Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QRZYzUWeAFwfrPn5jjbZmAj8dQI.roa
File: QRZYzUWeAFwfrPn5jjbZmAj8dQI.roa (raw, json)
Hash identifier: MUF2PBo5Wui/KKo6Ol/DX+w2QMdbg9Ed4FsnXTuM9Tg=
Subject key identifier: 41:16:58:CD:45:9E:00:5C:1F:AC:F9:F9:8E:36:D9:98:08:FC:75:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181F2F6D2CDB5468754DA37C527782C28C0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QRZYzUWeAFwfrPn5jjbZmAj8dQI.roa
Signing time: Tue 12 Jul 2022 15:11:10 +0000
ROA not before: Tue 12 Jul 2022 15:11:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f2:f6:d2:cd:b5:46:87:54:da:37:c5:27:78:2c:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 15:11:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=411658cd459e005c1facf9f98e36d99808fc7502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:67:62:35:ea:6c:d3:75:a6:8a:0b:c0:43:
7c:63:0d:3b:3c:36:7a:5c:85:8b:98:29:bc:35:00:
c5:64:9f:cf:e0:df:cb:2f:24:d1:7f:95:17:ef:b2:
2d:68:e8:40:53:f4:98:17:81:b1:62:7e:3f:2b:b2:
8e:59:b2:26:70:42:cf:fb:07:db:06:bc:5b:cc:14:
f7:31:60:6c:10:1b:4a:a4:c4:c4:b6:f5:29:ed:5b:
77:a7:ff:9c:2b:39:9e:09:62:8f:7d:f9:06:41:d6:
5c:2b:34:e2:8f:bd:18:f1:82:d7:f3:32:d0:f1:08:
08:f3:fd:9d:b9:f8:0d:80:f0:17:23:7c:34:be:87:
c9:9c:11:4a:e8:d7:5a:37:d4:91:dc:11:b6:7b:f2:
03:c3:50:88:12:db:83:61:bc:6b:0a:2c:9e:97:da:
1a:ba:ef:b9:82:dc:ed:02:1e:7f:15:de:51:ca:65:
29:64:6f:e6:36:3c:d9:d4:88:f4:98:6b:7d:66:7f:
cd:48:95:3e:53:9a:b9:51:3c:ca:8b:5a:dd:73:4f:
fa:3c:e2:c1:0b:92:38:46:88:7a:97:b7:37:47:7a:
02:28:f7:da:f2:02:34:a6:c7:4a:c9:30:ee:fb:04:
dc:8a:e1:1f:a4:65:f5:44:62:a2:3f:ad:62:de:b5:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:16:58:CD:45:9E:00:5C:1F:AC:F9:F9:8E:36:D9:98:08:FC:75:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QRZYzUWeAFwfrPn5jjbZmAj8dQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:ac:aa:c5:21:dd:8a:39:cd:a4:09:6f:3b:80:67:12:05:5e:
78:d1:b6:04:5a:4e:c6:a0:8d:8f:e3:5f:79:50:3b:e6:b9:c3:
f4:df:0c:0c:79:11:82:5f:70:ca:ef:b0:a6:ff:04:ca:16:f3:
20:11:83:92:07:88:56:2c:ec:08:5b:45:ad:c8:4f:a8:22:c0:
9e:7b:57:43:5b:6c:6a:5b:1f:a0:b7:6d:a7:f2:ba:f6:a9:20:
cc:5f:b7:79:a6:20:82:0a:8b:4a:07:7f:b3:81:86:fc:4c:13:
fe:68:86:5f:8a:d7:ac:b8:d0:63:03:f7:f2:9a:74:30:41:22:
f7:e6:de:97:1b:62:47:65:09:f5:6d:89:4c:8c:ec:a0:63:90:
78:1a:a4:e2:3e:04:5f:c6:a0:f5:bc:ff:da:38:76:3d:e4:00:
df:7b:0a:e2:31:44:97:ba:e2:62:fe:4b:57:84:34:f7:ad:fc:
1e:2f:5a:15:f2:de:1b:2a:ad:19:4b:18:1a:bb:cb:c2:16:77:
67:1a:4e:dd:f9:e1:df:1e:4c:b4:0c:95:fb:e7:98:68:0c:fe:
bc:94:f7:dc:ea:83:65:10:70:8d:14:dc:34:26:0c:69:0b:ab:
ab:2a:1b:a8:c6:6f:aa:7f:ec:2d:0d:b3:35:87:8f:18:ec:16:
f4:6c:2f:5c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYHy9tLNtUaHVNo3xSd4LCjAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzEyMTUxMTEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTE2NThjZDQ1OWUwMDVjMWZhY2Y5Zjk4ZTM2ZDk5ODA4ZmM3NTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAophnYjXqbNN1pooLwEN8Yw07PDZ6
XIWLmCm8NQDFZJ/P4N/LLyTRf5UX77ItaOhAU/SYF4GxYn4/K7KOWbImcELP+wfb
BrxbzBT3MWBsEBtKpMTEtvUp7Vt3p/+cKzmeCWKPffkGQdZcKzTij70Y8YLX8zLQ
8QgI8/2dufgNgPAXI3w0vofJnBFK6NdaN9SR3BG2e/IDw1CIEtuDYbxrCiyel9oa
uu+5gtztAh5/Fd5RymUpZG/mNjzZ1Ij0mGt9Zn/NSJU+U5q5UTzKi1rdc0/6POLB
C5I4Roh6l7c3R3oCKPfa8gI0psdKyTDu+wTciuEfpGX1RGKiP61i3rXz6QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEEWWM1FngBcH6z5+Y422ZgI/HUCMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUVJaWXpVV2VBRndmclBuNWpqYlptQWo4ZFFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABusqsUh3Yo5zaQJbzuA
ZxIFXnjRtgRaTsagjY/jX3lQO+a5w/TfDAx5EYJfcMrvsKb/BMoW8yARg5IHiFYs
7AhbRa3IT6giwJ57V0NbbGpbH6C3bafyuvapIMxft3mmIIIKi0oHf7OBhvxME/5o
hl+K16y40GMD9/KadDBBIvfm3pcbYkdlCfVtiUyM7KBjkHgapOI+BF/GoPW8/9o4
dj3kAN97CuIxRJe64mL+S1eENPet/B4vWhXy3hsqrRlLGBq7y8IWd2caTt354d8e
TLQMlfvnmGgM/ryU99zqg2UQcI0U3DQmDGkLq6sqG6jGb6p/7C0NszWHjxjsFvRs
L1w=
-----END CERTIFICATE-----
Generated at Thu May 1 13:37:48 2025 by rpki-client