Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CQEkJsynC91be1UwrPbf4JXefMA.roa
File: CQEkJsynC91be1UwrPbf4JXefMA.roa (raw, json)
Hash identifier: SaJm9jROeiKgUjDZCrN00RLR31IEI3HtWdlMZC0oxf4=
Subject key identifier: 09:01:24:26:CC:A7:0B:DD:5B:7B:55:30:AC:F6:DF:E0:95:DE:7C:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A12D5067CE568BF08FF88E4A2E643C5BC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CQEkJsynC91be1UwrPbf4JXefMA.roa
Signing time: Sun 20 Aug 2023 12:04:25 +0000
ROA not before: Sun 20 Aug 2023 12:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:18a:12d4:f40b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:12:d5:06:7c:e5:68:bf:08:ff:88:e4:a2:e6:43:c5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 12:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09012426cca70bdd5b7b5530acf6dfe095de7cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:14:e2:3c:44:6e:ba:d9:b3:af:e6:a8:0e:e7:
b2:9d:2b:8e:59:e0:ce:61:82:3b:86:4c:fb:bc:68:
f9:19:34:b0:0a:72:0f:dd:f1:57:60:bd:75:6a:3f:
6e:22:7d:95:cf:b0:57:5d:bd:a4:24:87:0e:11:da:
29:4e:5c:76:35:2b:10:4d:9c:c2:e3:46:6d:6d:85:
28:8a:0d:ea:14:ac:e9:1a:85:3e:8f:f9:37:e7:2c:
bc:48:0b:8e:7d:1e:cd:78:89:0f:5e:80:15:96:8d:
73:b1:60:65:5c:d2:46:b2:fd:7c:60:60:2a:2a:64:
25:bf:48:10:3d:95:4c:9f:33:da:98:32:35:57:b5:
da:27:21:0b:07:44:8f:62:2e:09:5b:28:06:99:fc:
f0:86:e3:ef:03:ff:6c:7a:0e:e7:03:73:85:9e:4b:
2c:b4:84:e8:c8:c7:e8:4f:a3:10:73:09:5f:ef:1a:
b0:79:5a:4d:ab:86:cf:79:8d:68:32:5b:9c:f8:33:
95:52:23:d8:80:b8:41:1b:fe:5c:d9:a5:82:75:bb:
4a:b7:6f:64:fd:6e:ce:bb:1e:21:a8:5d:a5:50:db:
92:51:d7:34:9f:ac:7c:3f:d7:ff:1e:3d:ca:c9:1d:
90:6d:f4:11:44:85:45:ba:7f:3b:e7:d5:6c:00:82:
a9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:01:24:26:CC:A7:0B:DD:5B:7B:55:30:AC:F6:DF:E0:95:DE:7C:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CQEkJsynC91be1UwrPbf4JXefMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:88:cf:41:3e:cc:6c:28:fa:5a:ec:ba:69:cd:f7:b7:14:14:
ac:37:94:fe:44:a2:c3:eb:00:f0:e1:6b:b3:17:bb:be:1c:d4:
aa:c2:52:6f:6e:f4:fa:08:a4:73:65:15:64:19:b0:68:3e:bb:
66:2c:b5:ed:c3:4e:67:31:e3:94:e6:20:97:03:da:d4:c1:5d:
52:6e:dd:eb:f1:b6:44:eb:36:2b:ef:37:32:b7:b8:6c:98:81:
c9:a3:d6:04:e7:4f:29:9f:95:cb:ce:20:36:4d:e5:85:21:77:
0b:8f:5a:60:d3:e0:5c:87:82:d8:03:a3:87:61:1f:bb:02:ce:
dd:64:8c:c2:94:63:e9:6e:df:fa:10:43:5c:bd:71:11:17:b3:
c1:c1:dd:be:91:31:f9:bb:51:d4:50:d8:9f:2a:12:fc:2e:b7:
45:e9:01:f8:49:75:87:a4:0f:31:29:88:b6:33:f2:4f:58:da:
48:d2:f4:3c:20:72:7d:ac:90:d4:08:50:3d:9d:d5:5b:c3:fa:
da:c5:96:fa:2e:b7:49:9a:9e:d5:47:33:cf:20:0a:ae:ec:be:
69:02:e6:fc:c7:11:60:22:de:01:0f:16:e6:e2:48:43:4e:cb:
46:4f:66:2e:27:2e:c5:76:6f:1a:ec:1a:81:79:04:94:81:64:
eb:d7:07:3b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoS1QZ85Wi/CP+I5KLmQ8W8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODIwMTIwNDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTAxMjQyNmNjYTcwYmRkNWI3YjU1MzBhY2Y2ZGZlMDk1ZGU3Y2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hTiPERuutmzr+aoDueynSuOWeDO
YYI7hkz7vGj5GTSwCnIP3fFXYL11aj9uIn2Vz7BXXb2kJIcOEdopTlx2NSsQTZzC
40ZtbYUoig3qFKzpGoU+j/k35yy8SAuOfR7NeIkPXoAVlo1zsWBlXNJGsv18YGAq
KmQlv0gQPZVMnzPamDI1V7XaJyELB0SPYi4JWygGmfzwhuPvA/9seg7nA3OFnkss
tIToyMfoT6MQcwlf7xqweVpNq4bPeY1oMluc+DOVUiPYgLhBG/5c2aWCdbtKt29k
/W7Oux4hqF2lUNuSUdc0n6x8P9f/Hj3KyR2QbfQRRIVFun8759VsAIKp9wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAkBJCbMpwvdW3tVMKz23+CV3nzAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQ1FFa0pzeW5DOTFiZTFVd3JQYmY0SlhlZk1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF6Iz0E+zGwo+lrsumnN
97cUFKw3lP5EosPrAPDha7MXu74c1KrCUm9u9PoIpHNlFWQZsGg+u2Yste3DTmcx
45TmIJcD2tTBXVJu3evxtkTrNivvNzK3uGyYgcmj1gTnTymflcvOIDZN5YUhdwuP
WmDT4FyHgtgDo4dhH7sCzt1kjMKUY+lu3/oQQ1y9cREXs8HB3b6RMfm7UdRQ2J8q
Evwut0XpAfhJdYekDzEpiLYz8k9Y2kjS9Dwgcn2skNQIUD2d1VvD+trFlvout0ma
ntVHM88gCq7svmkC5vzHEWAi3gEPFubiSENOy0ZPZi4nLsV2bxrsGoF5BJSBZOvX
Bzs=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:02:15 2025 by rpki-client