Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q4hFXjUjF31CW0VjtP4Kxsokj1s.roa
File: q4hFXjUjF31CW0VjtP4Kxsokj1s.roa (raw, json)
Hash identifier: augE0jxBIE0w4pFVB49OTxrv/9Bq38V9cHAOpUBDpro=
Subject key identifier: AB:88:45:5E:35:23:17:7D:42:5B:45:63:B4:FE:0A:C6:CA:24:8F:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6C0E3436
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q4hFXjUjF31CW0VjtP4Kxsokj1s.roa
Signing time: Sat 19 Feb 2022 20:18:55 +0000
ROA not before: Sat 19 Feb 2022 20:18:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1812870198 (0x6c0e3436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 20:18:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab88455e3523177d425b4563b4fe0ac6ca248f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:35:1e:2c:f5:72:f9:3f:15:af:88:bb:cd:
da:3d:7c:cc:da:e5:a4:99:6e:a3:24:1f:db:18:88:
89:22:eb:6b:5f:63:ff:c0:dd:92:d5:a1:be:70:ca:
9c:c9:24:a3:49:e9:66:61:17:90:af:52:6e:3a:f6:
56:b4:e0:66:6b:cd:87:5e:a4:48:f9:13:4e:65:cf:
68:d4:bb:d4:b8:a6:0a:18:b4:0e:9b:2a:59:a9:ea:
79:de:32:49:4f:86:74:07:a8:02:d0:03:c0:07:e0:
9d:c7:e9:cb:78:04:57:3c:54:b0:4b:63:37:d0:83:
10:8f:8e:8d:2a:ac:4e:1f:29:d5:26:89:a6:1c:b0:
03:c0:8b:28:55:41:37:6f:89:b9:3c:bc:cb:de:6c:
31:e8:85:e5:bc:5f:21:de:0a:d7:00:16:00:17:98:
a8:af:26:8b:a0:74:63:e1:9f:95:e1:72:f4:6a:50:
42:e6:27:56:ae:d4:47:e9:a3:12:b1:d6:fa:b2:3c:
e3:64:15:ac:37:f6:e4:7c:36:58:40:51:76:4d:f6:
e6:fd:ba:d0:f3:48:a4:61:67:d6:70:1d:17:07:90:
e9:78:36:6c:51:7b:4e:3a:9c:ea:e7:2a:19:3a:cb:
67:63:9b:62:9c:2e:29:47:7e:04:c5:7e:05:ac:c6:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:88:45:5E:35:23:17:7D:42:5B:45:63:B4:FE:0A:C6:CA:24:8F:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q4hFXjUjF31CW0VjtP4Kxsokj1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:54:a1:5e:57:54:c0:71:f4:6d:97:25:55:3b:61:28:d6:61:
20:1e:a8:da:48:b1:61:80:b4:57:50:9d:7c:06:2e:27:73:29:
65:9e:01:b0:9a:55:1a:52:93:c4:06:8f:70:ad:58:f0:48:44:
57:b5:ab:9c:b3:f4:99:63:cd:85:30:d9:a0:85:c8:24:fb:70:
cd:33:9c:42:af:b4:c9:9f:1f:fc:59:a8:73:8a:89:f6:49:7e:
26:d6:b7:51:f2:27:06:de:14:6a:96:d0:02:0c:f7:5a:aa:7c:
1e:12:e0:e9:a8:1a:cc:48:e9:c6:36:af:b0:1e:c8:70:e5:41:
68:1f:f5:07:23:3d:0a:8f:c7:cf:89:44:03:8a:9b:33:c0:d6:
2b:8f:ba:96:0a:f0:f1:93:bc:fb:3c:1a:2f:79:16:8b:3a:7d:
fa:c4:98:ae:28:e7:28:b4:ab:8b:db:37:36:f5:e0:7e:6a:61:
c2:ea:15:16:68:13:ec:8c:d8:4d:96:7d:04:c2:e4:73:0c:44:
db:08:e2:ab:94:8a:71:38:90:25:60:e8:11:c1:6f:b8:a3:85:
da:af:a0:f3:24:0d:23:52:01:76:e4:97:ea:a0:57:de:27:d7:
12:ef:e0:3a:2b:61:14:29:13:42:c5:6b:f0:a8:40:e0:98:dc:
51:18:47:ec
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbA40NjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIx
OTIwMTg1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWI4ODQ1NWUzNTIz
MTc3ZDQyNWI0NTYzYjRmZTBhYzZjYTI0OGY1YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKMANR4s9XL5PxWviLvN2j18zNrlpJluoyQf2xiIiSLra19j
/8DdktWhvnDKnMkko0npZmEXkK9Sbjr2VrTgZmvNh16kSPkTTmXPaNS71LimChi0
DpsqWanqed4ySU+GdAeoAtADwAfgncfpy3gEVzxUsEtjN9CDEI+OjSqsTh8p1SaJ
phywA8CLKFVBN2+JuTy8y95sMeiF5bxfId4K1wAWABeYqK8mi6B0Y+GfleFy9GpQ
QuYnVq7UR+mjErHW+rI842QVrDf25Hw2WEBRdk325v260PNIpGFn1nAdFweQ6Xg2
bFF7Tjqc6ucqGTrLZ2ObYpwuKUd+BMV+BazG2ukCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSriEVeNSMXfUJbRWO0/grGyiSPWzAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3E0aEZYalVqRjMxQ1cwVmp0UDRLeHNva2oxcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAdVKFeV1TAcfRtlyVVO2Eo1mEgHqjaSLFhgLRX
UJ18Bi4ncyllngGwmlUaUpPEBo9wrVjwSERXtaucs/SZY82FMNmghcgk+3DNM5xC
r7TJnx/8Wahzion2SX4m1rdR8icG3hRqltACDPdaqnweEuDpqBrMSOnGNq+wHshw
5UFoH/UHIz0Kj8fPiUQDipszwNYrj7qWCvDxk7z7PBoveRaLOn36xJiuKOcotKuL
2zc29eB+amHC6hUWaBPsjNhNln0EwuRzDETbCOKrlIpxOJAlYOgRwW+4o4Xar6Dz
JA0jUgF25JfqoFfeJ9cS7+A6K2EUKRNCxWvwqEDgmNxRGEfs
-----END CERTIFICATE-----
Generated at Sat May 3 13:06:52 2025 by rpki-client