Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4QQnm6OUYXA-VVn0boWdOR8GpA4.roa
File: 4QQnm6OUYXA-VVn0boWdOR8GpA4.roa (raw, json)
Hash identifier: vLyUJkQdRfml5EJDS4sCHZmlSByUJAUn2V5fU7MNQV4=
Subject key identifier: E1:04:27:9B:A3:94:61:70:3E:55:59:F4:6E:85:9D:39:1F:06:A4:0E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B13A243F3BA6C1CE47FA3928A4A341C2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4QQnm6OUYXA-VVn0boWdOR8GpA4.roa
Signing time: Mon 12 Jun 2023 20:09:17 +0000
ROA not before: Mon 12 Jun 2023 20:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b1:3a:24:3f:3b:a6:c1:ce:47:fa:39:28:a4:a3:41:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 12 20:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e104279ba39461703e5559f46e859d391f06a40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f1:d5:a2:42:94:87:15:6c:28:a4:45:57:0d:
28:56:d5:84:27:89:3b:a6:b4:19:57:16:14:3c:8a:
de:a0:3d:66:4b:1c:13:ca:3c:e0:2f:f8:91:e1:6c:
f3:ca:ba:58:ff:12:51:4b:0e:9a:d7:2d:b9:3c:45:
8e:fc:ff:00:f6:40:44:ae:2d:a3:ca:6a:22:8c:2e:
f2:69:91:5c:e1:0d:33:58:a6:80:22:bd:60:42:1e:
37:5d:64:a5:f6:21:fa:e5:db:98:7e:42:8d:76:f5:
74:62:62:49:d0:fa:b1:3a:24:b7:7a:bb:3c:db:8d:
ed:56:3a:ed:3e:87:ff:6b:92:4f:b2:d0:00:6a:0a:
a7:4d:e3:10:06:3f:a3:df:31:6b:07:29:40:bc:c8:
72:5a:1b:89:55:df:b6:be:60:a3:fb:2b:6f:b4:0f:
45:93:ca:bb:3f:3d:42:45:0a:65:19:5d:eb:ad:27:
62:d1:f6:1b:21:e6:82:0e:be:29:83:09:ba:b6:3d:
5f:e3:a5:1a:32:06:da:49:04:14:21:d0:eb:d2:be:
ef:e7:e8:16:9c:8d:d1:c2:f5:39:27:cc:d2:32:06:
be:31:ce:8b:f5:4e:30:25:24:1e:70:d1:ab:39:a4:
89:ec:16:75:6b:18:7a:d6:6c:6e:ca:94:d2:49:7c:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:04:27:9B:A3:94:61:70:3E:55:59:F4:6E:85:9D:39:1F:06:A4:0E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4QQnm6OUYXA-VVn0boWdOR8GpA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:3d:21:28:ad:e3:c7:9d:bd:8d:8b:92:84:1f:40:54:bf:1b:
88:b5:60:02:45:07:18:48:58:a7:a4:6d:de:43:da:07:89:ce:
7a:84:4a:53:3b:2e:f1:aa:f0:62:e7:d7:f1:4f:05:69:5d:ea:
60:ae:06:44:68:38:70:06:a8:aa:49:e6:bb:da:32:f4:3a:12:
83:b4:5b:12:e7:b8:ed:7b:61:86:47:88:e1:b5:04:20:c8:ca:
4d:61:05:56:77:84:9a:34:aa:5b:b4:54:28:dd:bd:b2:8c:07:
75:2b:5d:e0:00:22:9a:23:90:5b:85:31:3c:c9:9c:a8:79:d8:
b8:14:8c:97:d1:53:68:57:de:6f:98:c9:1f:56:db:c0:7b:bf:
9d:19:8a:a9:2d:96:eb:d3:b7:b1:4e:b8:88:ef:e1:b0:cf:19:
1f:32:20:37:79:40:ee:92:08:5f:67:11:24:d3:ce:94:cf:49:
34:66:2b:75:a6:26:9d:f8:1a:9b:b2:46:b9:ed:6c:ae:10:0a:
4a:2a:68:5e:02:96:05:f1:87:20:90:e3:4a:f8:2f:9a:1c:5e:
e8:bf:38:fd:5c:55:3f:29:f2:78:f4:3f:b0:12:a8:2e:1a:51:
3e:5a:ce:3b:63:16:a3:bc:df:40:0a:4a:fe:63:f2:3f:c5:5c:
4d:4f:d9:96
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYixOiQ/O6bBzkf6OSiko0HCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjEyMjAwOTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTA0Mjc5YmEzOTQ2MTcwM2U1NTU5ZjQ2ZTg1OWQzOTFmMDZhNDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vHVokKUhxVsKKRFVw0oVtWEJ4k7
prQZVxYUPIreoD1mSxwTyjzgL/iR4WzzyrpY/xJRSw6a1y25PEWO/P8A9kBEri2j
ymoijC7yaZFc4Q0zWKaAIr1gQh43XWSl9iH65duYfkKNdvV0YmJJ0PqxOiS3ers8
243tVjrtPof/a5JPstAAagqnTeMQBj+j3zFrBylAvMhyWhuJVd+2vmCj+ytvtA9F
k8q7Pz1CRQplGV3rrSdi0fYbIeaCDr4pgwm6tj1f46UaMgbaSQQUIdDr0r7v5+gW
nI3RwvU5J8zSMga+Mc6L9U4wJSQecNGrOaSJ7BZ1axh61mxuypTSSXxFGQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOEEJ5ujlGFwPlVZ9G6FnTkfBqQOMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNFFRbm02T1VZWEEtVlZuMGJvV2RPUjhHcEE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH89ISit48edvY2LkoQf
QFS/G4i1YAJFBxhIWKekbd5D2geJznqESlM7LvGq8GLn1/FPBWld6mCuBkRoOHAG
qKpJ5rvaMvQ6EoO0WxLnuO17YYZHiOG1BCDIyk1hBVZ3hJo0qlu0VCjdvbKMB3Ur
XeAAIpojkFuFMTzJnKh52LgUjJfRU2hX3m+YyR9W28B7v50ZiqktluvTt7FOuIjv
4bDPGR8yIDd5QO6SCF9nESTTzpTPSTRmK3WmJp34GpuyRrntbK4QCkoqaF4ClgXx
hyCQ40r4L5ocXui/OP1cVT8p8nj0P7ASqC4aUT5azjtjFqO830AKSv5j8j/FXE1P
2ZY=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:43:55 2025 by rpki-client