Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qpCd-HeucaXdbeRB9GqI4JsZWaA.roa
File: qpCd-HeucaXdbeRB9GqI4JsZWaA.roa (raw, json)
Hash identifier: 6xEG6vZGfJtT0YOVD4QGE/sCiyZ4vu2eiI6hMFJ78U4=
Subject key identifier: AA:90:9D:F8:77:AE:71:A5:DD:6D:E4:41:F4:6A:88:E0:9B:19:59:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186CCBB024B9D23C4E18980D9F44FAB2F5A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qpCd-HeucaXdbeRB9GqI4JsZWaA.roa
Signing time: Fri 10 Mar 2023 18:14:13 +0000
ROA not before: Fri 10 Mar 2023 18:14:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:bb:02:4b:9d:23:c4:e1:89:80:d9:f4:4f:ab:2f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 18:14:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa909df877ae71a5dd6de441f46a88e09b1959a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e5:fe:55:d0:f7:1a:25:c1:dc:70:6d:a0:b6:
16:79:3a:93:5e:b8:81:86:37:e7:e8:28:47:84:dd:
8b:15:59:1c:11:a4:2a:ed:41:da:2c:ab:98:84:4d:
9a:c2:90:6b:1d:46:99:f6:eb:ab:e2:87:30:27:82:
3d:ec:c1:f6:9a:2e:6f:45:97:a0:89:65:6b:ca:c9:
31:ad:9e:24:ce:bd:42:c3:9e:74:b2:5a:12:d2:ff:
f9:80:20:08:c3:75:e2:f0:85:c1:fe:e4:04:c3:56:
e7:6e:a0:19:de:50:4b:c7:48:27:cc:c6:10:3e:5a:
6c:6e:65:67:bf:62:48:27:d8:a3:a0:73:96:8a:64:
56:80:65:95:d7:75:4c:ef:3d:8b:d9:5c:8c:c5:c8:
6f:62:4b:60:e5:26:1c:6a:11:d4:ba:26:17:9d:4a:
3b:55:d8:3c:56:95:29:dc:6d:83:77:c3:f8:0a:08:
e4:27:8f:6a:a4:48:8f:f8:46:b4:9f:06:a2:24:9b:
1d:48:cf:91:72:48:81:90:30:4f:1a:03:a2:6d:d9:
d9:25:52:91:6b:98:2b:35:d0:e7:b7:3d:76:cb:0a:
c2:d3:74:58:4a:11:a6:76:7f:0a:5b:6e:fa:b7:36:
c7:27:f5:81:27:ec:53:a1:06:d3:55:79:b2:54:f2:
cf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:90:9D:F8:77:AE:71:A5:DD:6D:E4:41:F4:6A:88:E0:9B:19:59:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qpCd-HeucaXdbeRB9GqI4JsZWaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:3b:f0:0d:a1:07:48:1f:7a:74:7c:fb:2c:0c:21:39:83:da:
30:c6:56:95:cb:00:0c:d1:2f:39:cc:85:12:76:16:c4:74:9f:
9d:81:58:1a:ae:77:53:55:ef:2a:be:d1:e0:19:55:c8:e2:b9:
44:01:c1:16:9b:f3:4a:c1:dc:43:62:97:2b:fe:88:8e:e1:b9:
60:a7:3b:93:dc:5f:56:cb:60:91:d7:eb:2d:89:9c:6a:fb:cf:
8d:58:db:b2:0c:94:56:ba:e4:d2:7d:e6:a1:92:46:ad:ee:1e:
8f:3a:de:fc:bb:f9:52:4a:70:dd:43:17:ee:f6:c0:0a:96:bb:
be:54:ac:40:59:d0:33:aa:18:5c:06:12:a0:d6:dc:9a:ab:fa:
b9:93:2d:f7:2c:c5:dd:0a:58:78:33:6f:e9:37:f1:17:fe:15:
1c:9f:f4:07:82:6a:a8:24:02:43:d3:7c:a0:79:49:71:51:f7:
03:2c:77:7e:2b:fa:32:1c:38:f0:6a:96:c0:d0:49:fc:ea:3d:
79:b1:69:73:d8:dd:78:85:97:d9:fc:75:b6:85:a6:5f:a0:c8:
1a:26:a6:bc:71:70:4f:5f:e0:de:34:8b:eb:a5:e9:79:e7:25:
52:f5:36:da:81:92:2d:05:4b:8a:25:2c:81:97:f4:3b:f6:e7:
4d:9d:b7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:25:27 2025 by rpki-client