Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QyeYrbj7oIHCm4MBdJEuOtEgX94.roa
File: QyeYrbj7oIHCm4MBdJEuOtEgX94.roa (raw, json)
Hash identifier: YRYO1ciTYffwXHThJB1ooBzqol5co7r/U4YanVZffMM=
Subject key identifier: 43:27:98:AD:B8:FB:A0:81:C2:9B:83:01:74:91:2E:3A:D1:20:5F:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C572502894836C97E79A6FA5E8E19FBF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QyeYrbj7oIHCm4MBdJEuOtEgX94.roa
Signing time: Wed 18 Jan 2023 15:14:41 +0000
ROA not before: Wed 18 Jan 2023 15:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c5:72:50:28:94:83:6c:97:e7:9a:6f:a5:e8:e1:9f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 18 15:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=432798adb8fba081c29b830174912e3ad1205fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:b2:57:53:43:ea:55:86:cd:f4:a4:07:e4:
a3:e0:2d:64:7c:5c:ea:f3:f3:d2:88:7c:8e:1c:65:
5b:45:68:5e:73:6b:ea:86:a1:1f:1d:b3:85:60:6a:
e3:1d:c5:5d:01:26:ed:cb:ce:5b:48:e3:2a:33:f9:
fc:92:a1:51:06:b7:b1:c2:b2:5f:55:91:17:4a:c8:
ea:1c:d5:03:c0:09:e1:6f:48:eb:de:01:39:39:44:
7c:d6:d8:66:b0:43:e0:55:a3:15:ac:5c:60:2e:c4:
f7:a0:7d:2a:73:69:80:81:66:43:eb:60:98:77:ba:
84:40:53:32:42:39:02:2f:b7:bc:9f:bb:d9:87:82:
86:ab:2e:6f:e7:4b:b3:7d:94:6e:70:3d:2d:c6:c1:
f3:59:22:28:8c:b0:81:db:2a:f9:25:b2:9f:df:83:
df:36:40:e2:cf:9c:ed:21:5f:5f:b5:7e:3f:af:c0:
fe:f5:ed:85:47:22:fc:a3:c0:8a:04:0a:da:9e:40:
11:41:a8:24:4d:a6:14:fa:04:af:cb:24:76:7f:68:
20:f9:62:cc:ff:0b:fe:99:76:ec:5e:de:fc:f6:75:
f7:28:db:42:34:97:92:ae:af:d2:bb:6b:70:d4:f7:
b1:70:cc:e8:6f:13:3b:c6:d8:70:b6:81:cb:62:92:
f2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:27:98:AD:B8:FB:A0:81:C2:9B:83:01:74:91:2E:3A:D1:20:5F:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QyeYrbj7oIHCm4MBdJEuOtEgX94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:d4:c8:d6:a6:e9:89:09:50:eb:ba:5f:1a:1d:38:94:13:cf:
66:d1:f5:5f:1d:07:4c:3b:36:00:70:a9:08:df:ca:62:9b:ea:
0f:07:c9:56:72:59:ce:c1:cd:32:25:71:14:47:b2:16:de:d2:
37:f0:d6:cc:28:b0:59:6b:de:69:55:c2:0a:e9:34:de:9f:e2:
80:7d:db:37:52:c2:d4:38:88:34:6a:87:5d:8f:4c:c1:7c:b4:
e9:aa:2f:fb:71:b6:e2:eb:62:a3:a9:f6:9c:2d:a8:a9:d5:aa:
42:56:c0:7b:7b:9b:48:89:38:1d:32:ec:46:43:f6:17:a1:13:
cc:b6:89:c8:07:99:b4:d2:66:46:30:23:86:4b:c5:84:09:48:
b1:de:3f:10:c2:98:97:89:af:15:ac:37:9a:94:13:5f:14:44:
74:0e:83:0c:ef:a9:13:88:94:e1:20:9a:34:a6:fe:1e:37:5f:
b7:fe:94:0d:de:70:38:bd:55:8e:47:bd:96:ed:66:20:25:09:
15:24:7e:b3:4d:9c:e5:fa:45:f9:2e:68:6e:e1:4a:c8:dd:4d:
89:2c:06:26:04:e8:b1:77:f3:93:be:67:87:cb:68:8c:14:40:
e6:6c:d0:81:3f:a1:b1:1b:af:af:87:ff:9b:2a:2c:f2:ca:6e:
9d:e2:d8:00
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXFclAolINsl+eab6Xo4Z+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTE4MTUxNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzI3OThhZGI4ZmJhMDgxYzI5YjgzMDE3NDkxMmUzYWQxMjA1ZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+CyV1ND6lWGzfSkB+Sj4C1kfFzq
8/PSiHyOHGVbRWhec2vqhqEfHbOFYGrjHcVdASbty85bSOMqM/n8kqFRBrexwrJf
VZEXSsjqHNUDwAnhb0jr3gE5OUR81thmsEPgVaMVrFxgLsT3oH0qc2mAgWZD62CY
d7qEQFMyQjkCL7e8n7vZh4KGqy5v50uzfZRucD0txsHzWSIojLCB2yr5JbKf34Pf
NkDiz5ztIV9ftX4/r8D+9e2FRyL8o8CKBArankARQagkTaYU+gSvyyR2f2gg+WLM
/wv+mXbsXt789nX3KNtCNJeSrq/Su2tw1PexcMzobxM7xthwtoHLYpLytQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEMnmK24+6CBwpuDAXSRLjrRIF/eMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUXllWXJiajdvSUhDbTRNQmRKRXVPdEVnWDk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADXUyNam6YkJUOu6Xxod
OJQTz2bR9V8dB0w7NgBwqQjfymKb6g8HyVZyWc7BzTIlcRRHshbe0jfw1swosFlr
3mlVwgrpNN6f4oB92zdSwtQ4iDRqh12PTMF8tOmqL/txtuLrYqOp9pwtqKnVqkJW
wHt7m0iJOB0y7EZD9hehE8y2icgHmbTSZkYwI4ZLxYQJSLHePxDCmJeJrxWsN5qU
E18URHQOgwzvqROIlOEgmjSm/h43X7f+lA3ecDi9VY5HvZbtZiAlCRUkfrNNnOX6
RfkuaG7hSsjdTYksBiYE6LF385O+Z4fLaIwUQOZs0IE/obEbr6+H/5sqLPLKbp3i
2AA=
-----END CERTIFICATE-----
Generated at Fri May 2 04:22:19 2025 by rpki-client