Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qss8tSQnUXd1SLgkkZm3o9YITzs.roa
File: Qss8tSQnUXd1SLgkkZm3o9YITzs.roa (raw, json)
Hash identifier: x3aHY0FlwQoO3Iax3JVY40NIai6VqKT5d8aWCQKvf3U=
Subject key identifier: 42:CB:3C:B5:24:27:51:77:75:48:B8:24:91:99:B7:A3:D6:08:4F:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A80241AF85D6C0E97E7DB6C21740E193
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qss8tSQnUXd1SLgkkZm3o9YITzs.roa
Signing time: Sun 30 Jul 2023 18:14:27 +0000
ROA not before: Sun 30 Jul 2023 18:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a8:02:41:af:85:d6:c0:e9:7e:7d:b6:c2:17:40:e1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 18:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42cb3cb5242751777548b8249199b7a3d6084f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:17:02:ee:9b:44:39:c4:1c:c8:93:30:f8:
25:1d:c1:25:2d:2d:ea:58:36:09:24:2b:e1:da:f4:
ff:1d:84:82:04:a9:f1:a9:82:2c:14:9b:94:3f:8b:
d0:bc:78:3a:b0:22:2b:62:09:26:32:09:95:aa:08:
e1:eb:bd:af:63:52:ab:84:e1:9d:a5:67:3a:fc:38:
de:79:74:ac:db:d7:34:5d:28:8b:de:a6:a1:9d:f7:
13:a9:51:1d:22:57:bb:90:52:e8:8e:19:be:2e:4d:
03:b5:aa:e4:e4:1a:14:9c:55:8d:36:da:76:8f:19:
9e:e6:61:e2:37:61:38:75:c8:c5:05:4f:2a:ec:26:
c6:4f:2c:13:01:86:aa:bf:e2:9a:13:46:c1:ab:08:
6e:6d:4c:f3:c1:9a:4e:c8:a3:14:d1:80:32:63:1f:
8d:38:c3:11:12:08:25:87:84:f2:08:78:d2:f3:d7:
47:85:07:d2:ff:e7:4b:07:27:fb:69:50:25:34:00:
86:5f:73:3b:b4:45:21:bc:be:df:32:35:f0:70:99:
cf:59:11:f3:78:0a:29:95:5c:0b:b3:01:8c:44:a9:
f9:c9:4a:40:5c:5f:fa:2b:15:f1:da:91:6b:6d:3e:
1e:21:d2:01:88:15:12:1b:fb:de:8f:e2:97:2f:9e:
c9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CB:3C:B5:24:27:51:77:75:48:B8:24:91:99:B7:A3:D6:08:4F:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qss8tSQnUXd1SLgkkZm3o9YITzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:da:db:cc:5a:3e:e0:09:81:2b:e0:f4:dc:f7:c2:cf:9a:f9:
54:ac:23:19:ae:3a:ca:7e:43:f1:cd:9b:75:dd:2b:e2:3f:51:
e6:48:ce:4a:c1:57:86:a5:fc:05:0b:4f:a0:5f:3f:36:c9:14:
3d:0d:d6:a4:8b:70:58:b1:fa:28:9c:68:a8:ca:3e:cd:a9:12:
c3:11:1f:aa:37:f8:9e:a0:7b:70:55:3a:06:89:71:ad:03:43:
bb:8b:ed:24:74:22:73:fa:9c:99:ba:81:e7:9c:7c:7a:81:35:
7a:0b:e8:dc:c3:13:63:98:f5:5d:b0:fb:b5:9e:d9:25:29:7a:
4c:35:92:bb:4d:e2:d9:e4:cd:2d:b8:2a:dd:6c:4d:18:dd:af:
82:df:6a:13:16:10:a8:25:ad:a5:83:e0:00:e5:62:38:1d:b4:
64:50:23:3b:80:a1:72:5d:c0:c7:24:f6:fa:bb:07:24:cc:71:
d3:f3:e3:34:fd:d6:72:6f:0e:89:b7:88:06:7f:cc:1d:b2:93:
e7:bf:fc:73:ad:58:8a:1b:ca:78:8f:d4:87:f5:06:62:56:8e:
ff:2e:b3:50:f3:89:25:b2:e5:11:02:2e:0b:0a:f5:42:b4:96:
c8:7d:06:7c:85:a7:49:82:76:e2:14:6f:d1:9e:47:64:c1:2b:
8c:cc:49:6e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmoAkGvhdbA6X59tsIXQOGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzMwMTgxNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmNiM2NiNTI0Mjc1MTc3NzU0OGI4MjQ5MTk5YjdhM2Q2MDg0ZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTAXAu6bRDnEHMiTMPglHcElLS3q
WDYJJCvh2vT/HYSCBKnxqYIsFJuUP4vQvHg6sCIrYgkmMgmVqgjh672vY1KrhOGd
pWc6/DjeeXSs29c0XSiL3qahnfcTqVEdIle7kFLojhm+Lk0Dtark5BoUnFWNNtp2
jxme5mHiN2E4dcjFBU8q7CbGTywTAYaqv+KaE0bBqwhubUzzwZpOyKMU0YAyYx+N
OMMREgglh4TyCHjS89dHhQfS/+dLByf7aVAlNACGX3M7tEUhvL7fMjXwcJnPWRHz
eAoplVwLswGMRKn5yUpAXF/6KxXx2pFrbT4eIdIBiBUSG/vej+KXL57JRQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFELLPLUkJ1F3dUi4JJGZt6PWCE87MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUXNzOHRTUW5VWGQxU0xna2tabTNvOVlJVHpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIza28xaPuAJgSvg9Nz3
ws+a+VSsIxmuOsp+Q/HNm3XdK+I/UeZIzkrBV4al/AULT6BfPzbJFD0N1qSLcFix
+iicaKjKPs2pEsMRH6o3+J6ge3BVOgaJca0DQ7uL7SR0InP6nJm6geecfHqBNXoL
6NzDE2OY9V2w+7We2SUpekw1krtN4tnkzS24Kt1sTRjdr4LfahMWEKglraWD4ADl
YjgdtGRQIzuAoXJdwMck9vq7ByTMcdPz4zT91nJvDom3iAZ/zB2yk+e//HOtWIob
yniP1If1BmJWjv8us1DziSWy5RECLgsK9UK0lsh9BnyFp0mCduIUb9GeR2TBK4zM
SW4=
-----END CERTIFICATE-----
Generated at Fri May 2 11:45:05 2025 by rpki-client