 2023 22:05:17 +0000
ROA not before: Tue 21 Feb 2023 22:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:7601:8fbd/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:76:02:73:b6:c4:cf:08:1e:48:71:07:19:17:5d:a3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 22:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42c4d6cc223701c5540d4f72ecb7796ab3e8025a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e9:84:8f:11:8a:a6:11:ff:9a:d2:c0:df:29:
11:21:bb:5f:34:c2:6b:8a:3a:34:97:f4:c3:2d:5c:
eb:ca:a3:8c:50:29:8d:ec:3d:bd:55:47:79:43:3a:
49:06:08:f7:3a:92:6c:65:79:ec:6d:53:cb:26:71:
32:51:6a:3f:d4:0e:90:d1:27:e9:d2:8f:c8:58:c9:
77:fb:d9:e9:a6:ed:9f:fa:ee:2d:19:a1:23:02:a0:
3a:6c:a8:01:58:3d:5f:9e:d4:f6:4c:00:87:d3:0a:
fe:2e:7f:d3:98:54:0a:7b:94:7a:ef:d9:30:fa:39:
40:ff:82:38:b1:9e:e9:28:82:f2:3b:a2:1d:d7:0e:
06:e8:36:88:82:aa:ef:8e:be:e4:ae:fb:5c:e7:f9:
31:45:8b:07:8a:bd:da:72:ea:da:48:38:b0:67:eb:
7c:fe:0f:77:ca:2f:32:3d:86:cd:fb:5b:3e:d7:2b:
bd:27:02:03:e7:63:c5:0d:37:cd:70:b5:00:64:67:
b3:01:bd:7e:cc:4a:8b:89:1b:35:d9:9f:02:2d:83:
c4:f6:14:a1:a3:7e:c1:a8:45:ef:f7:f0:d6:e7:2b:
e6:e9:5a:a4:8b:b5:27:76:4a:ee:c7:1c:90:ca:a0:
5e:b0:0c:37:ff:1b:40:ff:f3:ad:3f:af:2f:a1:fa:
76:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C4:D6:CC:22:37:01:C5:54:0D:4F:72:EC:B7:79:6A:B3:E8:02:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QsTWzCI3AcVUDU9y7Ld5arPoAlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:32:ed:64:f0:a9:be:e2:33:f4:d6:73:7a:25:ed:8e:bc:e4:
0a:24:62:90:29:6f:4a:5a:01:b0:8c:5a:48:8c:fa:92:a0:32:
44:bb:58:34:cd:4d:cd:af:72:6f:c2:84:45:fb:be:3e:7a:f7:
47:38:8f:65:e9:7d:d9:87:1a:58:07:8f:59:68:b5:d5:58:d3:
fc:73:e8:b1:33:9f:8b:4b:31:5d:11:48:f9:26:b3:27:ae:96:
36:bc:fe:ee:6e:0f:2d:e1:e3:b3:1e:97:ba:7f:1f:a4:8e:52:
89:04:2a:ec:30:55:77:cf:94:f2:c2:88:c4:b2:7b:2d:f5:3e:
16:d8:b4:07:4b:0e:8e:fa:e7:dd:67:65:79:30:e6:d8:b9:d0:
5f:c0:b1:53:61:cf:79:38:f1:ca:ad:65:74:e9:e4:f3:b8:3d:
30:b1:21:90:1f:3f:cd:19:6c:1d:cf:2a:47:3b:06:27:65:41:
ac:36:6b:0f:25:1a:30:31:30:89:55:a7:e6:ca:d9:49:eb:a0:
c8:db:20:0d:b8:1b:1d:95:68:5c:04:57:49:82:ba:1c:27:79:
ac:d5:92:2d:33:b5:d2:49:34:ed:99:80:bc:40:4b:0f:a1:50:
36:c2:a7:eb:d5:84:3a:31:09:ea:eb:2e:8e:60:f6:1e:5a:3a:
37:1a:b0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:13:15 2025 by rpki-client