Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qfqE2w0a2lh5mkPmYLPBnf-cZF4.roa
File: qfqE2w0a2lh5mkPmYLPBnf-cZF4.roa (raw, json)
Hash identifier: oXOJ/u6hynIALVxuBwQE/etmdwlV6j60RVtuLjbTWSM=
Subject key identifier: A9:FA:84:DB:0D:1A:DA:58:79:9A:43:E6:60:B3:C1:9D:FF:9C:64:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897ECD8BCA5AAC83F6F30E21A339DD887E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qfqE2w0a2lh5mkPmYLPBnf-cZF4.roa
Signing time: Sat 22 Jul 2023 18:12:27 +0000
ROA not before: Sat 22 Jul 2023 18:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7e:cd:8b:ca:5a:ac:83:f6:f3:0e:21:a3:39:dd:88:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 18:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9fa84db0d1ada58799a43e660b3c19dff9c645e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:0e:96:77:b0:0d:c9:38:10:1e:1d:b5:7b:
2f:0b:e6:18:5d:73:80:b8:d3:47:6a:8e:83:52:f1:
22:4e:1f:b1:df:38:dd:e4:49:74:25:86:61:78:a3:
8b:cc:78:30:81:71:fd:21:9a:6a:4a:d8:cb:fa:f3:
71:57:a1:27:17:f3:5a:ec:d4:65:09:48:a4:11:5d:
da:45:a1:de:f3:94:65:2a:91:10:14:06:7a:5e:23:
14:c2:df:10:0d:44:e8:66:62:7b:1b:b4:13:d6:c1:
dd:4c:5b:68:4c:e7:3f:bb:ca:68:41:3e:77:54:a7:
49:2f:00:b3:5b:7e:6f:4b:2f:1b:0d:2e:11:d8:b5:
dc:b5:d1:88:fe:a8:c3:cd:b7:ee:ac:ec:7f:07:87:
cc:b8:75:26:22:e4:02:53:ea:5d:3c:7e:92:5d:83:
30:68:a5:7a:97:39:72:73:31:8b:43:74:a1:56:39:
da:51:3b:60:79:85:83:c6:a6:c6:3f:db:7e:c2:a5:
69:e0:da:63:93:78:79:46:0a:bd:9a:97:9c:1a:27:
15:77:44:ff:16:e1:64:a6:9c:14:3b:77:68:7a:b4:
91:59:06:35:7f:db:28:8a:52:3c:9c:bd:a3:ad:7a:
79:24:c9:ff:a2:d4:9f:f9:0e:37:b5:9e:dd:a2:29:
f6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FA:84:DB:0D:1A:DA:58:79:9A:43:E6:60:B3:C1:9D:FF:9C:64:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qfqE2w0a2lh5mkPmYLPBnf-cZF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:41:d3:bf:70:30:43:d5:a5:8a:8f:40:3f:b9:82:7d:c4:bb:
a9:88:96:f2:a1:05:ca:9f:50:d4:85:d8:79:03:f5:e1:1a:b5:
32:9c:e5:95:2f:6f:95:b0:75:4f:1e:c0:be:10:be:3c:11:6c:
a8:4a:46:53:56:98:23:4b:b2:34:df:8f:8c:1c:3f:de:4b:4f:
e3:2a:48:85:27:6d:a8:bb:db:50:1b:78:05:f4:60:b5:1a:19:
aa:5d:c1:5b:89:9b:4e:8b:07:40:2e:b8:ce:80:44:e5:26:25:
9d:31:2f:04:d1:06:a6:10:49:10:53:b4:a2:a1:67:c3:ab:0f:
41:c4:6f:a2:d2:cb:92:eb:39:ae:90:cd:03:09:d4:9a:ae:fc:
43:40:05:ff:dc:6d:9c:da:5c:df:41:98:8b:2f:ab:38:b7:70:
03:2a:22:90:22:cf:79:8d:81:d2:49:cd:df:bc:0e:4a:1b:26:
2a:5a:b3:9a:01:07:d6:8f:1e:ea:c6:8f:83:e6:ea:9d:9a:2a:
60:2d:c8:43:45:f8:2e:f2:46:9b:70:05:7b:28:fd:2e:34:65:
ce:a6:d0:f6:9e:fc:41:64:08:f5:3d:81:24:eb:49:04:fa:a0:
c6:25:70:77:87:64:2f:53:a4:b6:db:26:99:91:d0:f0:05:56:
3c:fa:60:e9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYl+zYvKWqyD9vMOIaM53Yh+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzIyMTgxMjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWZhODRkYjBkMWFkYTU4Nzk5YTQzZTY2MGIzYzE5ZGZmOWM2NDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg8OlnewDck4EB4dtXsvC+YYXXOA
uNNHao6DUvEiTh+x3zjd5El0JYZheKOLzHgwgXH9IZpqStjL+vNxV6EnF/Na7NRl
CUikEV3aRaHe85RlKpEQFAZ6XiMUwt8QDUToZmJ7G7QT1sHdTFtoTOc/u8poQT53
VKdJLwCzW35vSy8bDS4R2LXctdGI/qjDzbfurOx/B4fMuHUmIuQCU+pdPH6SXYMw
aKV6lzlyczGLQ3ShVjnaUTtgeYWDxqbGP9t+wqVp4Npjk3h5Rgq9mpecGicVd0T/
FuFkppwUO3doerSRWQY1f9soilI8nL2jrXp5JMn/otSf+Q43tZ7doin2/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKn6hNsNGtpYeZpD5mCzwZ3/nGReMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcWZxRTJ3MGEybGg1bWtQbVlMUEJuZi1jWkY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC9B079wMEPVpYqPQD+5
gn3Eu6mIlvKhBcqfUNSF2HkD9eEatTKc5ZUvb5WwdU8ewL4QvjwRbKhKRlNWmCNL
sjTfj4wcP95LT+MqSIUnbai721AbeAX0YLUaGapdwVuJm06LB0AuuM6AROUmJZ0x
LwTRBqYQSRBTtKKhZ8OrD0HEb6LSy5LrOa6QzQMJ1Jqu/ENABf/cbZzaXN9BmIsv
qzi3cAMqIpAiz3mNgdJJzd+8DkobJipas5oBB9aPHurGj4Pm6p2aKmAtyENF+C7y
RptwBXso/S40Zc6m0Pae/EFkCPU9gSTrSQT6oMYlcHeHZC9TpLbbJpmR0PAFVjz6
YOk=
-----END CERTIFICATE-----
Generated at Thu May 1 14:59:54 2025 by rpki-client