Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SqY0in4VQ7Jhjqyz0XG81FJK2FE.roa
File: SqY0in4VQ7Jhjqyz0XG81FJK2FE.roa (raw, json)
Hash identifier: b1tRx2V49DKc1KInczSTLePdFjIOBvNeOmMz2sMyob4=
Subject key identifier: 4A:A6:34:8A:7E:15:43:B2:61:8E:AC:B3:D1:71:BC:D4:52:4A:D8:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188270B14A3BB0F018F1FDE9EBAA9FD06A9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SqY0in4VQ7Jhjqyz0XG81FJK2FE.roa
Signing time: Wed 17 May 2023 00:10:17 +0000
ROA not before: Wed 17 May 2023 00:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:27:0b:14:a3:bb:0f:01:8f:1f:de:9e:ba:a9:fd:06:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 17 00:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4aa6348a7e1543b2618eacb3d171bcd4524ad851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a8:cc:78:8e:ca:0d:ee:c2:00:4b:74:cf:d2:
78:29:70:82:7b:50:28:9f:e9:68:f9:84:1c:3d:7c:
13:c4:01:ab:6c:03:4a:34:3b:94:72:4d:ae:7e:9a:
3f:3c:63:5e:fd:a0:d0:7b:e6:25:19:62:d4:b4:31:
09:b7:ee:d3:e3:90:da:6a:55:88:fd:d2:0f:f0:7f:
c8:4c:27:05:62:05:54:16:0e:8c:c0:73:76:43:c5:
67:4d:b0:41:59:01:83:08:c9:ff:d6:94:b5:53:cf:
8c:c3:c6:e7:47:75:6a:98:ac:0b:d3:8a:ec:5d:fc:
ec:21:e4:2c:e5:7b:00:75:e0:2a:1e:04:95:83:00:
4a:2a:1a:f0:8c:e7:58:8e:14:55:e7:71:9f:d2:1c:
a4:61:44:c2:4a:f3:2a:d1:d5:82:99:fb:3c:82:ec:
b1:77:d7:1e:f3:c9:c1:a0:bb:dd:81:d9:ba:6c:7d:
3e:32:d0:7f:bf:38:53:8f:f9:92:25:30:e1:c6:8c:
c8:c9:c3:be:68:02:dd:c3:91:1c:3a:9c:aa:6a:ba:
c7:77:30:1d:91:96:94:79:b6:b9:b8:5a:12:f0:05:
99:9f:01:25:5a:0b:8d:47:bc:06:93:3f:33:cd:cd:
0c:dd:2d:28:55:69:4d:c7:78:a4:4f:c8:4e:04:dd:
c0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A6:34:8A:7E:15:43:B2:61:8E:AC:B3:D1:71:BC:D4:52:4A:D8:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SqY0in4VQ7Jhjqyz0XG81FJK2FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:30:f0:cd:f2:e5:d5:6f:90:5e:a2:26:37:89:a5:1f:79:4d:
8c:13:5a:73:6b:26:01:af:34:3c:6c:fd:44:fe:46:3c:3f:86:
9c:b2:0e:f0:b7:43:ad:92:c2:30:ee:b4:9e:12:ac:90:07:1e:
8d:f9:56:db:d3:d4:00:7b:4a:70:72:0e:20:23:88:63:80:e0:
d1:ae:73:47:85:cd:26:f9:79:f6:a8:c2:f8:5a:f2:11:5e:8e:
3a:e3:93:22:0f:f5:bf:47:5d:76:02:08:72:73:c4:c1:79:fc:
9a:7d:55:3c:40:fb:ca:b3:02:24:d2:12:4b:46:73:63:d1:24:
81:d5:53:f4:2f:a4:05:f6:fe:05:99:6d:46:e3:80:16:bb:03:
ca:b4:83:7b:8d:9e:45:cd:9a:76:80:b6:44:48:d5:5b:37:98:
26:fa:22:c2:44:93:5f:ff:96:a7:58:11:80:d0:8b:24:20:8c:
3c:86:3b:16:a0:6d:99:63:99:16:3e:01:1a:f8:f4:1f:2b:b6:
ce:bf:35:cf:41:97:2a:95:1d:56:f3:48:f8:c3:7e:15:40:36:
fa:5a:db:7f:36:8a:08:97:50:42:18:7c:bf:c0:c8:88:7d:e7:
c2:66:ee:82:e8:a1:a9:83:c6:38:51:ef:c8:08:5a:1c:78:ba:
59:93:ba:13
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgnCxSjuw8Bjx/enrqp/QapMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTE3MDAxMDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWE2MzQ4YTdlMTU0M2IyNjE4ZWFjYjNkMTcxYmNkNDUyNGFkODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6jMeI7KDe7CAEt0z9J4KXCCe1Ao
n+lo+YQcPXwTxAGrbANKNDuUck2ufpo/PGNe/aDQe+YlGWLUtDEJt+7T45DaalWI
/dIP8H/ITCcFYgVUFg6MwHN2Q8VnTbBBWQGDCMn/1pS1U8+Mw8bnR3VqmKwL04rs
XfzsIeQs5XsAdeAqHgSVgwBKKhrwjOdYjhRV53Gf0hykYUTCSvMq0dWCmfs8guyx
d9ce88nBoLvdgdm6bH0+MtB/vzhTj/mSJTDhxozIycO+aALdw5EcOpyqarrHdzAd
kZaUeba5uFoS8AWZnwElWguNR7wGkz8zzc0M3S0oVWlNx3ikT8hOBN3AVQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEqmNIp+FUOyYY6ss9FxvNRSSthRMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvU3FZMGluNFZRN0poanF5ejBYRzgxRkpLMkZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIIw8M3y5dVvkF6iJjeJ
pR95TYwTWnNrJgGvNDxs/UT+Rjw/hpyyDvC3Q62SwjDutJ4SrJAHHo35VtvT1AB7
SnByDiAjiGOA4NGuc0eFzSb5efaowvha8hFejjrjkyIP9b9HXXYCCHJzxMF5/Jp9
VTxA+8qzAiTSEktGc2PRJIHVU/QvpAX2/gWZbUbjgBa7A8q0g3uNnkXNmnaAtkRI
1Vs3mCb6IsJEk1//lqdYEYDQiyQgjDyGOxagbZljmRY+ARr49B8rts6/Nc9BlyqV
HVbzSPjDfhVANvpa2382igiXUEIYfL/AyIh958Jm7oLooamDxjhR78gIWhx4ulmT
uhM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:52:18 2025 by rpki-client