Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3Qgl4F2sepKPiobIlJSIfwTw7FQ.roa
File: 3Qgl4F2sepKPiobIlJSIfwTw7FQ.roa (raw, json)
Hash identifier: y/XR4p4XAytW5L3Mecw7TNGhI2FUzrYbyEvzaU9sJJw=
Subject key identifier: DD:08:25:E0:5D:AC:7A:92:8F:8A:86:C8:94:94:88:7F:04:F0:EC:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018687D1BEDBDFE300934CD7EDBE14754D01
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3Qgl4F2sepKPiobIlJSIfwTw7FQ.roa
Signing time: Sat 25 Feb 2023 09:05:15 +0000
ROA not before: Sat 25 Feb 2023 09:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:87d0:db09/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:87:d1:be:db:df:e3:00:93:4c:d7:ed:be:14:75:4d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 09:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd0825e05dac7a928f8a86c89494887f04f0ec54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:4b:f7:b5:a3:d6:cb:ad:d4:d6:f0:40:f5:
96:01:4e:0e:dc:ee:b1:d0:6d:3f:46:94:df:e5:b9:
13:6d:e5:8c:15:de:b3:f0:ec:6a:b5:f4:f2:59:3e:
9f:0e:5d:47:12:9e:06:10:86:e4:e8:df:cc:b0:5d:
9e:cb:90:76:e5:7e:ab:ac:30:69:e8:94:c1:ed:92:
bb:ee:45:c8:34:bd:4b:4b:80:9b:b7:f0:2a:39:48:
41:e5:e3:a7:5d:b3:26:ac:5c:dc:d8:bd:22:8a:f9:
73:98:1a:84:6e:17:eb:a7:52:b8:80:ee:2d:f6:ed:
4f:ae:2e:ce:38:af:52:14:52:4d:c2:ed:5b:ec:67:
08:39:79:42:db:5b:c9:1f:de:6f:9f:1b:55:f0:ea:
64:1b:70:30:5a:60:e6:eb:26:39:ae:4c:dd:58:31:
79:0b:e6:a8:af:3a:17:f6:ea:58:7f:5e:c3:22:72:
dc:b6:b1:36:ca:49:63:61:c8:d0:e5:bf:ac:e6:02:
ce:09:30:5c:c1:48:27:58:85:bc:aa:31:78:9e:cf:
fa:d5:a3:46:3e:82:e9:43:7b:66:41:97:76:ed:4f:
da:8d:6e:1a:20:5e:59:f7:66:25:4f:2a:66:6a:7e:
92:60:64:b8:9c:07:86:25:7f:17:c0:39:43:80:a9:
2e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:08:25:E0:5D:AC:7A:92:8F:8A:86:C8:94:94:88:7F:04:F0:EC:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3Qgl4F2sepKPiobIlJSIfwTw7FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:e8:ff:69:20:15:d9:17:89:b9:85:59:b5:06:64:cc:ea:f5:
b6:88:61:ae:72:0b:a7:6d:7c:b3:59:ea:1b:68:d7:e4:a3:75:
a5:8c:90:ff:68:d5:14:ca:83:b4:80:ed:3f:b8:d0:9a:98:64:
d6:cb:5c:8a:87:10:a8:20:7b:84:b5:b3:39:8b:da:65:3d:96:
ce:3d:b8:84:7d:f0:49:54:29:2a:7e:54:4f:26:ce:29:c7:8e:
41:95:67:ad:d4:a9:1a:d0:08:0a:60:43:d4:a1:4b:19:1c:6c:
a4:79:57:30:fd:b1:61:8e:ba:75:5c:f6:53:67:93:8d:9e:55:
5e:bc:5b:f8:cd:24:1c:be:8c:7e:b3:a2:8c:65:d8:41:31:00:
bf:f0:b4:28:da:ef:11:9f:f9:35:af:99:98:4d:50:dc:d6:45:
3d:ca:49:f4:bc:b7:52:53:b8:b5:fd:12:e4:d9:c8:fc:78:6c:
cd:9e:35:aa:f0:98:ed:d9:14:61:05:35:05:42:fc:b3:ab:7f:
ed:b1:d1:5d:fb:8d:50:9c:eb:9f:00:3f:63:31:93:fc:a5:6e:
9e:90:e1:67:6d:a4:64:7d:56:37:9c:27:ea:0d:0b:c4:0c:e8:
3d:99:05:69:ff:a8:a7:8c:1c:c9:16:95:79:49:a5:38:ea:92:
55:79:d1:42
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaH0b7b3+MAk0zX7b4UdU0BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI1MDkwNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDA4MjVlMDVkYWM3YTkyOGY4YTg2Yzg5NDk0ODg3ZjA0ZjBlYzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLVL97Wj1sut1NbwQPWWAU4O3O6x
0G0/RpTf5bkTbeWMFd6z8OxqtfTyWT6fDl1HEp4GEIbk6N/MsF2ey5B25X6rrDBp
6JTB7ZK77kXINL1LS4Cbt/AqOUhB5eOnXbMmrFzc2L0iivlzmBqEbhfrp1K4gO4t
9u1Pri7OOK9SFFJNwu1b7GcIOXlC21vJH95vnxtV8OpkG3AwWmDm6yY5rkzdWDF5
C+aorzoX9upYf17DInLctrE2ykljYcjQ5b+s5gLOCTBcwUgnWIW8qjF4ns/61aNG
PoLpQ3tmQZd27U/ajW4aIF5Z92YlTypman6SYGS4nAeGJX8XwDlDgKkuSwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN0IJeBdrHqSj4qGyJSUiH8E8OxUMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvM1FnbDRGMnNlcEtQaW9iSWxKU0lmd1R3N0ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFbo/2kgFdkXibmFWbUG
ZMzq9baIYa5yC6dtfLNZ6hto1+SjdaWMkP9o1RTKg7SA7T+40JqYZNbLXIqHEKgg
e4S1szmL2mU9ls49uIR98ElUKSp+VE8mzinHjkGVZ63UqRrQCApgQ9ShSxkcbKR5
VzD9sWGOunVc9lNnk42eVV68W/jNJBy+jH6zooxl2EExAL/wtCja7xGf+TWvmZhN
UNzWRT3KSfS8t1JTuLX9EuTZyPx4bM2eNarwmO3ZFGEFNQVC/LOrf+2x0V37jVCc
658AP2Mxk/ylbp6Q4WdtpGR9VjecJ+oNC8QM6D2ZBWn/qKeMHMkWlXlJpTjqklV5
0UI=
-----END CERTIFICATE-----
Generated at Thu May 1 00:09:44 2025 by rpki-client