Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qpDyLpmWIJwJ7CkyUo7_hVHFLdk.roa
File: qpDyLpmWIJwJ7CkyUo7_hVHFLdk.roa (raw, json)
Hash identifier: 4jmlVlkwZlhauv8H5Wue1uxah421xXu/Y8B4E5pV73E=
Subject key identifier: AA:90:F2:2E:99:96:20:9C:09:EC:29:32:52:8E:FF:85:51:C5:2D:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870D1A19385095579E26779BAA6E6F36BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qpDyLpmWIJwJ7CkyUo7_hVHFLdk.roa
Signing time: Thu 23 Mar 2023 06:13:46 +0000
ROA not before: Thu 23 Mar 2023 06:13:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:1a:19:38:50:95:57:9e:26:77:9b:aa:6e:6f:36:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 06:13:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa90f22e9996209c09ec2932528eff8551c52dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2e:c4:78:b2:a5:3b:59:9b:38:92:32:a4:3b:
47:64:91:aa:a0:10:aa:8b:77:cc:96:ce:22:da:69:
63:70:d4:14:67:f1:93:2a:79:ad:47:ee:90:e9:4e:
b4:38:33:cf:7e:ad:96:15:aa:4d:ab:83:8e:22:eb:
38:c2:e9:74:93:a4:62:29:19:e3:63:fd:58:72:ec:
27:81:08:1b:97:81:49:99:04:d5:33:15:63:e5:89:
8f:a2:0f:68:e3:7e:94:b9:27:42:0b:5d:a7:fd:8f:
25:59:45:bd:02:5f:ac:6d:25:7a:d7:ca:3a:9e:14:
53:bc:6e:7c:f1:d4:b7:b0:3c:4c:4f:ad:7d:99:8c:
9d:d9:40:62:69:f8:ee:bd:5c:e1:75:fb:95:56:8a:
c6:87:2b:dd:9c:b7:2f:92:c4:83:45:fd:69:c0:d2:
9d:98:33:35:51:84:d9:81:ce:b9:ae:dc:ab:cd:20:
b9:c5:96:6a:55:f5:85:5c:c6:a1:db:73:ce:77:0a:
e4:c2:99:bd:5f:e1:34:e0:50:f6:be:57:38:bf:06:
3e:e1:69:a5:0c:93:15:a6:7b:13:16:86:a7:f6:5e:
b1:54:60:39:78:9f:62:36:8a:4a:2b:29:df:d1:53:
82:b8:22:b6:38:86:fa:e1:89:96:42:2b:04:47:31:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:90:F2:2E:99:96:20:9C:09:EC:29:32:52:8E:FF:85:51:C5:2D:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qpDyLpmWIJwJ7CkyUo7_hVHFLdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:b1:53:23:d0:bf:1a:10:e2:ab:89:ff:a9:ff:32:db:44:4f:
ad:6b:19:e8:c8:97:89:64:f1:b1:f2:66:9e:ec:cb:d0:ef:d8:
05:08:dd:26:62:a5:c0:e7:48:8f:05:8b:4d:0d:95:22:e2:30:
42:9c:66:75:5f:7b:a4:36:18:c5:35:55:c7:5d:39:9c:1e:49:
80:62:6b:81:0d:42:32:62:80:4e:3f:9a:36:fc:28:5a:59:76:
ed:eb:1e:08:61:77:96:84:a8:1d:d9:e8:48:a2:8c:b0:ca:60:
d3:2d:30:c3:c7:ad:b2:23:a6:a5:7a:39:cb:3f:81:e8:6c:19:
fd:fa:f9:19:b2:9a:46:04:f6:89:47:a7:88:aa:b5:3d:50:0b:
de:7d:b0:fd:c5:96:61:99:e5:eb:46:b9:63:38:ee:41:eb:6a:
af:ef:ac:8f:f2:e7:26:dc:37:ef:cf:66:91:16:cb:05:54:bd:
3a:2c:47:da:43:69:bd:e3:57:3b:52:b2:18:65:0d:91:58:7c:
34:f1:d7:30:5b:ba:39:e4:ef:fa:5b:00:57:a6:54:76:ed:85:
f7:4a:02:7b:04:8c:19:bc:6d:47:ea:8b:e4:42:97:9f:9b:0d:
9b:45:6e:3c:91:e4:fd:d6:ed:8d:5e:2a:3b:bf:d5:5e:04:bf:
fd:a1:ef:c4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcNGhk4UJVXniZ3m6pubza7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzIzMDYxMzQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTkwZjIyZTk5OTYyMDljMDllYzI5MzI1MjhlZmY4NTUxYzUyZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC7EeLKlO1mbOJIypDtHZJGqoBCq
i3fMls4i2mljcNQUZ/GTKnmtR+6Q6U60ODPPfq2WFapNq4OOIus4wul0k6RiKRnj
Y/1YcuwngQgbl4FJmQTVMxVj5YmPog9o436UuSdCC12n/Y8lWUW9Al+sbSV618o6
nhRTvG588dS3sDxMT619mYyd2UBiafjuvVzhdfuVVorGhyvdnLcvksSDRf1pwNKd
mDM1UYTZgc65rtyrzSC5xZZqVfWFXMah23POdwrkwpm9X+E04FD2vlc4vwY+4Wml
DJMVpnsTFoan9l6xVGA5eJ9iNopKKynf0VOCuCK2OIb64YmWQisERzEa+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKqQ8i6ZliCcCewpMlKO/4VRxS3ZMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcXBEeUxwbVdJSndKN0NreVVvN19oVkhGTGRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABuxUyPQvxoQ4quJ/6n/
MttET61rGejIl4lk8bHyZp7sy9Dv2AUI3SZipcDnSI8Fi00NlSLiMEKcZnVfe6Q2
GMU1VcddOZweSYBia4ENQjJigE4/mjb8KFpZdu3rHghhd5aEqB3Z6EiijLDKYNMt
MMPHrbIjpqV6Ocs/gehsGf36+RmymkYE9olHp4iqtT1QC959sP3FlmGZ5etGuWM4
7kHraq/vrI/y5ybcN+/PZpEWywVUvTosR9pDab3jVztSshhlDZFYfDTx1zBbujnk
7/pbAFemVHbthfdKAnsEjBm8bUfqi+RCl5+bDZtFbjyR5P3W7Y1eKju/1V4Ev/2h
78Q=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:04 2025 by rpki-client