Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qMd3A5UjVBuYcKpNKARk2tmEn-E.roa
File: qMd3A5UjVBuYcKpNKARk2tmEn-E.roa (raw, json)
Hash identifier: G2JauqouJNMubMN6QkxswmTCEUF4eeEXpqW/GMqyMvo=
Subject key identifier: A8:C7:77:03:95:23:54:1B:98:70:AA:4D:28:04:64:DA:D9:84:9F:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018639F2F20299D546C601EF92E897112126
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qMd3A5UjVBuYcKpNKARk2tmEn-E.roa
Signing time: Fri 10 Feb 2023 06:11:08 +0000
ROA not before: Fri 10 Feb 2023 06:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:39:f2:f2:02:99:d5:46:c6:01:ef:92:e8:97:11:21:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 06:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8c777039523541b9870aa4d280464dad9849fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:99:3e:a0:82:03:96:70:0f:93:6e:16:b2:
06:4a:bd:43:2a:83:e5:a0:1a:f7:12:26:a8:f3:ea:
0e:22:5e:e2:0a:49:4c:69:15:6d:3e:bd:fd:24:b3:
c9:98:4a:1b:9e:ae:61:60:cb:86:39:ae:31:b0:e8:
7f:9a:43:ef:eb:05:0f:00:6d:49:51:0f:65:7e:e6:
cc:2d:49:f9:73:88:67:5c:a8:65:6c:15:e6:d6:24:
1a:ea:1b:44:9f:4b:a6:36:74:2f:0a:07:aa:ef:07:
33:df:f9:bd:14:de:9f:a3:79:d1:36:83:38:9a:75:
3b:c3:aa:f5:be:67:01:e9:de:63:c7:27:53:13:db:
5b:08:44:63:dd:b5:40:4d:90:d2:c2:50:51:0c:92:
93:a3:1f:1e:df:a6:e1:54:ed:d0:3b:bb:25:3d:86:
12:9d:c6:59:26:20:97:9c:c5:6d:1d:01:ed:ba:a6:
38:2c:1b:94:a0:24:7d:d6:51:a6:45:89:9f:e3:fc:
ef:62:e6:a1:53:09:fe:cc:70:96:61:d4:84:da:e8:
86:1a:e3:2a:05:1a:a1:98:67:d4:9d:5b:17:97:b6:
9b:26:86:a3:0b:91:07:aa:43:69:62:b9:15:f0:e9:
20:4e:04:f4:e8:0a:e0:d0:a3:6a:5b:a6:a0:14:2f:
78:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C7:77:03:95:23:54:1B:98:70:AA:4D:28:04:64:DA:D9:84:9F:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qMd3A5UjVBuYcKpNKARk2tmEn-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:c9:68:99:52:f3:87:50:bc:3a:f7:a5:dd:8f:93:2a:5e:ec:
16:a3:ae:a4:11:ab:49:dd:b5:07:aa:74:10:27:08:2e:3a:07:
8b:29:4c:d0:9f:79:f5:c8:8e:4d:e2:eb:36:aa:44:39:9d:ec:
a8:20:7c:77:be:cd:21:4f:be:ff:ec:52:62:92:d0:c3:d7:ca:
d8:1f:23:79:b5:2d:79:1e:80:39:3c:bf:57:97:5f:62:ae:3b:
23:83:ff:c1:6f:9f:c3:1e:30:18:f9:b1:d8:33:cc:21:fe:34:
3e:94:15:ab:8b:28:fb:ec:96:3f:81:40:c0:52:01:81:c1:4d:
65:ba:b4:ba:bb:10:f2:92:6f:05:06:c9:49:32:63:83:13:4d:
f1:0d:9d:e1:34:bd:a3:52:a5:44:66:35:90:18:89:e0:6a:fd:
e1:b9:3a:b3:7a:2c:d0:12:80:0d:f2:aa:be:c8:04:c5:53:8e:
bb:39:21:91:4c:78:be:91:de:eb:67:33:d9:2e:80:62:4c:f0:
b4:62:a5:e3:03:4f:4e:04:e6:72:97:c9:78:f1:95:80:14:51:
e6:72:e3:15:ee:62:c2:12:c7:b3:4f:42:74:15:82:c7:14:26:
8b:9c:fb:ae:9a:d3:16:0b:19:4d:a1:4e:dc:a8:2e:00:a1:f2:
dd:a0:cc:bf
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYY58vICmdVGxgHvkuiXESEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjEwMDYxMTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGM3NzcwMzk1MjM1NDFiOTg3MGFhNGQyODA0NjRkYWQ5ODQ5ZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSmZPqCCA5ZwD5NuFrIGSr1DKoPl
oBr3Eiao8+oOIl7iCklMaRVtPr39JLPJmEobnq5hYMuGOa4xsOh/mkPv6wUPAG1J
UQ9lfubMLUn5c4hnXKhlbBXm1iQa6htEn0umNnQvCgeq7wcz3/m9FN6fo3nRNoM4
mnU7w6r1vmcB6d5jxydTE9tbCERj3bVATZDSwlBRDJKTox8e36bhVO3QO7slPYYS
ncZZJiCXnMVtHQHtuqY4LBuUoCR91lGmRYmf4/zvYuahUwn+zHCWYdSE2uiGGuMq
BRqhmGfUnVsXl7abJoajC5EHqkNpYrkV8OkgTgT06Arg0KNqW6agFC94cQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKjHdwOVI1QbmHCqTSgEZNrZhJ/hMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcU1kM0E1VWpWQnVZY0twTktBUmsydG1Fbi1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADLJaJlS84dQvDr3pd2P
kype7BajrqQRq0ndtQeqdBAnCC46B4spTNCfefXIjk3i6zaqRDmd7KggfHe+zSFP
vv/sUmKS0MPXytgfI3m1LXkegDk8v1eXX2KuOyOD/8Fvn8MeMBj5sdgzzCH+ND6U
FauLKPvslj+BQMBSAYHBTWW6tLq7EPKSbwUGyUkyY4MTTfENneE0vaNSpURmNZAY
ieBq/eG5OrN6LNASgA3yqr7IBMVTjrs5IZFMeL6R3utnM9kugGJM8LRipeMDT04E
5nKXyXjxlYAUUeZy4xXuYsISx7NPQnQVgscUJouc+66a0xYLGU2hTtyoLgCh8t2g
zL8=
-----END CERTIFICATE-----
Generated at Sat May 3 10:41:12 2025 by rpki-client