Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QCS4WwXlDz-QdKnV-w9-DWPDXPs.roa
File: QCS4WwXlDz-QdKnV-w9-DWPDXPs.roa (raw, json)
Hash identifier: iJilLiv7nCAcsFF5s3wYf1Yo8zTwB3vxuPzvYnSKPOA=
Subject key identifier: 40:24:B8:5B:05:E5:0F:3F:90:74:A9:D5:FB:0F:7E:0D:63:C3:5C:FB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D923555FF6DF6E370D78A67D1A01ACEC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QCS4WwXlDz-QdKnV-w9-DWPDXPs.roa
Signing time: Wed 09 Aug 2023 07:11:58 +0000
ROA not before: Wed 09 Aug 2023 07:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:23:55:5f:f6:df:6e:37:0d:78:a6:7d:1a:01:ac:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 07:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4024b85b05e50f3f9074a9d5fb0f7e0d63c35cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:51:4b:18:f6:5f:f9:6e:37:0b:42:8c:50:
3c:26:57:9b:ee:1d:2a:ab:cc:ce:d1:13:9d:b6:4f:
1f:f3:e7:ae:c4:15:e2:64:fc:38:67:8c:4b:02:91:
f4:3c:f4:2f:ef:ea:05:ab:b6:a5:04:68:f8:01:4e:
08:b0:53:02:c0:14:34:08:bf:07:90:ae:ef:b4:27:
74:fe:aa:ce:13:33:27:1a:76:42:d2:9f:4c:49:67:
b8:d7:41:6c:12:7e:9c:8c:64:df:58:f1:b1:10:40:
19:27:28:7c:8f:4b:c8:b7:f7:52:ef:cb:38:4d:3e:
4a:8c:8f:56:86:a0:71:a8:4e:20:0b:cb:90:8e:7f:
4f:47:8b:c8:9e:95:c9:dd:1a:f3:2f:32:5e:db:e0:
ce:12:6e:a9:86:27:38:6f:da:85:78:ad:1d:f5:1f:
0e:b8:ca:11:7d:2f:1b:21:7f:d2:63:b0:9e:17:7e:
5f:c0:32:5f:46:a3:70:6f:8d:ba:59:b6:6c:5b:df:
27:2f:18:fc:74:d2:ca:6d:7c:b5:21:0f:85:cc:9a:
e2:95:35:a5:6e:fa:ee:bd:07:af:ae:58:4c:7d:37:
9b:51:ad:13:7b:a8:09:52:e1:44:d8:4a:4e:34:61:
3c:5a:aa:3d:8b:c5:5c:cf:5c:f3:c2:0f:35:00:b3:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:24:B8:5B:05:E5:0F:3F:90:74:A9:D5:FB:0F:7E:0D:63:C3:5C:FB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QCS4WwXlDz-QdKnV-w9-DWPDXPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:8a:71:1d:ca:42:b9:89:3d:26:c7:2a:e7:e4:3c:1a:77:61:
38:ff:47:22:e8:71:51:d4:43:59:5a:6f:aa:41:1f:6b:76:a7:
cc:d0:6b:57:d5:9f:a6:3a:ad:bf:99:30:6a:5f:71:16:89:44:
49:62:9b:af:b0:c8:fb:e4:58:cc:fe:9e:d7:64:72:8b:f8:dc:
26:d3:2d:70:90:0a:42:70:36:ab:89:45:93:ae:65:ff:91:f1:
ea:3c:eb:2a:8f:f0:a5:dc:17:84:6f:29:3d:81:00:57:6c:73:
13:ad:40:96:2b:c2:1e:69:22:69:c5:65:a1:6d:e4:1c:5e:ff:
04:ed:39:e3:cc:67:00:3b:a9:be:2f:f7:66:d4:75:86:e6:19:
20:48:7a:2a:0a:2f:d4:7c:ad:34:9b:54:56:08:89:1f:38:d8:
61:e1:26:dc:ae:78:0b:bb:71:6c:8e:5b:10:6e:a1:a7:54:5c:
97:86:50:8c:13:23:56:64:e3:a3:f8:e5:d7:1e:db:85:85:58:
93:80:15:5a:af:7d:f3:4d:8e:bc:2a:97:08:c8:3e:34:9c:60:
e6:60:68:0a:ee:a3:f6:bb:30:b2:7d:39:49:bf:0e:9d:47:17:
10:0e:3e:0e:fa:2a:a9:fc:f7:d8:47:23:99:9c:37:34:fe:ec:
e8:31:03:c7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnZI1Vf9t9uNw14pn0aAazsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA5MDcxMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDI0Yjg1YjA1ZTUwZjNmOTA3NGE5ZDVmYjBmN2UwZDYzYzM1Y2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkxRSxj2X/luNwtCjFA8Jleb7h0q
q8zO0ROdtk8f8+euxBXiZPw4Z4xLApH0PPQv7+oFq7alBGj4AU4IsFMCwBQ0CL8H
kK7vtCd0/qrOEzMnGnZC0p9MSWe410FsEn6cjGTfWPGxEEAZJyh8j0vIt/dS78s4
TT5KjI9WhqBxqE4gC8uQjn9PR4vInpXJ3RrzLzJe2+DOEm6phic4b9qFeK0d9R8O
uMoRfS8bIX/SY7CeF35fwDJfRqNwb426WbZsW98nLxj8dNLKbXy1IQ+FzJrilTWl
bvruvQevrlhMfTebUa0Te6gJUuFE2EpONGE8Wqo9i8Vcz1zzwg81ALMj0wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEAkuFsF5Q8/kHSp1fsPfg1jw1z7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUUNTNFd3WGxEei1RZEtuVi13OS1EV1BEWFBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAISKcR3KQrmJPSbHKufk
PBp3YTj/RyLocVHUQ1lab6pBH2t2p8zQa1fVn6Y6rb+ZMGpfcRaJRElim6+wyPvk
WMz+ntdkcov43CbTLXCQCkJwNquJRZOuZf+R8eo86yqP8KXcF4RvKT2BAFdscxOt
QJYrwh5pImnFZaFt5Bxe/wTtOePMZwA7qb4v92bUdYbmGSBIeioKL9R8rTSbVFYI
iR842GHhJtyueAu7cWyOWxBuoadUXJeGUIwTI1Zk46P45dce24WFWJOAFVqvffNN
jrwqlwjIPjScYOZgaAruo/a7MLJ9OUm/Dp1HFxAOPg76Kqn899hHI5mcNzT+7Ogx
A8c=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:35:06 2025 by rpki-client