Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QCswhz0c3SmowzHHYCCWx3xC0Us.roa
File: QCswhz0c3SmowzHHYCCWx3xC0Us.roa (raw, json)
Hash identifier: wh05iwE/qzPqF6aeRDOjQTJYUhxhC9+cwYT1WPEM7z8=
Subject key identifier: 40:2B:30:87:3D:1C:DD:29:A8:C3:31:C7:60:20:96:C7:7C:42:D1:4B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187755FD95C32BE87D96DC2FDCE0CA8305D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QCswhz0c3SmowzHHYCCWx3xC0Us.roa
Signing time: Wed 12 Apr 2023 12:10:28 +0000
ROA not before: Wed 12 Apr 2023 12:10:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:5f:d9:5c:32:be:87:d9:6d:c2:fd:ce:0c:a8:30:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 12 12:10:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=402b30873d1cdd29a8c331c7602096c77c42d14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:bb:3f:f9:4e:c1:73:4e:03:f8:df:be:61:
28:ec:f1:bf:72:5f:24:8e:42:5b:28:87:91:32:59:
8e:a1:30:19:96:df:7e:3e:de:7a:a1:2e:e0:87:ee:
4e:eb:9c:fd:83:2e:73:96:7f:1b:e3:11:e2:e9:67:
aa:15:72:f8:56:25:ca:93:c0:cf:16:f1:49:6f:f6:
a8:78:2d:ba:b5:d5:4e:8c:ea:ae:db:df:e2:65:29:
a6:7e:53:32:63:ab:fb:09:69:64:dc:38:75:a6:0b:
dc:b5:0c:32:8f:12:d3:39:66:d3:87:1a:48:57:a6:
15:96:ac:f3:4c:79:a2:8f:3e:b6:5e:aa:e9:29:31:
de:94:9c:19:19:89:aa:a7:2d:65:9d:e4:65:29:13:
74:24:03:7f:f9:18:00:21:ee:ac:df:8b:a4:5c:9b:
a5:41:f7:c9:85:05:ea:da:7f:4b:37:5f:77:0e:95:
22:00:8f:7c:e7:61:91:8c:85:41:97:03:c4:cc:a7:
97:a1:bd:c8:aa:4d:21:ff:67:3c:2a:6a:7d:e0:fb:
a8:53:f3:86:37:c1:21:aa:78:87:e0:a6:b2:d2:6c:
cb:a8:29:39:4d:f7:87:0f:33:91:08:88:1c:04:5f:
da:06:c7:ac:f0:62:98:73:d4:44:cf:67:a3:33:3d:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2B:30:87:3D:1C:DD:29:A8:C3:31:C7:60:20:96:C7:7C:42:D1:4B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QCswhz0c3SmowzHHYCCWx3xC0Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:a9:1d:69:9b:b7:f5:13:eb:e7:cb:34:b7:a2:e2:c1:34:cf:
fc:13:0c:c2:a5:61:bc:3e:f0:94:b0:ed:18:b2:55:b2:09:dc:
11:19:5a:04:da:08:f3:b2:2e:3f:56:de:4d:3e:24:0a:4a:2c:
a3:43:dc:71:76:ef:e9:27:45:2c:66:e1:0f:24:76:ff:33:8a:
cb:2c:64:f9:23:80:39:02:6b:6b:c6:2f:32:24:d2:8a:22:59:
76:17:cd:43:1b:60:42:d8:a2:28:5b:ee:ff:d2:a8:79:3c:36:
c5:05:43:4a:f1:48:2a:ed:71:2b:62:66:b9:3b:82:95:b9:bb:
11:f7:7d:66:73:6f:5f:d9:ef:39:41:82:25:5b:50:c8:b0:74:
23:aa:cb:a1:2a:46:7c:95:9b:2b:3d:a3:71:fd:bf:1a:57:c8:
69:dc:36:b9:ea:2c:ca:37:61:92:a7:49:d0:22:b8:01:ad:13:
0d:9b:ab:17:47:28:5d:ba:83:17:a5:7d:54:aa:36:9a:01:60:
f4:95:c2:fb:e7:72:77:a5:80:b0:c2:aa:61:37:a8:46:64:5d:
4a:a7:00:ce:db:ad:8f:39:82:50:c4:10:6a:35:69:f5:eb:f4:
f0:8b:e0:78:63:16:22:d9:4c:ef:7c:e2:42:04:ea:4f:42:ab:
4e:42:48:2c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYd1X9lcMr6H2W3C/c4MqDBdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDEyMTIxMDI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDJiMzA4NzNkMWNkZDI5YThjMzMxYzc2MDIwOTZjNzdjNDJkMTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWW7P/lOwXNOA/jfvmEo7PG/cl8k
jkJbKIeRMlmOoTAZlt9+Pt56oS7gh+5O65z9gy5zln8b4xHi6WeqFXL4ViXKk8DP
FvFJb/aoeC26tdVOjOqu29/iZSmmflMyY6v7CWlk3Dh1pgvctQwyjxLTOWbThxpI
V6YVlqzzTHmijz62XqrpKTHelJwZGYmqpy1lneRlKRN0JAN/+RgAIe6s34ukXJul
QffJhQXq2n9LN193DpUiAI9852GRjIVBlwPEzKeXob3Iqk0h/2c8Kmp94PuoU/OG
N8EhqniH4Kay0mzLqCk5TfeHDzORCIgcBF/aBses8GKYc9REz2ejMz3UYwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEArMIc9HN0pqMMxx2Aglsd8QtFLMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUUNzd2h6MGMzU21vd3pISFlDQ1d4M3hDMFVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABapHWmbt/UT6+fLNLei
4sE0z/wTDMKlYbw+8JSw7RiyVbIJ3BEZWgTaCPOyLj9W3k0+JApKLKND3HF27+kn
RSxm4Q8kdv8zisssZPkjgDkCa2vGLzIk0ooiWXYXzUMbYELYoihb7v/SqHk8NsUF
Q0rxSCrtcStiZrk7gpW5uxH3fWZzb1/Z7zlBgiVbUMiwdCOqy6EqRnyVmys9o3H9
vxpXyGncNrnqLMo3YZKnSdAiuAGtEw2bqxdHKF26gxelfVSqNpoBYPSVwvvncnel
gLDCqmE3qEZkXUqnAM7brY85glDEEGo1afXr9PCL4HhjFiLZTO984kIE6k9Cq05C
SCw=
-----END CERTIFICATE-----
Generated at Thu May 1 08:25:23 2025 by rpki-client