Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qLI4ikClW3G6SmVxIVSRbvHRy7o.roa
File: qLI4ikClW3G6SmVxIVSRbvHRy7o.roa (raw, json)
Hash identifier: WZX0LxrYyONj3eg8hy33PMYpRUqH5maZyhK2KbU97/E=
Subject key identifier: A8:B2:38:8A:40:A5:5B:71:BA:4A:65:71:21:54:91:6E:F1:D1:CB:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884BBF3F529EB92E2152FE0772715D9421
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qLI4ikClW3G6SmVxIVSRbvHRy7o.roa
Signing time: Wed 24 May 2023 03:13:24 +0000
ROA not before: Wed 24 May 2023 03:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4b:bf:3f:52:9e:b9:2e:21:52:fe:07:72:71:5d:94:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 03:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8b2388a40a55b71ba4a65712154916ef1d1cbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ef:5a:af:48:92:4d:60:99:00:93:ef:69:41:
ad:79:16:aa:0b:7b:f3:c1:f7:be:83:4e:83:4f:e5:
07:79:97:93:51:59:53:17:33:1e:5a:1a:b0:aa:6f:
0d:3e:ba:56:d9:a3:aa:7a:33:e4:2b:82:93:db:3f:
96:29:2c:0f:8c:ab:d2:af:a5:2c:aa:1b:f5:60:ee:
d4:c0:2c:f7:7f:8d:38:8c:4b:cb:bd:9c:60:29:ad:
b6:ed:ff:8d:a9:2b:f9:27:2e:73:11:c6:3e:66:26:
c5:07:72:4a:0f:7f:da:4e:3d:fa:bb:46:d9:62:26:
34:56:38:c3:07:81:08:92:af:b6:f6:08:90:7c:81:
67:67:de:4e:23:20:43:6f:0b:c8:b0:5c:86:c3:d7:
cf:b3:76:da:85:1e:c2:e2:42:1e:6b:d0:9f:b0:75:
73:1a:21:61:01:4b:ec:22:e0:dd:b8:35:cc:04:c6:
50:0b:e8:e3:62:29:45:19:1a:b9:bd:19:7a:8a:a5:
c2:90:f9:54:6d:2b:6e:8e:f3:12:bd:ca:53:c4:85:
99:a5:9f:df:38:ae:67:59:a2:90:06:1b:f0:a1:47:
27:7c:f2:52:77:d7:17:9c:00:42:66:c1:29:d5:f2:
aa:5b:9f:20:7c:24:5b:38:d1:99:5b:d3:3a:cc:4b:
ef:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B2:38:8A:40:A5:5B:71:BA:4A:65:71:21:54:91:6E:F1:D1:CB:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qLI4ikClW3G6SmVxIVSRbvHRy7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:d1:ef:24:2f:c6:fb:d9:a8:2d:0f:17:2f:2a:7d:b7:6c:c8:
5b:51:c3:38:f1:9e:e2:0f:ce:1a:c8:c7:21:c8:25:d5:40:5c:
ed:d9:ab:88:95:84:f9:01:db:ca:05:5d:84:0b:af:09:f0:c2:
4f:76:a9:b6:1a:87:51:e7:8f:8c:e5:a8:c7:18:2e:75:c5:4a:
8b:54:78:a7:9a:c1:25:77:15:28:d8:b2:4c:07:80:59:08:d3:
37:82:32:49:ad:e7:06:24:35:6d:a4:d1:fc:de:01:40:5d:05:
27:ce:e2:8b:2e:61:ff:47:7f:04:50:eb:73:47:42:0b:ad:62:
87:da:98:1a:8f:b5:60:c7:25:d3:a5:7a:c0:c5:db:92:d0:67:
97:c8:88:cc:10:18:9f:fc:d4:73:c0:da:64:1b:cc:08:2d:2c:
e2:59:b5:ca:8b:1f:b0:9d:13:56:31:68:e9:11:84:23:8a:58:
fb:03:95:9c:2a:6b:72:d0:98:50:b7:91:fe:db:83:0e:ef:f3:
92:e7:68:04:01:1e:08:36:52:66:dd:04:ca:db:b9:f4:f6:ec:
93:03:be:b1:a5:8c:b6:0e:c6:e5:96:ee:d7:f2:d5:31:9c:3d:
d6:86:72:00:64:65:8b:cd:c8:fb:27:e7:28:f2:68:a0:d4:96:
ed:74:92:68
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhLvz9SnrkuIVL+B3JxXZQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI0MDMxMzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGIyMzg4YTQwYTU1YjcxYmE0YTY1NzEyMTU0OTE2ZWYxZDFjYmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO9ar0iSTWCZAJPvaUGteRaqC3vz
wfe+g06DT+UHeZeTUVlTFzMeWhqwqm8NPrpW2aOqejPkK4KT2z+WKSwPjKvSr6Us
qhv1YO7UwCz3f404jEvLvZxgKa227f+NqSv5Jy5zEcY+ZibFB3JKD3/aTj36u0bZ
YiY0VjjDB4EIkq+29giQfIFnZ95OIyBDbwvIsFyGw9fPs3bahR7C4kIea9CfsHVz
GiFhAUvsIuDduDXMBMZQC+jjYilFGRq5vRl6iqXCkPlUbStujvMSvcpTxIWZpZ/f
OK5nWaKQBhvwoUcnfPJSd9cXnABCZsEp1fKqW58gfCRbONGZW9M6zEvvXwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKiyOIpApVtxukplcSFUkW7x0cu6MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcUxJNGlrQ2xXM0c2U21WeElWU1JidkhSeTdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC/R7yQvxvvZqC0PFy8q
fbdsyFtRwzjxnuIPzhrIxyHIJdVAXO3Zq4iVhPkB28oFXYQLrwnwwk92qbYah1Hn
j4zlqMcYLnXFSotUeKeawSV3FSjYskwHgFkI0zeCMkmt5wYkNW2k0fzeAUBdBSfO
4osuYf9HfwRQ63NHQgutYofamBqPtWDHJdOlesDF25LQZ5fIiMwQGJ/81HPA2mQb
zAgtLOJZtcqLH7CdE1YxaOkRhCOKWPsDlZwqa3LQmFC3kf7bgw7v85LnaAQBHgg2
UmbdBMrbufT27JMDvrGljLYOxuWW7tfy1TGcPdaGcgBkZYvNyPsn5yjyaKDUlu10
kmg=
-----END CERTIFICATE-----
Generated at Thu May 1 01:15:14 2025 by rpki-client