Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qTnyNyOHfXhPQgJZbiRh0dhK1tQ.roa
File: qTnyNyOHfXhPQgJZbiRh0dhK1tQ.roa (raw, json)
Hash identifier: ejAv0QSlOAr7MdDiGEr0GiX6nvNZEDgEPefGUSyHAyo=
Subject key identifier: A9:39:F2:37:23:87:7D:78:4F:42:02:59:6E:24:61:D1:D8:4A:D6:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187725DE312B41C1BDE818A20C8F28FE5EF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qTnyNyOHfXhPQgJZbiRh0dhK1tQ.roa
Signing time: Tue 11 Apr 2023 22:09:28 +0000
ROA not before: Tue 11 Apr 2023 22:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:72:5d:e3:12:b4:1c:1b:de:81:8a:20:c8:f2:8f:e5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 11 22:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a939f23723877d784f4202596e2461d1d84ad6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4e:b5:b1:0a:0d:ed:b6:57:c6:bd:c8:f9:fb:
de:41:e8:86:8e:5b:22:90:81:70:2f:f5:1f:58:e2:
d9:3e:55:90:6d:dc:2f:d6:35:cd:0a:20:c3:1c:31:
da:b1:6c:77:90:90:eb:2e:0c:f1:c8:29:23:2d:a5:
ef:dd:3b:45:21:9a:2b:a6:56:77:56:4e:49:93:c2:
ae:a9:2e:5e:1e:3e:e2:a5:e9:d5:14:b1:a6:b3:43:
7b:a9:55:56:31:5c:48:ed:6d:a4:15:9a:d3:52:7a:
76:5b:80:79:02:28:76:09:d0:f9:cb:3f:a9:6b:08:
37:1c:bc:55:23:3e:1e:13:2e:df:23:48:66:87:61:
ea:b9:f7:2e:5a:6e:4d:f0:74:9d:6a:f1:4c:df:c1:
d4:99:46:50:7c:07:a7:3a:dd:d6:b1:e5:6a:7e:9b:
3c:99:8d:68:65:42:7f:9c:95:30:36:10:15:c7:74:
3b:a8:e0:8b:d4:d2:7f:4b:77:f8:32:da:ba:4f:49:
0e:c5:8f:0e:c9:b3:64:b2:9f:c7:c3:92:ac:03:b4:
b5:c2:a9:f5:eb:90:ee:d6:47:bb:d0:f3:60:67:c6:
58:a1:6d:33:77:61:90:5d:55:13:cd:8f:78:22:60:
e4:cb:9f:1a:d7:8b:27:a1:31:22:f9:48:7a:94:d4:
85:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:39:F2:37:23:87:7D:78:4F:42:02:59:6E:24:61:D1:D8:4A:D6:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qTnyNyOHfXhPQgJZbiRh0dhK1tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:15:b5:3e:f9:1f:f5:47:2c:96:6a:27:e7:20:bd:44:8c:17:
14:03:24:1b:ac:80:a6:5d:9e:99:95:85:89:cf:34:e0:4e:9e:
df:27:82:98:4c:c0:79:9c:2b:09:0b:55:41:f4:ab:dd:9d:45:
b1:e7:f2:9d:dc:92:bc:d2:18:97:8c:00:bf:25:95:61:82:bf:
16:73:df:e9:62:2d:c5:d3:28:e2:81:38:a6:0b:fa:8c:fb:bc:
26:72:a0:74:92:4d:f8:d8:ac:5b:74:3a:1d:f4:09:54:36:89:
81:1b:2a:b2:3e:a6:db:3b:a9:78:da:15:d1:35:a1:5e:36:6f:
9a:87:10:1f:5c:32:2a:b7:43:98:a4:26:1b:fb:42:ed:96:55:
87:e1:df:f1:f6:cd:7e:23:58:3d:ca:10:1a:b4:87:cc:9b:54:
f0:59:88:75:8f:3f:fb:08:ce:ab:ab:10:c5:a5:fa:91:ed:a4:
17:4b:0b:9c:12:3a:9c:bd:f1:a6:2b:36:d4:1a:56:ff:0e:fa:
bf:c5:18:df:43:03:43:c6:34:cb:b7:c7:03:e0:cc:1d:2e:ea:
88:5c:6d:4c:58:1b:2e:1e:23:59:80:c4:8d:52:17:1e:be:9c:
6a:0d:85:bf:c8:11:ab:6f:15:0f:95:ef:96:07:c1:c8:96:68:
24:2c:a6:ac
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdyXeMStBwb3oGKIMjyj+XvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDExMjIwOTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTM5ZjIzNzIzODc3ZDc4NGY0MjAyNTk2ZTI0NjFkMWQ4NGFkNmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE61sQoN7bZXxr3I+fveQeiGjlsi
kIFwL/UfWOLZPlWQbdwv1jXNCiDDHDHasWx3kJDrLgzxyCkjLaXv3TtFIZorplZ3
Vk5Jk8KuqS5eHj7ipenVFLGms0N7qVVWMVxI7W2kFZrTUnp2W4B5Aih2CdD5yz+p
awg3HLxVIz4eEy7fI0hmh2HqufcuWm5N8HSdavFM38HUmUZQfAenOt3WseVqfps8
mY1oZUJ/nJUwNhAVx3Q7qOCL1NJ/S3f4Mtq6T0kOxY8OybNksp/Hw5KsA7S1wqn1
65Du1ke70PNgZ8ZYoW0zd2GQXVUTzY94ImDky58a14snoTEi+Uh6lNSFBQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKk58jcjh314T0ICWW4kYdHYStbUMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcVRueU55T0hmWGhQUWdKWmJpUmgwZGhLMXRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACMVtT75H/VHLJZqJ+cg
vUSMFxQDJBusgKZdnpmVhYnPNOBOnt8ngphMwHmcKwkLVUH0q92dRbHn8p3ckrzS
GJeMAL8llWGCvxZz3+liLcXTKOKBOKYL+oz7vCZyoHSSTfjYrFt0Oh30CVQ2iYEb
KrI+pts7qXjaFdE1oV42b5qHEB9cMiq3Q5ikJhv7Qu2WVYfh3/H2zX4jWD3KEBq0
h8ybVPBZiHWPP/sIzqurEMWl+pHtpBdLC5wSOpy98aYrNtQaVv8O+r/FGN9DA0PG
NMu3xwPgzB0u6ohcbUxYGy4eI1mAxI1SFx6+nGoNhb/IEatvFQ+V75YHwciWaCQs
pqw=
-----END CERTIFICATE-----
Generated at Sat May 3 22:53:22 2025 by rpki-client