Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QcS157KCBThJ9fqw4I9VHn7436k.roa
File: QcS157KCBThJ9fqw4I9VHn7436k.roa (raw, json)
Hash identifier: 2yNoxdu3ZFcxtcFfLpjOX25JvtJ2voON0t1J/ruH314=
Subject key identifier: 41:C4:B5:E7:B2:82:05:38:49:F5:FA:B0:E0:8F:55:1E:7E:F8:DF:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189ED487EE52BB1FB416FAEFCD008BD6FE6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QcS157KCBThJ9fqw4I9VHn7436k.roa
Signing time: Sun 13 Aug 2023 05:04:58 +0000
ROA not before: Sun 13 Aug 2023 05:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:ed47:fb3d/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ed:48:7e:e5:2b:b1:fb:41:6f:ae:fc:d0:08:bd:6f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 05:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41c4b5e7b282053849f5fab0e08f551e7ef8dfa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8f:1e:67:6a:cf:d9:3a:fd:6e:4b:8c:11:d4:
54:07:a4:2f:ce:ba:bb:21:5d:79:eb:67:e0:cd:e7:
b8:30:2a:50:ca:ab:f3:4d:b9:a7:3d:19:1f:99:b4:
2c:7a:2e:8d:14:18:fc:60:d7:56:d7:27:a7:4f:0c:
fc:3a:ec:79:8e:5c:01:b6:d8:63:86:dd:c3:27:30:
85:85:94:eb:6e:5e:c2:70:2f:d8:85:de:2b:8a:81:
d4:36:22:e6:17:0a:2f:eb:d6:6c:10:05:63:db:ac:
1f:57:15:8f:21:dd:1d:ff:0b:95:0d:bb:8f:38:f5:
40:89:0b:09:72:fa:54:af:cb:40:1d:79:b7:59:ba:
78:1d:98:b7:d0:fe:2b:a8:49:b2:1e:7e:76:2c:cf:
84:ed:d8:cc:da:9d:c5:84:3d:4a:ae:07:a5:18:93:
46:18:59:a0:cd:0d:a2:7a:ee:b9:11:d2:22:38:4a:
f7:5a:31:e5:74:c8:46:e2:4e:bb:23:81:be:aa:3a:
86:34:98:82:f0:76:11:70:52:a1:f4:13:71:69:2b:
27:5d:9d:1c:af:80:b7:93:74:a5:a5:27:57:48:5d:
0b:86:95:7d:d1:10:28:2b:6f:4c:3c:3b:77:9f:31:
77:07:0e:ab:de:03:a8:b0:8b:48:0b:b4:f1:5d:6f:
e9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C4:B5:E7:B2:82:05:38:49:F5:FA:B0:E0:8F:55:1E:7E:F8:DF:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QcS157KCBThJ9fqw4I9VHn7436k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:24:95:52:19:62:9f:55:06:75:1f:62:7b:88:0a:48:8a:53:
14:c8:f7:68:26:6c:bc:02:e1:1b:62:91:d9:90:1e:db:71:b3:
c2:57:e2:bf:27:1c:5b:65:41:fc:9a:16:6a:95:51:56:b8:ee:
8f:15:1c:ca:d2:29:3f:31:95:10:a9:2f:54:42:69:d2:2b:0a:
d2:7f:14:5c:2f:f4:02:78:ae:40:3a:e2:f7:57:f2:ed:0b:e2:
49:0a:90:05:f6:8e:0a:b4:92:8a:f2:c4:9c:6f:a4:bf:52:e6:
55:94:bd:49:8c:52:9d:5c:e4:f6:e7:44:b1:e7:0c:fb:a3:d2:
7b:9c:6e:83:d0:b6:ea:23:c7:a7:6c:5f:7c:ba:b5:cd:ad:d1:
6d:65:14:1b:86:4c:d3:b3:a8:30:a6:7b:80:c9:21:99:1c:28:
f7:9a:9f:fd:9c:77:2b:bb:c5:2b:0f:12:07:1e:de:4a:47:e4:
13:d7:e1:70:9a:db:44:9f:3f:14:8e:18:0f:84:bc:75:3a:d1:
8b:22:64:fd:a1:46:2b:3d:6a:e1:9c:71:00:56:d6:4a:89:5b:
e9:d2:c0:dd:2b:28:a7:8e:48:7f:d8:d3:5a:d9:c3:dc:e0:4c:
4f:3e:6d:23:b8:96:b5:05:7c:e8:85:c5:73:75:61:1c:df:a2:
34:6b:38:50
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYntSH7lK7H7QW+u/NAIvW/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODEzMDUwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWM0YjVlN2IyODIwNTM4NDlmNWZhYjBlMDhmNTUxZTdlZjhkZmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI8eZ2rP2Tr9bkuMEdRUB6Qvzrq7
IV1562fgzee4MCpQyqvzTbmnPRkfmbQsei6NFBj8YNdW1yenTwz8Oux5jlwBtthj
ht3DJzCFhZTrbl7CcC/Yhd4rioHUNiLmFwov69ZsEAVj26wfVxWPId0d/wuVDbuP
OPVAiQsJcvpUr8tAHXm3Wbp4HZi30P4rqEmyHn52LM+E7djM2p3FhD1KrgelGJNG
GFmgzQ2ieu65EdIiOEr3WjHldMhG4k67I4G+qjqGNJiC8HYRcFKh9BNxaSsnXZ0c
r4C3k3SlpSdXSF0LhpV90RAoK29MPDt3nzF3Bw6r3gOosItIC7TxXW/p2QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEHEteeyggU4SfX6sOCPVR5++N+pMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUWNTMTU3S0NCVGhKOWZxdzRJOVZIbjc0MzZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJUklVIZYp9VBnUfYnuI
CkiKUxTI92gmbLwC4RtikdmQHttxs8JX4r8nHFtlQfyaFmqVUVa47o8VHMrSKT8x
lRCpL1RCadIrCtJ/FFwv9AJ4rkA64vdX8u0L4kkKkAX2jgq0koryxJxvpL9S5lWU
vUmMUp1c5PbnRLHnDPuj0nucboPQtuojx6dsX3y6tc2t0W1lFBuGTNOzqDCme4DJ
IZkcKPean/2cdyu7xSsPEgce3kpH5BPX4XCa20SfPxSOGA+EvHU60YsiZP2hRis9
auGccQBW1kqJW+nSwN0rKKeOSH/Y01rZw9zgTE8+bSO4lrUFfOiFxXN1YRzfojRr
OFA=
-----END CERTIFICATE-----
Generated at Thu May 1 04:39:28 2025 by rpki-client