Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qKoiM6pg0Au9qxdMmiB8cmlgM-Y.roa
File: qKoiM6pg0Au9qxdMmiB8cmlgM-Y.roa (raw, json)
Hash identifier: eDWJMbzFHFypoY3IHxvwXS8CqKBVbyOJBpQBw7aMAz4=
Subject key identifier: A8:AA:22:33:AA:60:D0:0B:BD:AB:17:4C:9A:20:7C:72:69:60:33:E6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018543643FE9E6F9AE5A5EA320FA90E67C49
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qKoiM6pg0Au9qxdMmiB8cmlgM-Y.roa
Signing time: Sat 24 Dec 2022 09:08:41 +0000
ROA not before: Sat 24 Dec 2022 09:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:43:64:3f:e9:e6:f9:ae:5a:5e:a3:20:fa:90:e6:7c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 24 09:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8aa2233aa60d00bbdab174c9a207c72696033e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:b6:c0:53:8b:3d:70:cb:7b:98:0c:1a:20:
0d:ae:c2:06:3d:30:8b:72:70:7a:26:15:3a:af:b5:
be:b3:d4:78:14:3a:92:ef:43:ac:2c:05:5b:99:5b:
82:cb:16:7e:eb:a5:1f:5e:fc:60:57:f6:e7:f2:41:
d0:8e:67:aa:ca:b6:2b:5f:b7:24:82:e8:d6:30:90:
f0:cf:f5:f6:ca:88:85:90:6c:18:17:88:50:d4:b4:
98:cf:4e:79:17:be:7d:1b:0b:af:6e:c5:da:2e:8a:
0f:02:90:62:0d:f0:f7:20:b0:53:47:20:30:4f:e9:
4d:f5:78:d0:4c:5d:91:e4:a9:50:16:93:e5:a3:70:
4d:39:9d:bd:2b:d1:22:3e:f5:ba:ab:e7:dd:26:7f:
91:98:1b:7f:3d:32:f4:be:d9:b7:00:c9:2e:ec:be:
2a:e2:e5:e3:88:d4:ba:f6:4f:fd:86:7c:36:52:13:
0e:72:0d:ac:3c:ae:d6:1a:2b:9a:9f:4a:07:78:4a:
4f:ed:70:b0:c9:2a:9c:cf:c3:6a:bd:09:af:07:48:
3e:a8:3c:a0:db:57:69:d5:dd:ee:f5:2f:de:5c:b1:
94:59:ea:68:ed:0a:60:35:1a:80:3f:31:2c:0c:df:
64:e5:4e:7d:67:84:91:95:8a:86:b6:c0:6f:e4:c6:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AA:22:33:AA:60:D0:0B:BD:AB:17:4C:9A:20:7C:72:69:60:33:E6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qKoiM6pg0Au9qxdMmiB8cmlgM-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:f7:e5:9d:f7:71:c6:50:c2:10:6d:67:cb:a5:ff:de:e7:24:
ba:5a:2b:7a:ee:f3:ae:f6:14:24:f5:5b:a0:b3:a7:37:00:da:
c0:c2:47:17:d9:a3:b5:0c:26:9e:55:7f:18:be:f5:c0:38:d4:
9e:69:03:80:06:36:73:33:3d:8b:5c:c4:41:e7:31:bb:4c:17:
7d:e8:10:d5:7d:50:70:01:58:ec:0a:90:c9:ff:53:ce:cd:e9:
72:4b:aa:27:00:98:9d:63:79:3d:71:0b:d0:da:c2:1b:65:cb:
db:2e:30:7d:2a:17:2b:18:18:52:0f:72:c0:49:47:84:1f:16:
c1:11:c9:e8:0e:09:a4:dd:b7:19:2e:69:e5:b3:b7:45:7d:07:
a5:fa:38:0e:ad:83:c1:da:7e:04:a0:52:3e:80:3f:a3:28:75:
f8:64:49:c7:97:98:c9:6f:24:36:10:ad:35:ea:59:a4:03:58:
89:69:48:7c:df:ae:d2:f8:cc:fb:1e:8c:f5:b6:16:7a:33:61:
7e:3b:49:97:97:9f:ce:86:07:17:e6:73:ca:c0:e2:84:d6:2a:
23:26:4d:b1:24:da:0f:c9:52:ef:40:51:a8:82:1c:31:b7:ae:
a5:ca:30:90:4a:77:32:7b:4f:da:f6:28:6c:f9:8d:5b:fa:c5:
5b:c9:10:a4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVDZD/p5vmuWl6jIPqQ5nxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI0MDkwODQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGFhMjIzM2FhNjBkMDBiYmRhYjE3NGM5YTIwN2M3MjY5NjAzM2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyW2wFOLPXDLe5gMGiANrsIGPTCL
cnB6JhU6r7W+s9R4FDqS70OsLAVbmVuCyxZ+66UfXvxgV/bn8kHQjmeqyrYrX7ck
gujWMJDwz/X2yoiFkGwYF4hQ1LSYz055F759GwuvbsXaLooPApBiDfD3ILBTRyAw
T+lN9XjQTF2R5KlQFpPlo3BNOZ29K9EiPvW6q+fdJn+RmBt/PTL0vtm3AMku7L4q
4uXjiNS69k/9hnw2UhMOcg2sPK7WGiuan0oHeEpP7XCwySqcz8NqvQmvB0g+qDyg
21dp1d3u9S/eXLGUWepo7QpgNRqAPzEsDN9k5U59Z4SRlYqGtsBv5MbXcQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKiqIjOqYNALvasXTJogfHJpYDPmMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcUtvaU02cGcwQXU5cXhkTW1pQjhjbWxnTS1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEj35Z33ccZQwhBtZ8ul
/97nJLpaK3ru8672FCT1W6CzpzcA2sDCRxfZo7UMJp5Vfxi+9cA41J5pA4AGNnMz
PYtcxEHnMbtMF33oENV9UHABWOwKkMn/U87N6XJLqicAmJ1jeT1xC9Dawhtly9su
MH0qFysYGFIPcsBJR4QfFsERyegOCaTdtxkuaeWzt0V9B6X6OA6tg8HafgSgUj6A
P6ModfhkSceXmMlvJDYQrTXqWaQDWIlpSHzfrtL4zPsejPW2FnozYX47SZeXn86G
Bxfmc8rA4oTWKiMmTbEk2g/JUu9AUaiCHDG3rqXKMJBKdzJ7T9r2KGz5jVv6xVvJ
EKQ=
-----END CERTIFICATE-----
Generated at Sat May 3 20:07:51 2025 by rpki-client