Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QroteXrg1t73QrE592R3ARaNaQA.roa
File: QroteXrg1t73QrE592R3ARaNaQA.roa (raw, json)
Hash identifier: zT3mAT9eH50ysS+iLfsjVA+JPwTcG/yVUoXtFoJKBfg=
Subject key identifier: 42:BA:2D:79:7A:E0:D6:DE:F7:42:B1:39:F7:64:77:01:16:8D:69:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01822B67DCCF7DDC23F1EEACDB1621379CCB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QroteXrg1t73QrE592R3ARaNaQA.roa
Signing time: Sat 23 Jul 2022 14:13:23 +0000
ROA not before: Sat 23 Jul 2022 14:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2b:67:dc:cf:7d:dc:23:f1:ee:ac:db:16:21:37:9c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 23 14:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42ba2d797ae0d6def742b139f7647701168d6900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:42:79:cf:50:34:4d:5b:98:c5:53:d3:f2:
8e:6d:ab:2f:04:6b:3f:d7:47:db:f5:86:eb:1a:08:
72:ff:e5:de:cd:58:a7:24:52:7e:41:d6:c3:ca:35:
06:36:98:4a:c6:61:86:76:13:b6:26:51:51:a5:45:
f5:9c:48:53:42:6b:ff:50:b1:40:69:c9:04:43:15:
e0:7b:1b:c4:9a:aa:43:c1:50:16:09:29:2e:e0:13:
8e:ec:69:bf:76:e4:ea:bb:c9:86:95:1f:35:06:53:
f6:b3:37:eb:8b:9d:98:c2:ba:51:ba:26:91:5e:97:
89:46:71:15:92:6c:f1:64:63:0f:25:fd:f1:33:52:
4d:cc:b8:63:c0:ab:7d:cc:9e:83:ae:28:54:d8:fe:
21:8f:02:f0:ba:49:71:a4:a1:c9:33:6d:09:c9:9c:
6e:3a:03:f1:90:a4:95:8e:3d:82:25:8b:b5:d1:c7:
94:24:53:da:2b:9d:23:b6:2c:35:56:bb:48:fa:5c:
fe:e4:2d:c7:44:fa:15:de:8a:d0:56:91:de:97:7b:
8b:03:0d:f3:5c:b2:d1:2b:13:c4:75:37:27:30:03:
dd:6e:27:14:ae:17:e7:90:50:e8:ba:25:2c:e1:5a:
5c:ee:de:b3:c2:ca:36:44:72:35:a0:62:56:99:45:
ef:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BA:2D:79:7A:E0:D6:DE:F7:42:B1:39:F7:64:77:01:16:8D:69:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QroteXrg1t73QrE592R3ARaNaQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:2b:32:9b:59:65:c4:80:c9:06:9d:3e:4b:85:4d:ef:90:a2:
09:6c:fc:a6:79:bc:0d:34:8b:9a:c3:ec:62:2e:7d:ef:93:1c:
3c:ae:c5:f3:32:b4:e6:b3:26:ac:0c:5f:0b:d4:8a:d6:de:c8:
01:d6:1f:4f:d2:a6:6d:31:3c:74:47:96:1a:83:89:a0:41:77:
78:e1:ec:dc:21:83:4a:f7:82:e5:48:22:49:4c:34:c1:52:73:
f1:94:d7:2a:5a:6a:b0:8f:c2:c9:f3:2a:c9:20:a0:41:7f:b3:
86:94:ae:0d:0d:26:7c:a6:a6:b1:2e:2f:99:c1:44:2d:79:18:
05:41:e9:d2:1b:7f:ed:7f:b7:6a:f7:2d:d9:ec:dd:73:ec:16:
ee:22:1f:bb:cf:27:7d:47:bf:09:37:88:7e:ab:f9:e8:12:88:
8d:35:c0:f3:2b:b4:85:52:5d:98:f1:b8:70:8b:e7:7f:c1:3f:
a5:b5:c9:d4:25:78:9e:72:61:fa:61:22:fc:5a:c2:58:52:e4:
cf:ce:25:32:fc:b2:bd:18:58:06:8b:00:21:13:08:6f:ed:2f:
76:25:e0:52:84:95:54:27:d7:49:fd:08:22:41:92:ba:6f:36:
64:00:46:a3:59:65:8f:91:c4:14:4c:37:b6:90:6c:41:43:0e:
ff:fa:87:3f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYIrZ9zPfdwj8e6s2xYhN5zLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzIzMTQxMzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmJhMmQ3OTdhZTBkNmRlZjc0MmIxMzlmNzY0NzcwMTE2OGQ2OTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2pCec9QNE1bmMVT0/KObasvBGs/
10fb9YbrGghy/+XezVinJFJ+QdbDyjUGNphKxmGGdhO2JlFRpUX1nEhTQmv/ULFA
ackEQxXgexvEmqpDwVAWCSku4BOO7Gm/duTqu8mGlR81BlP2szfri52YwrpRuiaR
XpeJRnEVkmzxZGMPJf3xM1JNzLhjwKt9zJ6DrihU2P4hjwLwuklxpKHJM20JyZxu
OgPxkKSVjj2CJYu10ceUJFPaK50jtiw1VrtI+lz+5C3HRPoV3orQVpHel3uLAw3z
XLLRKxPEdTcnMAPdbicUrhfnkFDouiUs4Vpc7t6zwso2RHI1oGJWmUXvLQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEK6LXl64Nbe90KxOfdkdwEWjWkAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUXJvdGVYcmcxdDczUXJFNTkyUjNBUmFOYVFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHQrMptZZcSAyQadPkuF
Te+Qogls/KZ5vA00i5rD7GIufe+THDyuxfMytOazJqwMXwvUitbeyAHWH0/Spm0x
PHRHlhqDiaBBd3jh7Nwhg0r3guVIIklMNMFSc/GU1ypaarCPwsnzKskgoEF/s4aU
rg0NJnymprEuL5nBRC15GAVB6dIbf+1/t2r3Ldns3XPsFu4iH7vPJ31Hvwk3iH6r
+egSiI01wPMrtIVSXZjxuHCL53/BP6W1ydQleJ5yYfphIvxawlhS5M/OJTL8sr0Y
WAaLACETCG/tL3Yl4FKElVQn10n9CCJBkrpvNmQARqNZZY+RxBRMN7aQbEFDDv/6
hz8=
-----END CERTIFICATE-----
Generated at Thu May 1 16:37:40 2025 by rpki-client