Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qOi7xCYw-m-04zgnVzyXA4fC6UA.roa
File: qOi7xCYw-m-04zgnVzyXA4fC6UA.roa (raw, json)
Hash identifier: SbP7syZJdIe8cF5x63vSSMj22XPasfvL24BK5CWQGvA=
Subject key identifier: A8:E8:BB:C4:26:30:FA:6F:B4:E3:38:27:57:3C:97:03:87:C2:E9:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185A34FA788781C4D79963A3B75FA5891D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qOi7xCYw-m-04zgnVzyXA4fC6UA.roa
Signing time: Thu 12 Jan 2023 00:09:44 +0000
ROA not before: Thu 12 Jan 2023 00:09:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a3:4f:a7:88:78:1c:4d:79:96:3a:3b:75:fa:58:91:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 12 00:09:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8e8bbc42630fa6fb4e33827573c970387c2e940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:6f:9c:00:cf:1e:80:d2:d1:c4:4a:07:26:
ba:1d:31:6d:a4:54:8b:3b:ba:80:16:0f:e4:23:a2:
19:6e:d6:d0:f2:2a:fb:1a:c3:6c:1e:2c:12:10:26:
4d:e5:42:c8:ec:e6:75:05:d5:b1:8e:87:d0:d3:04:
31:cc:d2:3e:e3:22:76:0f:f3:cf:31:5a:66:3c:f8:
72:6e:4c:4e:93:bb:3f:2a:ab:78:7a:bc:7d:b6:2e:
f3:b5:63:fb:d2:3c:e5:ac:c5:ca:7a:f2:24:3c:75:
1a:8c:b9:b5:10:0a:8b:9b:54:43:85:28:c0:00:37:
83:c3:79:01:6f:24:e0:52:4c:37:ee:8b:4e:26:a7:
90:7f:1e:e9:08:15:65:95:33:24:b3:9e:0b:85:9b:
ef:eb:5b:4f:7f:48:11:51:97:97:7a:73:ef:f7:05:
ee:aa:9f:aa:c5:2b:6b:c4:4d:79:3f:10:e6:0a:84:
ec:83:4b:9c:e1:e4:85:54:44:98:24:3d:ea:4e:98:
a8:09:68:41:4a:b1:22:99:c0:16:28:9e:c2:c7:1b:
60:87:27:90:c7:61:7e:9e:8f:d4:ac:2f:18:fe:ae:
e9:57:92:7a:9b:e8:52:ad:ac:66:b5:b5:30:69:ba:
59:b1:4c:4b:1d:5f:4e:3d:68:d2:0a:c1:7a:c1:5d:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E8:BB:C4:26:30:FA:6F:B4:E3:38:27:57:3C:97:03:87:C2:E9:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qOi7xCYw-m-04zgnVzyXA4fC6UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:7d:ae:25:61:56:23:1a:83:a8:b0:ce:65:8c:f1:ca:31:42:
75:be:a1:65:1f:88:4b:2a:9a:39:e3:52:f7:88:94:1d:fb:3e:
04:01:e6:0f:d7:04:b8:2d:0b:8b:2a:ce:41:7a:28:00:1b:ef:
36:0e:2d:a4:ba:42:6c:da:ba:bd:6a:3d:c8:f7:4e:34:96:1e:
24:5e:40:1d:30:d4:d1:b6:04:ce:16:9c:43:ed:57:c4:c0:39:
ad:34:b6:e5:ad:36:16:e2:42:7d:23:9b:08:54:af:a1:4f:22:
d6:26:20:16:83:86:ea:22:a5:b0:8a:15:e8:65:8b:91:d4:af:
c7:b1:cb:be:02:dd:0d:f1:da:98:46:bb:f0:b5:b4:d3:60:05:
14:9a:05:d1:1d:df:8c:bb:d6:a5:88:6b:0c:30:2d:11:72:4d:
4e:84:c3:5c:6d:b8:0e:d8:33:73:ee:b5:34:ba:84:1d:f3:92:
83:ef:42:19:4e:a6:14:84:e5:4c:a1:37:41:45:a5:59:c4:db:
08:a2:6a:c2:43:84:8c:90:64:8e:45:34:2d:0e:98:93:61:8f:
07:7f:74:53:17:b1:52:b2:6d:1a:4f:56:d5:37:f5:d5:6f:9c:
72:fc:7b:e1:ad:29:43:b8:01:68:be:9a:14:4c:c0:63:7d:de:
dd:7c:b1:19
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWjT6eIeBxNeZY6O3X6WJHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTEyMDAwOTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGU4YmJjNDI2MzBmYTZmYjRlMzM4Mjc1NzNjOTcwMzg3YzJlOTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolZvnADPHoDS0cRKBya6HTFtpFSL
O7qAFg/kI6IZbtbQ8ir7GsNsHiwSECZN5ULI7OZ1BdWxjofQ0wQxzNI+4yJ2D/PP
MVpmPPhybkxOk7s/Kqt4erx9ti7ztWP70jzlrMXKevIkPHUajLm1EAqLm1RDhSjA
ADeDw3kBbyTgUkw37otOJqeQfx7pCBVllTMks54LhZvv61tPf0gRUZeXenPv9wXu
qp+qxStrxE15PxDmCoTsg0uc4eSFVESYJD3qTpioCWhBSrEimcAWKJ7CxxtghyeQ
x2F+no/UrC8Y/q7pV5J6m+hSraxmtbUwabpZsUxLHV9OPWjSCsF6wV0K2QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKjou8QmMPpvtOM4J1c8lwOHwulAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcU9pN3hDWXctbS0wNHpnblZ6eVhBNGZDNlVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEx9riVhViMag6iwzmWM
8coxQnW+oWUfiEsqmjnjUveIlB37PgQB5g/XBLgtC4sqzkF6KAAb7zYOLaS6Qmza
ur1qPcj3TjSWHiReQB0w1NG2BM4WnEPtV8TAOa00tuWtNhbiQn0jmwhUr6FPItYm
IBaDhuoipbCKFehli5HUr8exy74C3Q3x2phGu/C1tNNgBRSaBdEd34y71qWIawww
LRFyTU6Ew1xtuA7YM3PutTS6hB3zkoPvQhlOphSE5UyhN0FFpVnE2wiiasJDhIyQ
ZI5FNC0OmJNhjwd/dFMXsVKybRpPVtU39dVvnHL8e+GtKUO4AWi+mhRMwGN93t18
sRk=
-----END CERTIFICATE-----
Generated at Sun May 4 02:34:23 2025 by rpki-client