Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qFWKNgJpZCLR0emqtRurUFie8NU.roa
File: qFWKNgJpZCLR0emqtRurUFie8NU.roa (raw, json)
Hash identifier: 3N6Z2Er9AtY6PvVb0TNRxhzGHzNY2dWY/UnCcyhLr/8=
Subject key identifier: A8:55:8A:36:02:69:64:22:D1:D1:E9:AA:B5:1B:AB:50:58:9E:F0:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6FD92CB6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qFWKNgJpZCLR0emqtRurUFie8NU.roa
Signing time: Sat 05 Mar 2022 09:09:41 +0000
ROA not before: Sat 05 Mar 2022 09:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1876503734 (0x6fd92cb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 09:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8558a3602696422d1d1e9aab51bab50589ef0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:76:05:02:0c:67:6e:ed:94:85:01:1c:aa:
e0:81:3f:9a:db:c7:d8:e8:68:8a:61:ab:af:5e:a0:
9c:1b:37:8d:12:ae:12:c5:11:85:f0:ee:d6:49:25:
7f:0d:7f:b0:86:65:a1:65:63:ff:51:40:34:22:6f:
a5:1f:c6:97:e5:1e:46:41:5f:7a:ad:9f:47:dd:e5:
4e:7b:9e:28:31:74:c7:ee:69:04:7f:39:55:87:34:
ed:08:ee:93:22:0f:d3:b1:dc:e7:83:4a:11:99:ce:
c5:78:fd:f8:44:ab:37:3f:4a:69:48:a3:b2:b9:58:
90:a5:ef:47:25:0c:b8:32:70:5b:9f:b8:d0:65:e7:
b8:cd:86:e4:aa:ac:28:c6:9b:04:3f:81:b4:33:c8:
30:84:64:11:17:83:07:4f:5d:b8:9a:e0:ff:2a:a1:
e5:3c:de:8e:89:a1:af:b7:a5:97:d8:ac:75:5d:27:
d6:18:f6:3a:b2:c6:7c:93:d7:4f:f7:d5:a3:9b:42:
e0:1a:37:83:46:c2:a0:5a:f5:51:17:c8:07:b7:8a:
9c:17:89:06:eb:58:56:3e:94:75:db:6e:46:9d:17:
68:50:6b:4f:44:06:02:94:f0:4f:55:1c:d0:f0:61:
c6:35:51:c1:34:12:03:e8:f8:b2:bf:1d:2d:08:b7:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:55:8A:36:02:69:64:22:D1:D1:E9:AA:B5:1B:AB:50:58:9E:F0:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qFWKNgJpZCLR0emqtRurUFie8NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:94:84:1b:9c:93:4f:f8:d3:f4:be:fa:7b:f3:21:ff:70:c7:
99:22:ae:4a:0f:5d:f3:0f:16:4d:35:73:10:e8:26:78:02:5d:
50:a6:d6:ac:4d:28:a9:3f:96:ce:71:ea:10:05:ee:3a:d4:36:
2a:b3:7b:70:1e:4f:77:14:f4:c1:15:af:ef:09:c2:aa:64:04:
9e:6d:26:98:c1:de:46:40:a8:59:f3:bf:9e:6d:97:13:06:d6:
5f:29:e8:18:22:25:ce:10:b9:c5:1a:fa:cf:da:d2:33:54:85:
c7:4d:9f:55:d0:ab:3d:35:91:5b:39:0f:51:35:81:e8:8d:62:
26:48:ec:6c:18:50:6a:31:d7:dd:aa:16:f9:a7:a4:9c:cc:80:
09:50:8b:95:8c:a7:39:de:69:94:1c:e7:c7:9e:16:4b:7f:c3:
39:c6:f6:cd:22:6f:b4:a9:c7:db:da:64:c2:e8:56:f1:af:d8:
be:49:63:02:43:27:70:a3:f7:f0:5c:49:83:ab:44:35:e4:07:
37:c8:e0:34:ea:64:52:56:87:d7:c9:0c:69:be:b8:a4:c3:66:
01:aa:64:a7:d3:60:8a:5c:fa:01:83:8d:d8:38:64:8e:df:a9:
1f:ab:9c:38:6f:93:74:15:99:e6:aa:0e:e2:52:0d:e7:5a:f2:
de:cb:e2:2d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEb9kstjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMw
NTA5MDk0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTg1NThhMzYwMjY5
NjQyMmQxZDFlOWFhYjUxYmFiNTA1ODllZjBkNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK89dgUCDGdu7ZSFARyq4IE/mtvH2OhoimGrr16gnBs3jRKu
EsURhfDu1kklfw1/sIZloWVj/1FANCJvpR/Gl+UeRkFfeq2fR93lTnueKDF0x+5p
BH85VYc07QjukyIP07Hc54NKEZnOxXj9+ESrNz9KaUijsrlYkKXvRyUMuDJwW5+4
0GXnuM2G5KqsKMabBD+BtDPIMIRkEReDB09duJrg/yqh5Tzejomhr7ell9isdV0n
1hj2OrLGfJPXT/fVo5tC4Bo3g0bCoFr1URfIB7eKnBeJButYVj6UddtuRp0XaFBr
T0QGApTwT1Uc0PBhxjVRwTQSA+j4sr8dLQi3DqsCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSoVYo2AmlkItHR6aq1G6tQWJ7w1TAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3FGV0tOZ0pwWkNMUjBlbXF0UnVyVUZpZThOVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBSlIQbnJNP+NP0vvp78yH/cMeZIq5KD13zDxZN
NXMQ6CZ4Al1QptasTSipP5bOceoQBe461DYqs3twHk93FPTBFa/vCcKqZASebSaY
wd5GQKhZ87+ebZcTBtZfKegYIiXOELnFGvrP2tIzVIXHTZ9V0Ks9NZFbOQ9RNYHo
jWImSOxsGFBqMdfdqhb5p6SczIAJUIuVjKc53mmUHOfHnhZLf8M5xvbNIm+0qcfb
2mTC6Fbxr9i+SWMCQydwo/fwXEmDq0Q15Ac3yOA06mRSVofXyQxpvrikw2YBqmSn
02CKXPoBg43YOGSO36kfq5w4b5N0FZnmqg7iUg3nWvLey+It
-----END CERTIFICATE-----
Generated at Thu May 1 08:54:02 2025 by rpki-client