Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QnWr5QcuQOjoj1j32WQHT1N5ijU.roa
File: QnWr5QcuQOjoj1j32WQHT1N5ijU.roa (raw, json)
Hash identifier: fTtDJvCV77RpoFKsBQuDsfEanSnVmpQ5gYl2b/8pzKk=
Subject key identifier: 42:75:AB:E5:07:2E:40:E8:E8:8F:58:F7:D9:64:07:4F:53:79:8A:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01845C4F7CDC7685B590373CE41C9BF98F31
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QnWr5QcuQOjoj1j32WQHT1N5ijU.roa
Signing time: Wed 09 Nov 2022 12:13:43 +0000
ROA not before: Wed 09 Nov 2022 12:13:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5c:4f:7c:dc:76:85:b5:90:37:3c:e4:1c:9b:f9:8f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 9 12:13:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4275abe5072e40e8e88f58f7d964074f53798a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:3d:12:f7:2f:96:84:d3:cb:d8:5b:a6:d7:
66:52:95:ec:e2:cc:c0:0f:00:ee:4a:db:a8:e8:c8:
8f:5e:86:03:82:9d:69:ea:22:da:91:58:2b:6f:df:
ef:af:a2:cb:f6:8e:93:ad:0e:93:c9:bd:65:6a:13:
50:02:af:9f:55:bb:09:92:0f:f6:f6:9d:49:45:71:
07:0b:0b:83:6f:d1:5d:72:4a:09:fa:c1:06:23:ee:
a6:05:e8:b6:d5:6a:79:45:d6:e6:58:69:0f:0a:22:
c6:89:c8:21:6b:0d:f1:69:92:c4:c4:74:9a:11:cb:
54:72:f7:78:b8:5a:0f:ef:1c:a2:ae:20:1a:ff:9d:
a3:39:27:38:14:fd:fd:52:ca:79:26:cb:66:df:8d:
2b:25:0a:ea:f5:1e:92:54:48:32:3c:06:c5:9f:b5:
8f:c1:b8:bf:30:b7:df:f3:c5:29:1d:fe:2e:ee:d1:
21:f5:05:59:af:3e:48:34:08:f3:47:05:c4:2b:7b:
0d:41:47:ed:db:eb:64:08:d8:1b:33:72:91:1c:f2:
95:01:c1:90:f9:9a:ec:89:d6:b4:bd:21:d8:2e:3f:
3e:25:c0:c0:51:3e:48:1f:54:67:fe:ba:35:72:3c:
ab:28:c7:5d:64:7e:f6:bc:55:e1:e1:c6:82:1a:f3:
6a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:75:AB:E5:07:2E:40:E8:E8:8F:58:F7:D9:64:07:4F:53:79:8A:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QnWr5QcuQOjoj1j32WQHT1N5ijU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:50:3f:36:f1:b6:0c:c8:38:51:8e:20:58:8e:8a:68:15:cf:
4a:6f:6d:05:70:42:3e:0b:e7:06:f6:af:61:f6:aa:fa:17:48:
c2:4d:5d:16:6e:ce:63:e6:4b:bb:69:7a:11:e6:dc:d9:fd:6b:
97:f5:ac:49:dd:18:e8:3a:3b:67:10:c4:05:db:10:b6:95:e3:
a0:1f:7b:75:d7:14:00:55:73:8a:aa:73:8c:ae:dd:a8:43:69:
09:64:90:3c:ae:47:02:e4:45:49:ae:89:68:30:45:47:a0:32:
2c:4d:74:79:69:09:94:26:d8:3b:ff:db:67:9a:30:93:25:e2:
81:43:30:0c:30:e6:5a:97:f3:46:02:3b:28:3c:37:7f:69:e7:
ea:f8:af:00:c9:ad:a1:40:fe:eb:5d:37:57:ee:02:de:cb:05:
44:52:66:45:3a:38:6a:c6:41:56:56:56:68:8c:8b:32:94:f5:
8e:ec:47:6c:31:79:58:b7:76:75:b6:1e:34:8f:07:7d:cc:dc:
06:f7:8b:bc:d4:6d:cc:c8:7f:6e:31:95:ee:ae:79:04:1b:e8:
57:2b:9d:77:75:0b:ef:ec:02:1c:27:d4:e8:88:c5:8b:66:f0:
8e:c3:9a:51:42:1f:0b:6b:8a:25:54:37:7c:1b:1a:da:99:20:
8c:a9:a7:a0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYRcT3zcdoW1kDc85Byb+Y8xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTA5MTIxMzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Mjc1YWJlNTA3MmU0MGU4ZTg4ZjU4ZjdkOTY0MDc0ZjUzNzk4YTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWM9EvcvloTTy9hbptdmUpXs4szA
DwDuStuo6MiPXoYDgp1p6iLakVgrb9/vr6LL9o6TrQ6Tyb1lahNQAq+fVbsJkg/2
9p1JRXEHCwuDb9FdckoJ+sEGI+6mBei21Wp5RdbmWGkPCiLGicghaw3xaZLExHSa
EctUcvd4uFoP7xyiriAa/52jOSc4FP39Usp5Jstm340rJQrq9R6SVEgyPAbFn7WP
wbi/MLff88UpHf4u7tEh9QVZrz5INAjzRwXEK3sNQUft2+tkCNgbM3KRHPKVAcGQ
+Zrsida0vSHYLj8+JcDAUT5IH1Rn/ro1cjyrKMddZH72vFXh4caCGvNqzwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEJ1q+UHLkDo6I9Y99lkB09TeYo1MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUW5XcjVRY3VRT2pvajFqMzJXUUhUMU41aWpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFdQPzbxtgzIOFGOIFiO
imgVz0pvbQVwQj4L5wb2r2H2qvoXSMJNXRZuzmPmS7tpehHm3Nn9a5f1rEndGOg6
O2cQxAXbELaV46Afe3XXFABVc4qqc4yu3ahDaQlkkDyuRwLkRUmuiWgwRUegMixN
dHlpCZQm2Dv/22eaMJMl4oFDMAww5lqX80YCOyg8N39p5+r4rwDJraFA/utdN1fu
At7LBURSZkU6OGrGQVZWVmiMizKU9Y7sR2wxeVi3dnW2HjSPB33M3Ab3i7zUbczI
f24xle6ueQQb6FcrnXd1C+/sAhwn1OiIxYtm8I7DmlFCHwtriiVUN3wbGtqZIIyp
p6A=
-----END CERTIFICATE-----
Generated at Thu May 1 00:43:09 2025 by rpki-client