Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q_4JW4HYZPEb0KiOxk3faeCQSvw.roa
File: q_4JW4HYZPEb0KiOxk3faeCQSvw.roa (raw, json)
Hash identifier: Ku1U2Wb1SxFZD6ALZKUJEJYEfiea2SPPkwNfjFsS+To=
Subject key identifier: AB:FE:09:5B:81:D8:64:F1:1B:D0:A8:8E:C6:4D:DF:69:E0:90:4A:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7EB57B4D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q_4JW4HYZPEb0KiOxk3faeCQSvw.roa
Signing time: Tue 26 Apr 2022 16:12:38 +0000
ROA not before: Tue 26 Apr 2022 16:12:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2125822797 (0x7eb57b4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 26 16:12:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abfe095b81d864f11bd0a88ec64ddf69e0904afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a7:09:cd:4e:cc:22:34:a4:cd:1b:3e:4c:62:
3c:08:de:c4:90:43:2f:ec:7e:40:92:85:c4:66:a3:
e8:b5:09:95:84:eb:61:83:4a:34:6e:73:48:af:5f:
9b:29:44:1b:3b:ac:0b:a2:e4:69:35:72:e0:82:9a:
73:7b:9e:6a:a0:4b:16:a8:2c:ea:d6:b9:80:24:63:
64:1f:10:c1:95:1b:2f:d5:f5:dd:25:cd:4e:a6:77:
c7:dc:0e:9c:cb:68:07:fe:19:50:32:54:3b:13:e3:
dc:d2:22:11:5b:7a:07:b5:4d:33:74:23:7c:e7:be:
48:22:7f:63:71:50:68:b7:b4:1d:67:81:2a:b0:24:
f8:7f:d6:e8:98:bd:e5:2a:a3:a1:69:f2:0c:91:59:
25:3d:c5:3f:08:74:84:87:c8:2c:bc:df:db:8b:21:
39:b2:d1:98:f0:77:fc:5b:22:66:62:a9:44:9c:75:
f7:f0:ad:5e:3c:9c:f2:e2:dd:1d:e4:cc:fe:de:f5:
e6:64:8a:de:8c:e7:60:27:74:02:d9:64:5f:26:d8:
5a:7e:8c:48:a0:a8:9f:e4:79:ab:55:ab:93:69:3f:
26:bc:58:28:c4:9a:06:1d:4a:7f:97:cb:07:b5:e9:
4d:a4:4c:fa:1e:7f:7d:da:a8:b7:66:57:60:ca:2e:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FE:09:5B:81:D8:64:F1:1B:D0:A8:8E:C6:4D:DF:69:E0:90:4A:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q_4JW4HYZPEb0KiOxk3faeCQSvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:cc:44:56:7d:b9:f4:b9:75:aa:db:ad:a5:39:d6:e9:97:18:
2d:12:23:e3:73:91:cd:78:e0:78:27:58:e8:5d:b2:b9:c2:2c:
b8:24:c0:e3:c2:75:63:c5:c3:4a:d8:f1:58:dc:20:ea:dc:e3:
f0:05:e9:cd:40:dd:b9:c2:c1:cb:f9:ea:c7:01:98:d5:97:f9:
78:a9:c3:ff:ce:63:b5:da:6e:f5:5e:10:e6:39:c2:8e:b1:6e:
69:de:c4:11:be:d2:a2:1c:b2:b0:f7:bc:38:0d:36:27:25:8c:
b3:6b:57:1c:d8:fd:99:05:0c:f8:79:61:c7:c8:33:f8:d1:54:
92:df:db:36:f1:c8:eb:ab:42:e6:d4:59:95:fd:8b:11:5e:b6:
c0:20:b5:2e:ca:fb:d4:03:11:5d:1a:b9:b5:c9:74:0e:83:11:
a3:9c:54:85:04:b8:08:ef:83:74:3c:5c:f3:bf:9a:4f:5b:af:
8a:cc:85:3f:48:5a:f0:9c:8e:6f:54:aa:76:72:5a:4e:7b:63:
ac:a9:8a:a7:8b:4a:ed:2d:f3:76:3c:1d:f9:8e:0c:36:95:89:
58:eb:c5:e2:e2:43:bc:21:c5:7b:81:d3:a1:f6:06:b3:d1:0f:
3d:9f:f3:07:54:c4:8d:ff:19:6f:69:ed:0e:f4:b6:cd:c3:09:
84:09:90:4c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEfrV7TTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQy
NjE2MTIzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWJmZTA5NWI4MWQ4
NjRmMTFiZDBhODhlYzY0ZGRmNjllMDkwNGFmYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOunCc1OzCI0pM0bPkxiPAjexJBDL+x+QJKFxGaj6LUJlYTr
YYNKNG5zSK9fmylEGzusC6LkaTVy4IKac3ueaqBLFqgs6ta5gCRjZB8QwZUbL9X1
3SXNTqZ3x9wOnMtoB/4ZUDJUOxPj3NIiEVt6B7VNM3QjfOe+SCJ/Y3FQaLe0HWeB
KrAk+H/W6Ji95SqjoWnyDJFZJT3FPwh0hIfILLzf24shObLRmPB3/FsiZmKpRJx1
9/CtXjyc8uLdHeTM/t715mSK3oznYCd0AtlkXybYWn6MSKCon+R5q1Wrk2k/JrxY
KMSaBh1Kf5fLB7XpTaRM+h5/fdqot2ZXYMouVpcCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSr/glbgdhk8RvQqI7GTd9p4JBK/DAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3FfNEpXNEhZWlBFYjBLaU94azNmYWVDUVN2dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQA2zERWfbn0uXWq262lOdbplxgtEiPjc5HNeOB4
J1joXbK5wiy4JMDjwnVjxcNK2PFY3CDq3OPwBenNQN25wsHL+erHAZjVl/l4qcP/
zmO12m71XhDmOcKOsW5p3sQRvtKiHLKw97w4DTYnJYyza1cc2P2ZBQz4eWHHyDP4
0VSS39s28cjrq0Lm1FmV/YsRXrbAILUuyvvUAxFdGrm1yXQOgxGjnFSFBLgI74N0
PFzzv5pPW6+KzIU/SFrwnI5vVKp2clpOe2OsqYqni0rtLfN2PB35jgw2lYlY68Xi
4kO8IcV7gdOh9gaz0Q89n/MHVMSN/xlvae0O9LbNwwmECZBM
-----END CERTIFICATE-----
Generated at Thu May 1 06:45:29 2025 by rpki-client