Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QUogMrUhC_a38Y59dp7yvSJz6dI.roa
File: QUogMrUhC_a38Y59dp7yvSJz6dI.roa (raw, json)
Hash identifier: Asa6/CmA5TI5Irel/VB/JohkhuR8DuSvlG007PUJfBs=
Subject key identifier: 41:4A:20:32:B5:21:0B:F6:B7:F1:8E:7D:76:9E:F2:BD:22:73:E9:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899DB2CB6E8A7F3AC290005CE96A8542E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QUogMrUhC_a38Y59dp7yvSJz6dI.roa
Signing time: Fri 28 Jul 2023 18:11:27 +0000
ROA not before: Fri 28 Jul 2023 18:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9d:b2:cb:6e:8a:7f:3a:c2:90:00:5c:e9:6a:85:42:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 18:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=414a2032b5210bf6b7f18e7d769ef2bd2273e9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f8:12:50:fb:8b:b1:49:81:3e:d0:19:a4:1c:
f3:75:56:e1:00:fc:08:32:37:72:a6:19:c5:09:fd:
e4:37:d0:c1:d9:6e:ed:f3:ab:fb:4b:28:45:b7:7d:
9f:6e:d5:5c:e6:c3:a7:25:44:e7:8f:dc:62:fc:9c:
80:9f:8c:c8:e6:42:57:16:40:88:bd:41:43:b0:d2:
96:52:cc:b3:cc:1c:6b:bc:ee:50:40:62:fd:15:bb:
02:35:e2:55:34:27:90:85:58:30:4f:de:24:93:0d:
ec:4f:05:9e:31:3b:d0:c5:36:98:44:f3:6e:d4:2b:
ab:f4:72:fa:f5:51:6a:b6:e0:9b:a4:99:d7:83:a8:
37:71:15:3b:8a:08:80:a1:62:4c:7d:ef:c4:df:44:
b1:d7:db:f5:79:8a:82:bb:2c:8a:e4:8d:ca:4f:10:
6f:b6:f2:a5:27:83:c7:cb:69:b2:04:aa:57:55:2e:
a7:e3:8c:4d:01:6c:33:d4:0a:7d:f7:6c:7e:39:4d:
ab:51:9b:b7:82:ee:b4:53:cf:37:3c:cc:b9:30:de:
bd:a1:20:78:6b:99:2a:cc:8d:55:71:5f:1e:52:e4:
c8:b1:d5:13:06:68:18:d6:be:d1:50:75:3d:96:be:
fa:5a:58:64:aa:50:3a:15:dc:62:10:4b:7b:05:57:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4A:20:32:B5:21:0B:F6:B7:F1:8E:7D:76:9E:F2:BD:22:73:E9:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QUogMrUhC_a38Y59dp7yvSJz6dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:a3:df:12:41:32:4f:d4:2e:0b:4e:07:14:04:b4:b5:95:14:
3f:8f:8f:01:d7:57:67:16:c9:0c:79:f9:47:8f:22:8a:08:b6:
8e:42:50:37:a4:be:19:f9:ac:b1:93:e3:1b:8c:ac:04:dc:3d:
88:4c:d7:51:03:84:09:03:36:14:4d:74:28:6f:b0:77:67:da:
d8:b5:50:aa:9d:65:ff:38:41:18:9e:be:c9:9b:3e:10:00:01:
ea:a0:7f:56:9b:70:bb:dd:49:f4:54:f5:72:51:37:0a:97:7b:
f9:8f:e2:1f:d0:04:ea:9e:1f:1b:f8:b4:8b:c1:ad:e8:1f:91:
0d:62:64:15:d8:b4:9b:1b:4a:20:7e:72:c5:fe:73:8a:81:58:
ff:ea:8a:ff:9b:d3:5f:70:54:91:2d:cf:b1:d2:e5:a7:f1:c7:
0d:5c:75:6e:dc:54:48:f2:f6:47:a0:4c:78:c2:60:bc:e2:9e:
2b:b1:e8:50:0f:87:2f:cc:fd:b4:e9:c2:56:01:c1:4c:dc:af:
68:ab:c8:d0:8e:5e:69:c1:2f:c9:2b:cb:0f:5b:24:1c:53:17:
67:f2:34:07:55:87:9c:59:70:bc:0e:12:e6:9e:18:37:04:79:
41:7c:dc:ff:39:0e:2a:9e:96:80:3c:3d:6c:d6:f2:de:11:1a:
03:38:ed:31
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmdsstuin86wpAAXOlqhULpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI4MTgxMTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTRhMjAzMmI1MjEwYmY2YjdmMThlN2Q3NjllZjJiZDIyNzNlOWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPgSUPuLsUmBPtAZpBzzdVbhAPwI
MjdyphnFCf3kN9DB2W7t86v7SyhFt32fbtVc5sOnJUTnj9xi/JyAn4zI5kJXFkCI
vUFDsNKWUsyzzBxrvO5QQGL9FbsCNeJVNCeQhVgwT94kkw3sTwWeMTvQxTaYRPNu
1Cur9HL69VFqtuCbpJnXg6g3cRU7igiAoWJMfe/E30Sx19v1eYqCuyyK5I3KTxBv
tvKlJ4PHy2myBKpXVS6n44xNAWwz1Ap992x+OU2rUZu3gu60U883PMy5MN69oSB4
a5kqzI1VcV8eUuTIsdUTBmgY1r7RUHU9lr76WlhkqlA6FdxiEEt7BVcvPwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEFKIDK1IQv2t/GOfXae8r0ic+nSMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUVVvZ01yVWhDX2EzOFk1OWRwN3l2U0p6NmRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABOj3xJBMk/ULgtOBxQE
tLWVFD+PjwHXV2cWyQx5+UePIooIto5CUDekvhn5rLGT4xuMrATcPYhM11EDhAkD
NhRNdChvsHdn2ti1UKqdZf84QRievsmbPhAAAeqgf1abcLvdSfRU9XJRNwqXe/mP
4h/QBOqeHxv4tIvBregfkQ1iZBXYtJsbSiB+csX+c4qBWP/qiv+b019wVJEtz7HS
5afxxw1cdW7cVEjy9kegTHjCYLziniux6FAPhy/M/bTpwlYBwUzcr2iryNCOXmnB
L8kryw9bJBxTF2fyNAdVh5xZcLwOEuaeGDcEeUF83P85DiqeloA8PWzW8t4RGgM4
7TE=
-----END CERTIFICATE-----
Generated at Thu May 1 03:13:26 2025 by rpki-client