Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qgNU6-XoNwEswXw9m798wISw39Q.roa
File: qgNU6-XoNwEswXw9m798wISw39Q.roa (raw, json)
Hash identifier: katxnxCzY0+LPOELZhg6WJV18xB+hWOiA0tMAonUSZg=
Subject key identifier: AA:03:54:EB:E5:E8:37:01:2C:C1:7C:3D:9B:BF:7C:C0:84:B0:DF:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6AD091E2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qgNU6-XoNwEswXw9m798wISw39Q.roa
Signing time: Tue 15 Feb 2022 12:14:36 +0000
ROA not before: Tue 15 Feb 2022 12:14:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792053730 (0x6ad091e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 12:14:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa0354ebe5e837012cc17c3d9bbf7cc084b0dfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:cc:16:bc:f2:a3:b8:11:e0:c7:59:36:cb:
c5:5b:0a:eb:77:d9:33:72:39:c4:d2:ca:f2:a1:43:
63:8f:3c:28:74:27:72:e8:f9:8b:a2:bd:53:99:2f:
fc:af:92:b9:9c:76:0e:c3:95:a9:b6:d9:65:76:e7:
0b:57:d8:a4:ea:da:8c:3a:10:2b:c2:bb:65:3a:35:
bf:72:9d:fd:16:f2:ff:11:56:75:ad:d2:c3:69:01:
eb:28:47:01:45:28:88:b5:1e:47:26:0a:87:53:03:
a9:0c:ff:ac:d8:50:0f:ed:f2:ee:6f:15:d5:e4:74:
62:b2:45:33:05:c4:4b:30:f1:cc:d9:93:22:30:11:
f7:bf:4c:cd:e3:57:93:fd:cc:16:9e:03:54:78:dd:
a3:d8:0e:79:b6:b6:5d:2a:6c:92:0d:60:60:5d:99:
30:ac:92:cc:b6:1c:39:7c:c7:1a:9d:32:34:fd:41:
39:6a:ca:4e:84:9e:0a:06:48:43:f6:18:a1:ba:ab:
36:83:e2:d1:c7:0a:30:43:fa:ae:0e:69:f5:d7:88:
3d:40:ec:78:76:7b:24:8a:5f:04:a7:90:d7:e6:c2:
3d:d8:52:82:2a:81:86:2b:08:f0:bf:12:47:f2:c0:
c2:d1:a8:48:e2:d5:8c:3b:db:f0:76:15:e0:e9:0d:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:03:54:EB:E5:E8:37:01:2C:C1:7C:3D:9B:BF:7C:C0:84:B0:DF:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qgNU6-XoNwEswXw9m798wISw39Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:fb:09:e0:5b:5e:58:37:a9:44:74:cf:f1:5b:34:22:70:3f:
d4:f3:25:64:a8:f3:2f:78:74:7b:0b:62:c9:57:78:95:bd:13:
8c:57:f6:c2:39:c3:c8:cf:b9:b8:c7:d7:3f:4f:08:41:ba:72:
18:40:09:17:d4:ef:e2:2a:11:ad:72:53:2f:d0:23:15:a9:91:
14:90:d2:24:76:9c:4a:fd:ae:a6:d2:82:36:e5:e1:6e:8d:58:
a0:c0:f6:5e:40:c9:09:d4:b4:63:55:c5:34:cb:2f:07:04:de:
d3:05:f7:0a:39:85:b6:b2:69:b6:72:ab:d8:a6:6e:b6:db:46:
e9:68:2e:e5:de:56:79:eb:4d:39:87:7e:4c:2d:90:40:5f:2e:
1f:4a:70:fa:04:3c:4d:56:45:ae:3d:20:ad:69:d6:ee:41:0d:
f1:2f:ee:91:f9:dc:a4:a0:73:a1:aa:a7:c3:be:00:55:4d:ed:
83:39:83:5a:f4:07:62:3e:55:00:2c:97:88:26:70:95:de:89:
66:d2:47:a0:e0:ee:86:ae:93:da:f4:23:99:80:ec:34:08:77:
b9:0c:af:26:1f:19:10:d8:03:b0:db:ef:9c:f7:58:7a:ab:7c:
ab:f9:89:5e:7d:ce:b4:71:1c:7c:74:2d:d2:7b:76:31:6b:04:
3c:bd:23:bc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEatCR4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIx
NTEyMTQzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWEwMzU0ZWJlNWU4
MzcwMTJjYzE3YzNkOWJiZjdjYzA4NGIwZGZkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMPPzBa88qO4EeDHWTbLxVsK63fZM3I5xNLK8qFDY488KHQn
cuj5i6K9U5kv/K+SuZx2DsOVqbbZZXbnC1fYpOrajDoQK8K7ZTo1v3Kd/Rby/xFW
da3Sw2kB6yhHAUUoiLUeRyYKh1MDqQz/rNhQD+3y7m8V1eR0YrJFMwXESzDxzNmT
IjAR979MzeNXk/3MFp4DVHjdo9gOeba2XSpskg1gYF2ZMKySzLYcOXzHGp0yNP1B
OWrKToSeCgZIQ/YYobqrNoPi0ccKMEP6rg5p9deIPUDseHZ7JIpfBKeQ1+bCPdhS
giqBhisI8L8SR/LAwtGoSOLVjDvb8HYV4OkNOHUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSqA1Tr5eg3ASzBfD2bv3zAhLDf1DAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3FnTlU2LVhvTndFc3dYdzltNzk4d0lTdzM5US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCj+wngW15YN6lEdM/xWzQicD/U8yVkqPMveHR7
C2LJV3iVvROMV/bCOcPIz7m4x9c/TwhBunIYQAkX1O/iKhGtclMv0CMVqZEUkNIk
dpxK/a6m0oI25eFujVigwPZeQMkJ1LRjVcU0yy8HBN7TBfcKOYW2smm2cqvYpm62
20bpaC7l3lZ56005h35MLZBAXy4fSnD6BDxNVkWuPSCtadbuQQ3xL+6R+dykoHOh
qqfDvgBVTe2DOYNa9AdiPlUALJeIJnCV3olm0keg4O6GrpPa9COZgOw0CHe5DK8m
HxkQ2AOw2++c91h6q3yr+Ylefc60cRx8dC3Se3YxawQ8vSO8
-----END CERTIFICATE-----
Generated at Sat May 3 05:06:59 2025 by rpki-client