Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qTmeCSuliJBu4PlncTdVlwMfi4Y.roa
File: qTmeCSuliJBu4PlncTdVlwMfi4Y.roa (raw, json)
Hash identifier: yIX46n1gcQyW6PiwZBeOFQMZLx6lsSUgGWBcsZBD/C4=
Subject key identifier: A9:39:9E:09:2B:A5:88:90:6E:E0:F9:67:71:37:55:97:03:1F:8B:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899A0E0028AD353925BA8763BA73D0FE65
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qTmeCSuliJBu4PlncTdVlwMfi4Y.roa
Signing time: Fri 28 Jul 2023 01:12:35 +0000
ROA not before: Fri 28 Jul 2023 01:12:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9a:0e:00:28:ad:35:39:25:ba:87:63:ba:73:d0:fe:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 01:12:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9399e092ba588906ee0f96771375597031f8b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cc:6e:0f:d3:b3:81:ae:f2:79:e7:03:65:df:
2e:7e:a0:16:5c:f7:d8:42:cd:ae:3a:54:5e:89:9e:
6d:29:1f:44:6e:d1:ce:d2:e7:1b:59:5f:04:17:f7:
db:8b:4a:8f:96:ee:23:e3:ca:8a:3a:c3:e1:e1:f4:
b2:cd:ca:af:1e:eb:1c:1d:f3:a4:a8:e6:a2:20:ca:
d4:a7:87:d1:12:cc:a6:c3:af:da:8f:4b:0a:01:53:
b9:ce:5e:eb:94:b1:45:71:49:9c:fc:e1:b8:8e:e6:
62:26:a9:75:a8:02:9d:90:5f:78:f7:16:d3:eb:62:
23:49:b1:b5:78:1f:b2:7f:af:15:60:e7:1d:96:11:
ce:00:b0:da:89:71:20:bf:21:62:d0:5f:c7:e5:81:
60:c6:7a:31:ab:21:38:1c:4d:15:3d:d3:fe:8c:c6:
d9:0a:50:90:55:43:7a:5d:83:41:a5:bb:cf:9e:f6:
0c:4e:19:26:bb:3f:a8:d2:8a:8c:02:a5:4d:dc:19:
e6:ef:54:f9:1a:95:17:20:0f:56:0b:d4:e3:75:e1:
55:a0:7a:86:93:47:b6:00:8f:ab:4c:79:56:0d:ea:
9a:06:d1:50:c2:87:d8:c9:4a:15:68:60:fd:3c:8a:
7b:2a:7e:ef:76:21:db:57:73:e9:23:86:91:4a:dc:
89:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:39:9E:09:2B:A5:88:90:6E:E0:F9:67:71:37:55:97:03:1F:8B:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qTmeCSuliJBu4PlncTdVlwMfi4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:15:cd:a8:b0:2e:f1:8e:c2:b5:32:11:07:4a:48:ca:c3:fb:
37:04:2f:97:48:46:70:88:61:e6:22:54:29:52:05:a1:ea:ed:
cf:01:ae:4e:90:ca:c0:b4:b9:47:f3:f3:17:2e:a2:f1:8b:47:
67:ee:6d:8b:df:59:49:b0:94:4d:88:96:b3:76:71:5c:65:f2:
99:28:5a:8c:4d:56:be:4f:d2:26:b3:0b:bf:56:c1:75:a8:c4:
01:06:5a:fb:fe:12:cb:3a:bc:53:6f:ad:ac:66:5d:f9:ab:37:
39:49:ed:56:79:16:8a:8d:19:5a:f6:dc:e0:5e:e6:e4:fc:d4:
7b:66:45:90:79:cd:d7:a6:8a:44:32:ea:36:cc:b0:47:9d:c7:
32:23:27:b0:4c:02:09:42:04:67:dd:2e:a7:2d:17:0a:ea:e4:
d6:5d:0b:ed:6e:b0:c6:a5:2d:eb:1f:55:98:4b:17:93:c2:d0:
a6:b9:b3:9f:1d:8c:9c:fe:dc:47:16:44:a7:9b:b6:a5:05:e8:
d4:c2:9e:1e:0b:a1:86:63:ad:fa:83:39:17:a8:64:47:5b:9b:
db:9a:59:4f:90:78:bc:96:61:86:17:be:66:19:85:a5:f2:08:
fe:4d:a9:6a:7f:6a:45:a3:54:8b:d4:c3:14:a6:ca:b3:9b:66:
3d:d1:bb:e9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmaDgAorTU5JbqHY7pz0P5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI4MDExMjM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTM5OWUwOTJiYTU4ODkwNmVlMGY5Njc3MTM3NTU5NzAzMWY4Yjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMxuD9Ozga7yeecDZd8ufqAWXPfY
Qs2uOlReiZ5tKR9EbtHO0ucbWV8EF/fbi0qPlu4j48qKOsPh4fSyzcqvHuscHfOk
qOaiIMrUp4fREsymw6/aj0sKAVO5zl7rlLFFcUmc/OG4juZiJql1qAKdkF949xbT
62IjSbG1eB+yf68VYOcdlhHOALDaiXEgvyFi0F/H5YFgxnoxqyE4HE0VPdP+jMbZ
ClCQVUN6XYNBpbvPnvYMThkmuz+o0oqMAqVN3Bnm71T5GpUXIA9WC9TjdeFVoHqG
k0e2AI+rTHlWDeqaBtFQwofYyUoVaGD9PIp7Kn7vdiHbV3PpI4aRStyJIQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKk5ngkrpYiQbuD5Z3E3VZcDH4uGMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcVRtZUNTdWxpSkJ1NFBsbmNUZFZsd01maTRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEsVzaiwLvGOwrUyEQdK
SMrD+zcEL5dIRnCIYeYiVClSBaHq7c8Brk6QysC0uUfz8xcuovGLR2fubYvfWUmw
lE2IlrN2cVxl8pkoWoxNVr5P0iazC79WwXWoxAEGWvv+Ess6vFNvraxmXfmrNzlJ
7VZ5FoqNGVr23OBe5uT81HtmRZB5zdemikQy6jbMsEedxzIjJ7BMAglCBGfdLqct
Fwrq5NZdC+1usMalLesfVZhLF5PC0Ka5s58djJz+3EcWRKebtqUF6NTCnh4LoYZj
rfqDOReoZEdbm9uaWU+QeLyWYYYXvmYZhaXyCP5NqWp/akWjVIvUwxSmyrObZj3R
u+k=
-----END CERTIFICATE-----
Generated at Thu May 1 11:27:56 2025 by rpki-client