Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QgxgQifXMUPUcX2DjjI5uYzwjWM.roa
File: QgxgQifXMUPUcX2DjjI5uYzwjWM.roa (raw, json)
Hash identifier: TPHqcSl2QCz6Fg5z/BZRHrtRMB9eGYAs+CaUqt0Ru08=
Subject key identifier: 42:0C:60:42:27:D7:31:43:D4:71:7D:83:8E:32:39:B9:8C:F0:8D:63
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01833EE45B40684BEB55200FF286E26B5ACC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QgxgQifXMUPUcX2DjjI5uYzwjWM.roa
Signing time: Thu 15 Sep 2022 02:04:56 +0000
ROA not before: Thu 15 Sep 2022 02:04:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:183:3ee3:f83b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3e:e4:5b:40:68:4b:eb:55:20:0f:f2:86:e2:6b:5a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 15 02:04:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=420c604227d73143d4717d838e3239b98cf08d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:02:08:4c:6e:a1:a8:95:e5:71:e2:a9:cb:30:
e3:ca:71:c5:66:8c:86:e2:59:b3:d4:1b:61:e1:d3:
43:85:d2:a0:88:fb:f0:38:2c:b7:4b:98:3f:e9:a3:
67:aa:39:a6:b9:de:16:09:84:ba:63:f7:13:5f:14:
da:c5:ba:f4:e6:5d:9d:27:03:8a:73:50:19:1d:8c:
f3:45:a4:4f:10:5d:7b:4a:d0:4c:5b:4f:cd:46:ed:
27:9d:d6:02:08:63:90:bb:39:63:15:9c:ec:53:f6:
6e:ff:05:b1:ee:f0:8c:03:8f:be:0c:a4:1a:41:1d:
ce:ec:db:8a:7d:32:fb:e2:b4:8b:ff:3c:48:32:81:
48:7a:81:f4:59:89:e6:e4:8e:3d:0d:a9:f3:99:43:
c7:c9:06:dd:5d:68:5c:ef:3d:4a:84:61:34:8f:3a:
76:1d:16:c6:6a:65:3b:9c:16:4b:56:ec:fe:89:45:
c0:16:16:b3:5b:31:79:d7:ec:30:66:d8:f2:eb:d2:
95:24:f8:48:2e:ff:d6:c0:97:d1:a4:70:0a:3e:6f:
ab:17:98:5c:e2:e8:5d:38:93:22:16:3c:b4:83:db:
33:f8:f7:56:51:7f:ce:58:da:f7:9a:b1:56:f4:af:
db:7b:d5:04:8d:63:e0:2f:c3:32:52:1e:0e:dd:1a:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0C:60:42:27:D7:31:43:D4:71:7D:83:8E:32:39:B9:8C:F0:8D:63
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QgxgQifXMUPUcX2DjjI5uYzwjWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:d2:d8:67:f5:26:7c:57:2f:ba:c5:80:de:10:c5:6f:4f:e1:
5c:3e:7d:41:5a:f3:ca:47:f6:1f:d3:ff:4b:bc:9f:c5:fd:09:
87:11:8e:92:7f:8b:91:af:e4:b8:e2:34:97:e7:1f:eb:e2:a1:
98:94:df:b0:64:57:d0:21:98:64:46:47:9d:e0:5b:d1:d3:3c:
36:7f:ba:30:1a:c9:2d:d0:be:ea:97:88:c7:9c:dc:1e:ab:23:
8d:10:84:32:a6:34:77:c5:66:b7:c6:0f:04:86:07:ba:5d:6a:
ce:44:ff:e4:a1:c9:ca:ad:d4:0d:3d:89:cd:a3:d7:23:a9:da:
2b:c2:43:2e:14:79:b9:8b:ae:12:6d:2a:c3:55:55:e7:f9:a0:
20:ad:06:a0:9a:04:2a:7e:af:d0:02:ba:e5:ca:0f:40:2a:02:
b4:27:3b:c0:8f:aa:c1:35:c0:57:0a:20:ad:aa:79:4c:db:43:
08:6c:b2:65:e7:c5:f1:d1:f4:ba:bf:00:ed:7b:59:1a:c3:01:
28:fe:06:cf:aa:50:48:38:be:96:39:d5:ea:68:7a:cf:2f:77:
66:aa:9c:0c:5e:cc:c0:93:b1:c7:f7:47:17:66:7e:5c:47:17:
7d:27:29:9b:85:83:04:b7:3c:62:92:0a:f4:b0:e5:85:7d:fd:
f5:c0:7f:5c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYM+5FtAaEvrVSAP8obia1rMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTE1MDIwNDU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjBjNjA0MjI3ZDczMTQzZDQ3MTdkODM4ZTMyMzliOThjZjA4ZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggIITG6hqJXlceKpyzDjynHFZoyG
4lmz1Bth4dNDhdKgiPvwOCy3S5g/6aNnqjmmud4WCYS6Y/cTXxTaxbr05l2dJwOK
c1AZHYzzRaRPEF17StBMW0/NRu0nndYCCGOQuzljFZzsU/Zu/wWx7vCMA4++DKQa
QR3O7NuKfTL74rSL/zxIMoFIeoH0WYnm5I49DanzmUPHyQbdXWhc7z1KhGE0jzp2
HRbGamU7nBZLVuz+iUXAFhazWzF51+wwZtjy69KVJPhILv/WwJfRpHAKPm+rF5hc
4uhdOJMiFjy0g9sz+PdWUX/OWNr3mrFW9K/be9UEjWPgL8MyUh4O3RpybQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEIMYEIn1zFD1HF9g44yObmM8I1jMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUWd4Z1FpZlhNVVBVY1gyRGpqSTV1WXp3aldNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB3S2Gf1JnxXL7rFgN4Q
xW9P4Vw+fUFa88pH9h/T/0u8n8X9CYcRjpJ/i5Gv5LjiNJfnH+vioZiU37BkV9Ah
mGRGR53gW9HTPDZ/ujAayS3QvuqXiMec3B6rI40QhDKmNHfFZrfGDwSGB7pdas5E
/+Shycqt1A09ic2j1yOp2ivCQy4UebmLrhJtKsNVVef5oCCtBqCaBCp+r9ACuuXK
D0AqArQnO8CPqsE1wFcKIK2qeUzbQwhssmXnxfHR9Lq/AO17WRrDASj+Bs+qUEg4
vpY51epoes8vd2aqnAxezMCTscf3RxdmflxHF30nKZuFgwS3PGKSCvSw5YV9/fXA
f1w=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:02 2025 by rpki-client