Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qXcZd-fJjWYqFAbQCbzbxwY3b3Q.roa
File: qXcZd-fJjWYqFAbQCbzbxwY3b3Q.roa (raw, json)
Hash identifier: CMWdKSf3dqRavjqMKCPVka+9cjU5oDhrTcN2EkLGG8U=
Subject key identifier: A9:77:19:77:E7:C9:8D:66:2A:14:06:D0:09:BC:DB:C7:06:37:6F:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B5BBA7B7BA901CD643026413BD0550F3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qXcZd-fJjWYqFAbQCbzbxwY3b3Q.roa
Signing time: Tue 13 Jun 2023 17:09:14 +0000
ROA not before: Tue 13 Jun 2023 17:09:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b5:bb:a7:b7:ba:90:1c:d6:43:02:64:13:bd:05:50:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 17:09:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9771977e7c98d662a1406d009bcdbc706376f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b1:b5:67:98:b3:ea:9b:df:81:99:cc:29:30:
26:ed:98:aa:5d:2d:54:1f:bc:3b:8e:db:22:4b:0f:
8a:a7:5c:cd:8b:59:eb:54:d8:9b:80:be:e7:dd:af:
07:70:6a:7d:33:51:23:5b:e1:e9:ed:f3:41:ef:7a:
5d:15:4a:0f:b0:ea:a3:f3:68:be:3e:0a:e1:bf:5c:
64:c6:aa:42:37:89:05:b0:48:ff:28:ab:c8:80:a1:
bf:9f:35:db:85:79:47:b1:b9:4c:e5:18:8e:5f:dc:
0d:91:7f:96:90:cf:91:18:6d:f7:22:7f:5e:de:b9:
d3:76:d5:19:18:c1:1e:95:9f:d9:7a:c6:5a:0d:2e:
98:86:4b:2b:8e:77:eb:19:a2:1e:3c:72:91:e0:e5:
1f:f3:9c:72:2c:ff:ab:8c:e1:06:96:ea:85:cc:15:
ee:f7:41:5d:e3:1b:d9:ce:75:d4:ab:4b:02:fb:d1:
3e:40:0c:2a:25:ea:4c:43:1f:a8:f8:e6:a7:6b:75:
cd:9a:ef:14:b8:4a:cf:62:da:52:d4:3d:5e:37:f7:
e5:ff:c8:08:af:ea:91:9d:61:ad:17:44:09:8b:33:
1e:12:52:cc:68:69:34:94:15:f5:5f:5b:a8:14:20:
a5:71:12:6c:6e:df:df:e1:4f:95:65:33:cf:62:f4:
e5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:77:19:77:E7:C9:8D:66:2A:14:06:D0:09:BC:DB:C7:06:37:6F:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qXcZd-fJjWYqFAbQCbzbxwY3b3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:f5:00:dd:bd:4e:4b:48:39:82:d3:ed:a9:8a:0a:a4:7a:8d:
de:eb:18:53:e7:ce:fb:79:63:eb:ce:b0:80:d0:d8:48:7d:1a:
51:a7:d8:4e:41:a7:69:f5:c0:27:ab:4b:35:3c:77:9c:b1:a5:
5d:f0:cd:93:88:8b:09:2b:d4:45:33:9e:1c:48:a2:32:28:24:
78:9b:88:5b:df:dd:79:1c:e1:b3:21:be:3d:0d:94:14:07:38:
e1:24:31:cd:ab:9c:6d:01:fa:ef:73:54:a0:34:db:7b:76:3d:
f5:7d:cd:72:81:6e:d2:fa:7e:04:c7:76:d4:dc:89:33:24:f6:
63:83:bf:66:a7:aa:df:41:4c:68:13:6a:49:87:92:c6:4f:e1:
c5:1d:87:15:2a:3c:7f:fc:d8:92:2b:ab:04:fb:71:70:37:d0:
4c:be:bc:de:5d:35:26:6e:80:c5:10:a9:ef:ac:9e:74:ce:f8:
3b:62:86:2c:10:d0:56:47:3e:a2:81:96:8e:a4:58:46:65:13:
58:ab:d8:48:f5:d7:8a:be:c1:21:f8:0c:27:60:e6:2b:8c:7a:
cd:05:c9:19:02:89:a2:e4:00:02:83:c2:c4:20:f1:da:cb:a5:
5f:60:4f:3b:3d:7a:5c:e4:55:79:42:42:bf:00:2b:99:b8:f7:
c2:cf:25:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:43:51 2025 by rpki-client