Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QuZje242hDn9VsIIzMyxQN3Pjxo.roa
File: QuZje242hDn9VsIIzMyxQN3Pjxo.roa (raw, json)
Hash identifier: Pv5hWGdcAxPvpLu7Wac44u2cB22WFHbnXHfYbWNj+w8=
Subject key identifier: 42:E6:63:7B:6E:36:84:39:FD:56:C2:08:CC:CC:B1:40:DD:CF:8F:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018767A385F3703C7B1F1C8201471E667461
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QuZje242hDn9VsIIzMyxQN3Pjxo.roa
Signing time: Sun 09 Apr 2023 20:09:42 +0000
ROA not before: Sun 09 Apr 2023 20:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:67:a3:85:f3:70:3c:7b:1f:1c:82:01:47:1e:66:74:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 9 20:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42e6637b6e368439fd56c208ccccb140ddcf8f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:59:c1:59:fb:7a:9a:ea:f5:6e:53:0c:6c:8f:
85:50:39:3d:91:0f:19:51:53:49:36:0d:25:00:a4:
38:8c:55:8f:0a:46:2c:02:9d:6f:d5:2b:bf:ab:89:
cd:bd:6d:cd:6b:7e:df:a1:37:29:69:18:95:bb:50:
73:72:4d:52:33:64:4c:81:3f:40:6a:95:cb:c0:78:
b6:1b:1f:41:ae:1c:74:97:95:ca:5b:35:91:13:30:
4f:13:85:72:f8:e9:f2:c0:1d:43:bb:f1:20:ea:9f:
82:fd:24:d7:5f:fd:49:81:90:c3:20:f0:3b:0d:bd:
43:d9:9a:5e:c2:07:e5:b6:54:60:b5:c8:a0:9b:60:
2f:0f:17:32:a9:5e:8a:5b:fb:58:b9:15:95:e0:a4:
e7:bd:0f:c1:a8:e7:e3:c0:33:e4:3a:2d:14:28:71:
5c:88:5b:6a:a8:4a:ef:d4:39:fd:75:a8:4b:9d:d7:
f3:03:b6:29:34:1f:90:d5:ab:c4:ff:cb:58:23:b5:
25:f7:aa:e8:4e:42:f0:ba:3d:43:3d:da:25:92:2f:
d4:c6:a0:4b:76:51:74:29:02:e7:7e:54:4c:08:02:
f6:25:07:d6:4c:ee:23:17:f0:f4:4e:b7:eb:dd:92:
1f:ac:01:cc:44:24:b3:88:0f:9c:76:0d:e1:16:21:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E6:63:7B:6E:36:84:39:FD:56:C2:08:CC:CC:B1:40:DD:CF:8F:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QuZje242hDn9VsIIzMyxQN3Pjxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:23:75:b8:f1:0e:6a:3b:55:5f:7f:be:58:0d:0b:95:79:21:
48:d7:ee:fd:74:a2:7d:18:ce:22:e4:6e:f8:f5:c4:4e:09:f8:
3f:8b:0d:73:5c:61:27:a9:fb:42:85:b7:ee:d4:6b:cb:dd:c9:
19:69:8e:42:57:61:58:33:c5:1f:4b:26:b4:01:de:0b:81:7b:
27:75:02:39:52:45:24:c6:3f:f8:f1:62:e1:1e:7f:20:86:9d:
e2:ec:9a:c5:77:0f:2b:d2:98:3f:ee:a9:fa:ab:b6:13:3f:b7:
b9:9e:a0:c0:37:cb:17:c0:4b:6f:9a:9b:4d:1a:49:ba:cc:76:
0e:eb:d1:a5:bc:fb:d0:04:73:bb:77:9c:ef:44:62:26:c8:4b:
d2:5e:45:e8:70:c7:2d:52:31:6b:84:61:da:35:d3:ca:e1:19:
c9:62:02:1d:19:39:90:33:6d:90:e2:29:b6:26:c4:9f:00:d2:
87:c5:52:f7:d0:58:f3:2f:18:89:85:c7:6f:de:09:9b:7b:ce:
f9:0f:6d:ed:8b:67:8b:09:86:63:e7:30:af:83:83:1c:bc:a0:
bf:ef:4d:34:d3:50:66:18:88:7d:87:48:6c:b0:43:56:db:e7:
5a:79:81:30:7b:79:e1:f6:f8:ae:73:77:df:3f:0c:86:ae:19:
e4:56:cd:94
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdno4XzcDx7HxyCAUceZnRhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA5MjAwOTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmU2NjM3YjZlMzY4NDM5ZmQ1NmMyMDhjY2NjYjE0MGRkY2Y4ZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1nBWft6mur1blMMbI+FUDk9kQ8Z
UVNJNg0lAKQ4jFWPCkYsAp1v1Su/q4nNvW3Na37foTcpaRiVu1Bzck1SM2RMgT9A
apXLwHi2Gx9Brhx0l5XKWzWREzBPE4Vy+OnywB1Du/Eg6p+C/STXX/1JgZDDIPA7
Db1D2ZpewgfltlRgtcigm2AvDxcyqV6KW/tYuRWV4KTnvQ/BqOfjwDPkOi0UKHFc
iFtqqErv1Dn9dahLndfzA7YpNB+Q1avE/8tYI7Ul96roTkLwuj1DPdolki/UxqBL
dlF0KQLnflRMCAL2JQfWTO4jF/D0Trfr3ZIfrAHMRCSziA+cdg3hFiFsrwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFELmY3tuNoQ5/VbCCMzMsUDdz48aMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUXVaamUyNDJoRG45VnNJSXpNeXhRTjNQanhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGgjdbjxDmo7VV9/vlgN
C5V5IUjX7v10on0YziLkbvj1xE4J+D+LDXNcYSep+0KFt+7Ua8vdyRlpjkJXYVgz
xR9LJrQB3guBeyd1AjlSRSTGP/jxYuEefyCGneLsmsV3DyvSmD/uqfqrthM/t7me
oMA3yxfAS2+am00aSbrMdg7r0aW8+9AEc7t3nO9EYibIS9JeRehwxy1SMWuEYdo1
08rhGcliAh0ZOZAzbZDiKbYmxJ8A0ofFUvfQWPMvGImFx2/eCZt7zvkPbe2LZ4sJ
hmPnMK+Dgxy8oL/vTTTTUGYYiH2HSGywQ1bb51p5gTB7eeH2+K5zd98/DIauGeRW
zZQ=
-----END CERTIFICATE-----
Generated at Thu May 1 11:12:54 2025 by rpki-client