Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/es-qea4FuDFLQUGDtEGTLEpkNQk.roa
File: es-qea4FuDFLQUGDtEGTLEpkNQk.roa (raw, json)
Hash identifier: GQ/2BOUeDbsvewTlzRMMNKsHiRx7UHFsSGT18uSMGXU=
Subject key identifier: 7A:CF:AA:79:AE:05:B8:31:4B:41:41:83:B4:41:93:2C:4A:64:35:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185A0874B0BF5E2E4212EA92834B85EB9BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/es-qea4FuDFLQUGDtEGTLEpkNQk.roa
Signing time: Wed 11 Jan 2023 11:11:39 +0000
ROA not before: Wed 11 Jan 2023 11:11:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a0:87:4b:0b:f5:e2:e4:21:2e:a9:28:34:b8:5e:b9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 11 11:11:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7acfaa79ae05b8314b414183b441932c4a643509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:9f:2b:0d:13:a8:9d:86:66:bc:51:e5:58:
f6:99:3a:32:10:27:9a:4d:26:b5:17:06:bb:98:33:
53:0c:81:54:e4:84:88:91:70:72:a9:47:b1:87:ce:
f7:32:18:68:c1:00:3c:b6:87:76:51:24:21:71:e7:
7d:be:e0:de:c6:f0:fc:03:5d:44:78:33:6f:fc:3e:
54:d7:05:92:88:07:ae:95:10:bf:ad:b5:75:6f:8b:
29:66:04:e7:f8:54:88:38:73:89:c8:d8:81:a4:7b:
b2:cd:64:7d:4d:00:0e:da:75:36:cc:bf:c5:b0:80:
0a:ac:e4:3f:6c:60:b1:79:65:ef:2a:44:72:89:49:
83:62:5d:ec:72:d3:5b:7f:c0:c1:26:be:14:dd:2d:
18:fd:07:17:a3:72:0c:ae:f0:b7:41:77:51:60:61:
00:27:b6:92:e5:5a:8b:da:d7:d1:15:d9:3d:f4:17:
08:40:d9:b4:e4:2c:ac:55:ec:07:44:36:ef:7d:99:
9e:59:44:59:43:3b:6c:12:3f:ae:d5:84:d6:85:f4:
01:44:00:5c:2a:26:03:28:e3:08:b3:4d:0b:69:4a:
35:c5:f4:80:55:59:b4:8c:0d:fa:8b:e1:b6:20:3c:
bb:a0:72:77:95:27:c0:ac:d3:6a:61:45:e6:0c:2d:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CF:AA:79:AE:05:B8:31:4B:41:41:83:B4:41:93:2C:4A:64:35:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/es-qea4FuDFLQUGDtEGTLEpkNQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:da:75:ac:63:6e:d9:6e:6d:7c:e5:a6:26:c7:3a:2b:01:f4:
81:71:c2:3c:64:94:29:4e:e4:f2:49:27:67:92:1a:31:69:12:
53:79:3a:a7:28:94:9a:55:4f:97:72:db:69:7b:e5:93:ac:eb:
eb:16:42:35:da:67:14:c0:03:d9:ba:07:03:08:87:04:34:6c:
1b:a1:74:f3:70:4e:03:bb:7b:a8:03:6b:68:d9:75:aa:0b:81:
e7:25:0f:b9:06:c9:46:cc:f2:c9:3f:ad:76:db:69:60:a8:f5:
fe:af:e1:ad:ee:e3:c1:ca:93:a2:4b:da:98:ca:3a:3a:09:a7:
9c:2b:16:da:d5:6a:0c:57:fe:bd:1e:5d:47:8d:47:dd:34:db:
d2:84:e4:88:91:5f:ea:7d:e3:c7:65:ab:ac:91:34:48:0a:53:
38:0e:f7:be:d2:94:2a:a4:a8:91:5f:90:ba:f3:0c:65:50:2c:
2d:94:81:86:51:f5:97:28:cf:da:3f:e3:db:06:91:a9:e2:c3:
9a:20:9a:db:de:46:65:8f:d9:2f:60:cc:8f:53:36:92:34:e3:
4f:a1:10:74:f9:65:11:b3:da:5f:59:86:cf:3d:a0:32:63:45:
93:5f:35:03:c4:46:75:f9:e4:b8:d5:1b:7d:bf:bf:47:75:6a:
80:a5:0c:9b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWgh0sL9eLkIS6pKDS4Xrm7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTExMTExMTM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWNmYWE3OWFlMDViODMxNGI0MTQxODNiNDQxOTMyYzRhNjQzNTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWSfKw0TqJ2GZrxR5Vj2mToyECea
TSa1Fwa7mDNTDIFU5ISIkXByqUexh873MhhowQA8tod2USQhced9vuDexvD8A11E
eDNv/D5U1wWSiAeulRC/rbV1b4spZgTn+FSIOHOJyNiBpHuyzWR9TQAO2nU2zL/F
sIAKrOQ/bGCxeWXvKkRyiUmDYl3sctNbf8DBJr4U3S0Y/QcXo3IMrvC3QXdRYGEA
J7aS5VqL2tfRFdk99BcIQNm05CysVewHRDbvfZmeWURZQztsEj+u1YTWhfQBRABc
KiYDKOMIs00LaUo1xfSAVVm0jA36i+G2IDy7oHJ3lSfArNNqYUXmDC3OgwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHrPqnmuBbgxS0FBg7RBkyxKZDUJMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZXMtcWVhNEZ1REZMUVVHRHRFR1RMRXBrTlFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAITadaxjbtlubXzlpibH
OisB9IFxwjxklClO5PJJJ2eSGjFpElN5OqcolJpVT5dy22l75ZOs6+sWQjXaZxTA
A9m6BwMIhwQ0bBuhdPNwTgO7e6gDa2jZdaoLgeclD7kGyUbM8sk/rXbbaWCo9f6v
4a3u48HKk6JL2pjKOjoJp5wrFtrVagxX/r0eXUeNR90029KE5IiRX+p948dlq6yR
NEgKUzgO977SlCqkqJFfkLrzDGVQLC2UgYZR9Zcoz9o/49sGkaniw5ogmtveRmWP
2S9gzI9TNpI040+hEHT5ZRGz2l9Zhs89oDJjRZNfNQPERnX55LjVG32/v0d1aoCl
DJs=
-----END CERTIFICATE-----
Generated at Thu May 1 11:13:46 2025 by rpki-client