Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QsS9em-AHvSUEIkBOmPOuyfZiok.roa
File: QsS9em-AHvSUEIkBOmPOuyfZiok.roa (raw, json)
Hash identifier: tMcgnbx0wOJFRGUpI4jcR8VaE3MnLX6F5FTWxsYCAxI=
Subject key identifier: 42:C4:BD:7A:6F:80:1E:F4:94:10:89:01:3A:63:CE:BB:27:D9:8A:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D0BE968094481D81A780938C71C286AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QsS9em-AHvSUEIkBOmPOuyfZiok.roa
Signing time: Mon 07 Aug 2023 16:04:58 +0000
ROA not before: Mon 07 Aug 2023 16:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:189:d0be:1f3d/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:be:96:80:94:48:1d:81:a7:80:93:8c:71:c2:86:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 16:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42c4bd7a6f801ef4941089013a63cebb27d98a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:73:93:15:cd:f8:6f:dc:ef:fd:04:5e:c0:
b4:21:ba:5b:99:53:bf:4f:7e:dd:80:2a:98:e2:62:
95:c4:61:1a:93:c5:ae:fd:de:70:1c:96:10:c8:47:
54:69:fb:25:c8:49:fb:fe:f8:6b:68:df:8a:c2:47:
a3:69:72:18:f9:60:86:09:92:1d:d8:a7:d5:aa:f2:
1a:c2:ac:c5:c6:52:f4:05:af:a9:d2:99:b8:34:47:
80:64:7b:d2:ce:74:7f:32:1b:71:d9:dd:dd:1b:bd:
ca:2d:fb:c3:3d:4c:3c:7f:5d:b3:30:4b:e9:e1:f5:
ec:45:9f:1f:22:6f:d8:ef:5d:ad:95:61:9e:c5:a3:
a6:fa:3a:95:5b:ef:5d:65:1b:d1:4e:a6:ce:c8:52:
fb:57:1d:1a:bd:73:4e:41:7b:c7:4f:6b:95:0a:f3:
ef:f6:6a:44:b0:e9:1c:4e:a0:c9:d6:16:d9:99:b5:
c9:18:4d:f5:26:5c:2f:80:8d:5a:88:86:18:57:a7:
09:a9:3a:bf:29:7b:56:d9:9c:45:43:40:eb:d4:b8:
23:de:b0:b1:c2:11:1c:70:30:31:f8:8d:81:b2:54:
7f:88:16:08:78:86:ca:e7:d6:52:97:02:3e:9d:4e:
10:5e:dd:e1:1f:5e:b9:cb:18:a5:8a:3d:5b:71:8d:
60:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C4:BD:7A:6F:80:1E:F4:94:10:89:01:3A:63:CE:BB:27:D9:8A:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QsS9em-AHvSUEIkBOmPOuyfZiok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:09:10:46:60:54:e8:f9:ff:e4:ea:59:69:93:6d:0c:30:7c:
12:cb:21:72:d4:85:04:c2:d2:cd:ed:9b:cf:61:80:c2:cf:35:
f6:94:67:79:da:59:e1:7f:53:2d:7c:d9:2a:6a:7b:29:fc:bb:
7b:1f:4f:c2:8d:ac:bc:0e:99:41:9e:d8:e3:50:1f:4d:44:de:
af:03:6a:78:10:10:63:ca:6a:64:1a:e9:85:38:f1:b3:57:da:
f1:30:22:d7:98:60:9b:ea:3d:27:00:82:e5:7b:50:c2:f8:6e:
32:a7:7d:28:bc:48:c6:72:07:ab:c8:f7:78:d3:fc:10:e9:b6:
50:b8:42:98:ea:d9:51:08:8f:5a:17:61:aa:c8:68:52:11:94:
08:b3:75:53:4b:8b:5f:a0:8c:d4:c9:9c:1b:fb:9d:c9:00:16:
4e:71:0b:ac:0a:ce:a6:52:cf:7f:9b:63:72:dc:bb:d8:46:64:
68:01:a9:14:86:9c:ab:c4:b8:21:b0:0d:82:85:4f:49:37:7c:
a3:3c:69:03:9c:7e:fb:b6:5f:8c:87:85:16:25:3a:80:3a:c5:
d1:b7:e8:4b:4f:23:27:74:49:07:f9:6d:8c:71:34:ba:8f:82:
c6:1d:64:79:6c:51:a2:9d:c4:4d:a9:d9:ad:24:e0:de:72:e3:
af:24:f6:0f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnQvpaAlEgdgaeAk4xxwoatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA3MTYwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmM0YmQ3YTZmODAxZWY0OTQxMDg5MDEzYTYzY2ViYjI3ZDk4YTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaRzkxXN+G/c7/0EXsC0IbpbmVO/
T37dgCqY4mKVxGEak8Wu/d5wHJYQyEdUafslyEn7/vhraN+KwkejaXIY+WCGCZId
2KfVqvIawqzFxlL0Ba+p0pm4NEeAZHvSznR/Mhtx2d3dG73KLfvDPUw8f12zMEvp
4fXsRZ8fIm/Y712tlWGexaOm+jqVW+9dZRvRTqbOyFL7Vx0avXNOQXvHT2uVCvPv
9mpEsOkcTqDJ1hbZmbXJGE31JlwvgI1aiIYYV6cJqTq/KXtW2ZxFQ0Dr1Lgj3rCx
whEccDAx+I2BslR/iBYIeIbK59ZSlwI+nU4QXt3hH165yxilij1bcY1g+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFELEvXpvgB70lBCJATpjzrsn2YqJMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUXNTOWVtLUFIdlNVRUlrQk9tUE91eWZaaW9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACcJEEZgVOj5/+TqWWmT
bQwwfBLLIXLUhQTC0s3tm89hgMLPNfaUZ3naWeF/Uy182Spqeyn8u3sfT8KNrLwO
mUGe2ONQH01E3q8DangQEGPKamQa6YU48bNX2vEwIteYYJvqPScAguV7UML4bjKn
fSi8SMZyB6vI93jT/BDptlC4Qpjq2VEIj1oXYarIaFIRlAizdVNLi1+gjNTJnBv7
nckAFk5xC6wKzqZSz3+bY3Lcu9hGZGgBqRSGnKvEuCGwDYKFT0k3fKM8aQOcfvu2
X4yHhRYlOoA6xdG36EtPIyd0SQf5bYxxNLqPgsYdZHlsUaKdxE2p2a0k4N5y468k
9g8=
-----END CERTIFICATE-----
Generated at Thu May 1 11:13:03 2025 by rpki-client