Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QPIiDCjw0UUJgNeW6ab2C6VRkuM.roa
File: QPIiDCjw0UUJgNeW6ab2C6VRkuM.roa (raw, json)
Hash identifier: 3Ujd2RBTqPcxdw0u4eGmmoA58sawOBVPCaAD7dLW+nw=
Subject key identifier: 40:F2:22:0C:28:F0:D1:45:09:80:D7:96:E9:A6:F6:0B:A5:51:92:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01829078F33D0C9ADE7E48814D65B8C15E1E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QPIiDCjw0UUJgNeW6ab2C6VRkuM.roa
Signing time: Fri 12 Aug 2022 05:13:41 +0000
ROA not before: Fri 12 Aug 2022 05:13:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:90:78:f3:3d:0c:9a:de:7e:48:81:4d:65:b8:c1:5e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 05:13:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40f2220c28f0d1450980d796e9a6f60ba55192e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:54:27:ce:95:fd:10:cb:2d:a9:48:65:e4:
ed:96:ca:e2:b1:17:35:62:83:d2:56:71:5a:8a:6b:
7f:42:1d:b1:1e:bd:30:89:e4:30:55:e9:18:ab:6c:
c5:fb:0e:47:42:64:de:c7:26:22:d3:1f:3a:57:98:
b7:0a:74:10:57:ad:4a:b5:02:68:f8:6f:e8:e4:7b:
bd:c0:f6:e0:99:46:e5:3d:59:40:25:4d:8d:58:a7:
77:18:33:2f:27:4e:dc:95:bb:a5:4d:47:12:b1:9c:
4c:89:f8:f5:a5:9c:f9:95:69:f8:96:dc:8a:e3:b8:
ef:50:a2:db:b4:f8:54:52:2a:de:f9:e8:1d:63:4f:
1f:b1:b6:56:38:4f:6d:c6:a9:40:81:47:f9:db:da:
c7:cd:43:47:b1:d3:1f:36:32:6a:4a:b2:bf:b5:54:
b5:27:70:29:73:91:94:89:92:d2:88:cf:b8:1c:1c:
b6:e7:a1:ef:49:86:f0:3d:5d:95:41:62:41:d7:47:
0f:b3:bd:da:f0:9b:68:d2:1e:d8:6b:af:2f:d9:1e:
ec:66:0d:a1:77:77:b7:6b:70:d1:cc:f1:9b:39:00:
5e:07:6d:36:2d:db:1a:6d:76:9e:f3:6c:36:45:3e:
30:8c:0b:ef:cb:28:9b:7e:15:69:d0:ab:b9:06:94:
ba:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F2:22:0C:28:F0:D1:45:09:80:D7:96:E9:A6:F6:0B:A5:51:92:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QPIiDCjw0UUJgNeW6ab2C6VRkuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:40:71:0a:f5:f6:12:03:a7:46:fb:79:ab:1c:4e:ab:35:63:
43:e5:7d:aa:f5:2f:d3:80:b8:3c:38:be:1e:b6:23:c4:5b:64:
ad:52:0f:e8:a6:be:da:83:b1:5e:82:64:f8:dc:ef:ae:39:62:
92:42:68:88:81:8a:90:ff:69:72:f0:0e:59:eb:2e:0c:5d:f6:
a9:7c:90:b0:b2:67:c7:65:b2:8f:b2:04:92:8b:25:32:15:7d:
db:8e:38:b7:3d:cb:9d:16:ff:2a:fa:26:ef:b3:76:b7:ce:5d:
3e:8a:5f:32:f2:fe:13:76:09:27:ed:65:a0:b3:23:5d:e5:d6:
69:be:03:30:0d:e1:63:8f:d5:c3:01:ac:47:70:ad:da:1c:b3:
84:99:45:cf:e3:cd:bf:4e:38:75:72:50:97:d0:ff:2a:cd:16:
27:fc:28:7f:23:e5:10:74:f2:6c:ea:35:97:d3:b0:b9:3a:ab:
84:6e:c0:a3:52:26:6f:85:69:d0:3c:d7:02:61:2f:e6:36:0d:
3f:88:3b:ec:67:33:0c:ef:d2:10:bd:ef:0f:8c:72:84:f5:42:
fb:41:09:46:d6:c9:77:d3:cf:6e:01:ba:b7:18:6a:e8:d8:e9:
62:c9:1c:ef:86:80:cb:f1:f6:40:e8:d0:09:5d:1a:46:f5:44:
55:72:a5:dc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYKQePM9DJrefkiBTWW4wV4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODEyMDUxMzQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGYyMjIwYzI4ZjBkMTQ1MDk4MGQ3OTZlOWE2ZjYwYmE1NTE5MmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXFUJ86V/RDLLalIZeTtlsrisRc1
YoPSVnFaimt/Qh2xHr0wieQwVekYq2zF+w5HQmTexyYi0x86V5i3CnQQV61KtQJo
+G/o5Hu9wPbgmUblPVlAJU2NWKd3GDMvJ07clbulTUcSsZxMifj1pZz5lWn4ltyK
47jvUKLbtPhUUire+egdY08fsbZWOE9txqlAgUf529rHzUNHsdMfNjJqSrK/tVS1
J3Apc5GUiZLSiM+4HBy256HvSYbwPV2VQWJB10cPs73a8Jto0h7Ya68v2R7sZg2h
d3e3a3DRzPGbOQBeB202LdsabXae82w2RT4wjAvvyyibfhVp0Ku5BpS6hQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEDyIgwo8NFFCYDXlumm9gulUZLjMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUVBJaURDancwVVVKZ05lVzZhYjJDNlZSa3VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJRAcQr19hIDp0b7easc
Tqs1Y0Plfar1L9OAuDw4vh62I8RbZK1SD+imvtqDsV6CZPjc7645YpJCaIiBipD/
aXLwDlnrLgxd9ql8kLCyZ8dlso+yBJKLJTIVfduOOLc9y50W/yr6Ju+zdrfOXT6K
XzLy/hN2CSftZaCzI13l1mm+AzAN4WOP1cMBrEdwrdocs4SZRc/jzb9OOHVyUJfQ
/yrNFif8KH8j5RB08mzqNZfTsLk6q4RuwKNSJm+FadA81wJhL+Y2DT+IO+xnMwzv
0hC97w+McoT1QvtBCUbWyXfTz24BurcYaujY6WLJHO+GgMvx9kDo0AldGkb1RFVy
pdw=
-----END CERTIFICATE-----
Generated at Thu May 1 10:07:37 2025 by rpki-client