Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q8qKPqZQGcRGXMiasmaBzrvIN7M.roa
File: q8qKPqZQGcRGXMiasmaBzrvIN7M.roa (raw, json)
Hash identifier: HBQc2fgIm5+6UVQkwUXM/Dlkff8q5HCdY8Q2VX6pLyU=
Subject key identifier: AB:CA:8A:3E:A6:50:19:C4:46:5C:C8:9A:B2:66:81:CE:BB:C8:37:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851017CCE3814FED70F611E4BC28BAB8B1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q8qKPqZQGcRGXMiasmaBzrvIN7M.roa
Signing time: Wed 14 Dec 2022 10:04:33 +0000
ROA not before: Wed 14 Dec 2022 10:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:1017:991b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:10:17:cc:e3:81:4f:ed:70:f6:11:e4:bc:28:ba:b8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 10:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abca8a3ea65019c4465cc89ab26681cebbc837b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:16:e0:e5:64:36:70:a2:58:5b:43:9d:eb:
9b:67:05:40:75:8d:22:b4:b3:d8:09:1d:b2:07:86:
34:a6:76:9d:bb:03:a5:d3:a7:2b:05:0a:6c:6b:bf:
24:29:b3:6c:39:13:83:9b:9d:82:4d:c5:2c:d7:98:
9f:79:ae:af:cd:00:01:05:c5:6d:28:2e:38:fd:de:
45:aa:9b:eb:d6:93:ae:fa:6f:38:7b:82:d3:45:f4:
c4:9c:d4:74:fa:8c:dc:66:5b:54:da:6b:f4:ef:96:
b8:81:dd:3a:13:8a:30:16:7f:24:cf:34:08:f2:3d:
51:09:8d:81:f3:18:15:39:c8:71:ab:f5:54:fd:7f:
c4:84:a8:be:b5:6a:f0:f8:40:1f:4f:41:61:1a:97:
ad:e2:95:10:88:2a:15:62:15:e3:99:72:78:00:17:
14:c2:3e:e2:1b:a8:93:03:78:b9:e6:59:98:89:3e:
4e:32:60:34:04:f9:19:c6:ea:1d:54:50:7b:1f:fc:
19:b2:13:4e:cc:a5:c3:15:98:0b:91:43:2a:fb:6c:
15:68:4a:c2:9e:4e:cf:e6:8d:2b:16:be:e7:3f:6c:
78:da:a4:0a:44:8b:b1:df:00:a2:ff:d5:5b:a4:d2:
4f:e6:6f:49:54:eb:5b:35:1d:19:6b:05:43:13:30:
c6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CA:8A:3E:A6:50:19:C4:46:5C:C8:9A:B2:66:81:CE:BB:C8:37:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q8qKPqZQGcRGXMiasmaBzrvIN7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:8c:af:74:ac:9b:01:1d:f4:25:c4:fe:f1:0a:2d:7a:d1:b8:
14:23:cb:e2:26:66:06:6c:fe:85:94:a6:d8:9e:b8:ac:32:1f:
c3:3c:76:8c:56:af:97:71:f6:94:91:af:43:9e:c3:41:72:60:
64:6d:36:4a:a0:7a:df:6f:ce:9f:b8:b6:11:09:96:a8:1e:25:
c9:10:ca:59:53:5d:a5:67:cf:f4:70:46:79:96:27:71:18:d8:
c3:cd:92:fb:4f:56:4e:de:ec:f3:f4:7d:55:28:f0:c4:b7:52:
6c:63:74:1c:6c:d7:9c:8a:da:f7:53:4c:00:3a:65:87:db:34:
8d:57:9a:80:11:3e:81:47:a9:f0:b7:89:61:62:ff:b2:01:a7:
8d:55:df:0f:39:e2:30:b6:87:40:9f:b1:d2:95:35:55:c6:72:
f3:72:4f:cb:ab:13:ff:60:f4:b6:84:1e:cb:f2:14:52:c0:7b:
cd:56:eb:20:fb:c8:fa:b6:4d:9a:8e:ee:0f:41:c8:96:cc:21:
ba:ca:d7:fb:38:05:d8:47:1c:78:fd:2c:b7:cb:32:80:5e:15:
80:bc:55:6c:1f:25:03:8f:6a:27:6a:d2:e3:b5:e9:ee:47:48:
53:56:fb:c2:93:f5:51:0e:98:0d:2a:7d:c7:aa:a1:c8:36:60:
8a:38:eb:76
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUQF8zjgU/tcPYR5LwourixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE0MTAwNDMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmNhOGEzZWE2NTAxOWM0NDY1Y2M4OWFiMjY2ODFjZWJiYzgzN2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpEW4OVkNnCiWFtDneubZwVAdY0i
tLPYCR2yB4Y0pnaduwOl06crBQpsa78kKbNsORODm52CTcUs15ifea6vzQABBcVt
KC44/d5Fqpvr1pOu+m84e4LTRfTEnNR0+ozcZltU2mv075a4gd06E4owFn8kzzQI
8j1RCY2B8xgVOchxq/VU/X/EhKi+tWrw+EAfT0FhGpet4pUQiCoVYhXjmXJ4ABcU
wj7iG6iTA3i55lmYiT5OMmA0BPkZxuodVFB7H/wZshNOzKXDFZgLkUMq+2wVaErC
nk7P5o0rFr7nP2x42qQKRIux3wCi/9VbpNJP5m9JVOtbNR0ZawVDEzDGbQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKvKij6mUBnERlzImrJmgc67yDezMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcThxS1BxWlFHY1JHWE1pYXNtYUJ6cnZJTjdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHCMr3SsmwEd9CXE/vEK
LXrRuBQjy+ImZgZs/oWUptieuKwyH8M8doxWr5dx9pSRr0Oew0FyYGRtNkqget9v
zp+4thEJlqgeJckQyllTXaVnz/RwRnmWJ3EY2MPNkvtPVk7e7PP0fVUo8MS3Umxj
dBxs15yK2vdTTAA6ZYfbNI1XmoARPoFHqfC3iWFi/7IBp41V3w854jC2h0CfsdKV
NVXGcvNyT8urE/9g9LaEHsvyFFLAe81W6yD7yPq2TZqO7g9ByJbMIbrK1/s4BdhH
HHj9LLfLMoBeFYC8VWwfJQOPaidq0uO16e5HSFNW+8KT9VEOmA0qfceqocg2YIo4
63Y=
-----END CERTIFICATE-----
Generated at Thu May 1 01:26:41 2025 by rpki-client