Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q-TTaXJ7DMzy4iPc-8QhbyVabCg.roa
File: Q-TTaXJ7DMzy4iPc-8QhbyVabCg.roa (raw, json)
Hash identifier: iLuXXst4R9iYqG7piOEWnvjN8s8hhfSE+q5p6ttxWOQ=
Subject key identifier: 43:E4:D3:69:72:7B:0C:CC:F2:E2:23:DC:FB:C4:21:6F:25:5A:6C:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886C5A1D42CFAAC198444DE602DE4566E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q-TTaXJ7DMzy4iPc-8QhbyVabCg.roa
Signing time: Tue 30 May 2023 11:10:25 +0000
ROA not before: Tue 30 May 2023 11:10:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:5a:1d:42:cf:aa:c1:98:44:4d:e6:02:de:45:66:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 30 11:10:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43e4d369727b0cccf2e223dcfbc4216f255a6c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:e5:bb:a2:a1:24:32:bd:d7:02:e3:25:27:
65:8d:6c:3a:9b:48:50:78:1d:92:be:34:f9:eb:d0:
00:b1:d6:3a:96:7d:71:0e:cc:07:b3:76:d6:75:96:
e1:26:7f:56:0f:2c:8f:d5:d7:ac:63:35:7a:80:45:
e2:8f:ba:39:21:af:00:0f:b1:fa:00:f9:ab:04:d0:
38:9b:6e:89:8b:a1:3d:34:5b:34:a5:35:e1:d7:a1:
d9:35:9f:a8:57:2b:7a:51:02:c7:86:d3:d9:93:cd:
79:0b:d5:0e:13:03:b2:2a:25:8b:9c:7a:c7:26:e9:
c5:f9:1c:17:61:79:84:a2:39:5f:e1:06:f9:b3:f1:
81:9a:43:17:be:81:8f:54:37:39:f6:14:00:15:12:
81:17:cb:67:ed:f8:53:10:4e:0a:e0:94:73:2b:03:
f0:8f:5b:1b:50:26:da:a6:39:18:70:a4:e7:44:cd:
73:f4:43:9d:fb:fb:b3:78:de:d9:7f:d3:7c:c7:31:
6f:61:60:ea:d5:77:29:4f:27:61:a4:ea:6f:d8:07:
72:34:78:04:2a:3d:c6:5e:eb:70:79:f8:64:fd:d3:
f8:cb:ca:21:50:66:35:49:d2:f2:1e:69:1f:a8:e5:
4f:76:09:bf:5c:a3:c8:13:41:ed:53:a0:18:3c:a1:
4d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E4:D3:69:72:7B:0C:CC:F2:E2:23:DC:FB:C4:21:6F:25:5A:6C:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Q-TTaXJ7DMzy4iPc-8QhbyVabCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:a9:59:b9:e1:f8:06:28:f5:36:4b:dd:f5:25:47:52:55:1f:
ae:ab:17:48:07:75:8b:82:89:1a:93:d5:48:c3:eb:ca:e6:15:
ab:c9:81:ba:3f:3e:fc:ef:64:02:ef:1c:8c:c6:d9:21:74:86:
1c:25:9b:6c:01:50:45:cb:bf:35:ce:0a:0d:e1:cb:55:ce:11:
23:85:3a:6a:ae:62:44:2c:96:c6:22:7b:a0:6d:2a:96:09:88:
23:8f:14:94:85:9d:00:38:b2:23:1a:91:17:12:db:b6:56:3c:
82:c5:be:5c:56:6b:07:85:e1:41:1e:a0:bd:ce:f6:bf:b8:38:
8d:e6:5e:2e:7f:84:8e:e6:ea:fd:5a:fe:b9:b6:45:35:ed:97:
0b:3b:6a:48:bf:3a:21:6a:a6:22:ee:91:bf:b3:9e:f7:67:bf:
5a:0c:46:9d:d4:6c:eb:a9:4e:5b:e6:4c:a2:23:84:99:cf:c7:
dd:27:08:ae:d4:05:bf:23:e3:7f:c3:91:32:68:26:78:b9:e1:
a4:d4:76:fa:bc:6c:4a:95:4c:c6:d7:2d:1f:02:1d:6b:a6:47:
7a:88:66:f1:c1:8f:25:26:b2:a2:aa:1e:92:16:53:3e:bc:87:
08:b3:6e:5d:36:5b:0c:c3:9e:cb:25:2b:a4:27:cc:d1:f5:36:
25:d6:5f:98
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhsWh1Cz6rBmERN5gLeRWbkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTMwMTExMDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2U0ZDM2OTcyN2IwY2NjZjJlMjIzZGNmYmM0MjE2ZjI1NWE2YzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm07lu6KhJDK91wLjJSdljWw6m0hQ
eB2SvjT569AAsdY6ln1xDswHs3bWdZbhJn9WDyyP1desYzV6gEXij7o5Ia8AD7H6
APmrBNA4m26Ji6E9NFs0pTXh16HZNZ+oVyt6UQLHhtPZk815C9UOEwOyKiWLnHrH
JunF+RwXYXmEojlf4Qb5s/GBmkMXvoGPVDc59hQAFRKBF8tn7fhTEE4K4JRzKwPw
j1sbUCbapjkYcKTnRM1z9EOd+/uzeN7Zf9N8xzFvYWDq1XcpTydhpOpv2AdyNHgE
Kj3GXutwefhk/dP4y8ohUGY1SdLyHmkfqOVPdgm/XKPIE0HtU6AYPKFNGwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEPk02lyewzM8uIj3PvEIW8lWmwoMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUS1UVGFYSjdETXp5NGlQYy04UWhieVZhYkNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKKpWbnh+AYo9TZL3fUl
R1JVH66rF0gHdYuCiRqT1UjD68rmFavJgbo/PvzvZALvHIzG2SF0hhwlm2wBUEXL
vzXOCg3hy1XOESOFOmquYkQslsYie6BtKpYJiCOPFJSFnQA4siMakRcS27ZWPILF
vlxWaweF4UEeoL3O9r+4OI3mXi5/hI7m6v1a/rm2RTXtlws7aki/OiFqpiLukb+z
nvdnv1oMRp3UbOupTlvmTKIjhJnPx90nCK7UBb8j43/DkTJoJni54aTUdvq8bEqV
TMbXLR8CHWumR3qIZvHBjyUmsqKqHpIWUz68hwizbl02WwzDnsslK6QnzNH1NiXW
X5g=
-----END CERTIFICATE-----
Generated at Fri May 2 12:00:01 2025 by rpki-client