Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/quXlS1Wo66KO_vwz941jaW9laKg.roa
File: quXlS1Wo66KO_vwz941jaW9laKg.roa (raw, json)
Hash identifier: opZ+aGOXSbGpZnYiilC8iqpFHfekhsTVjkNdVGxbIec=
Subject key identifier: AA:E5:E5:4B:55:A8:EB:A2:8E:FE:FC:33:F7:8D:63:69:6F:65:68:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01877C73E10E2EA6C05AF7968EB64064DAE0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/quXlS1Wo66KO_vwz941jaW9laKg.roa
Signing time: Thu 13 Apr 2023 21:09:41 +0000
ROA not before: Thu 13 Apr 2023 21:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7c:73:e1:0e:2e:a6:c0:5a:f7:96:8e:b6:40:64:da:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 21:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aae5e54b55a8eba28efefc33f78d63696f6568a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:26:e3:a7:a6:15:7d:dd:9c:22:ad:fa:76:
4b:dc:ab:66:7a:2e:05:7d:23:e5:8d:f4:99:e4:8b:
4c:d3:f2:31:84:49:b1:88:bb:79:fa:74:0a:e8:d9:
85:df:aa:a0:27:8d:68:0b:cf:6e:60:7d:f2:d4:4c:
bb:db:02:c6:30:b2:4e:07:43:ff:f2:84:7d:98:0c:
3d:86:d3:59:2c:9d:17:0a:3b:15:ab:2d:d3:2e:01:
34:6c:e6:7d:08:85:88:d0:51:3e:2e:3e:b2:84:32:
c2:37:0d:82:d2:f3:a7:aa:28:7f:cb:ec:a1:2d:4a:
82:34:77:16:e3:65:85:f6:bb:1d:db:06:10:00:58:
a5:6a:4e:9c:f6:38:7e:a5:1e:3f:0d:7e:2d:12:4c:
7b:f8:e9:2c:5f:b4:98:7e:d3:b1:eb:8b:ec:20:28:
b9:32:b0:14:03:b3:8c:35:30:36:db:a5:e7:ef:f9:
12:09:b8:b1:ef:5c:a8:71:76:22:ce:6a:7c:3b:02:
77:e8:d9:97:71:54:0f:ec:23:88:9b:47:68:af:4e:
1d:62:00:12:1c:b3:18:87:34:e1:f6:03:73:a7:55:
82:d0:45:2a:8f:3b:a4:2e:bd:88:73:fd:f1:93:15:
7b:93:4d:63:6d:7d:4f:e2:3f:88:a0:fd:17:c7:a5:
3e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E5:E5:4B:55:A8:EB:A2:8E:FE:FC:33:F7:8D:63:69:6F:65:68:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/quXlS1Wo66KO_vwz941jaW9laKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:e1:30:55:43:d6:13:06:53:80:5c:6f:b3:a3:de:de:4c:e7:
e4:6d:cb:cf:55:a1:36:2d:bf:21:cc:43:10:d6:75:24:41:15:
54:f2:9e:43:6f:3e:4a:c9:fd:7f:e5:e0:52:0b:5d:a2:68:d1:
65:c3:8e:66:e1:28:78:d4:0c:31:d1:01:67:b7:39:39:9d:84:
76:af:27:52:88:84:b9:0a:98:ad:3c:98:a1:1e:22:e8:db:c4:
e9:47:f8:e6:a5:92:33:da:db:d8:ad:bb:9b:de:f5:2d:17:26:
72:99:f9:24:b6:10:b2:87:4e:70:9c:0f:6d:2e:12:ec:04:f5:
61:55:db:d8:8d:96:bb:0d:1a:36:1a:b6:62:78:4d:86:9e:c9:
49:e0:65:a8:63:8b:81:ab:56:47:3c:f5:24:9d:6a:ce:c0:0e:
03:03:5c:9f:ad:4d:b8:1e:36:a9:f5:9a:3b:63:5e:e7:62:26:
b0:41:bd:45:3a:ba:29:a7:c2:d8:7d:c8:a2:dc:13:a2:8d:88:
2a:f5:a3:5e:1e:d0:05:3f:65:68:38:bd:51:c7:d3:ca:88:58:
0b:c7:1a:ee:1e:88:6a:e6:64:b0:f7:95:c8:e1:30:4e:43:9a:
e6:d7:80:62:48:5a:20:5f:50:7e:40:39:c1:2a:5c:b5:d4:d0:
e4:c9:73:44
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYd8c+EOLqbAWveWjrZAZNrgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDEzMjEwOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWU1ZTU0YjU1YThlYmEyOGVmZWZjMzNmNzhkNjM2OTZmNjU2OGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfQm46emFX3dnCKt+nZL3Ktmei4F
fSPljfSZ5ItM0/IxhEmxiLt5+nQK6NmF36qgJ41oC89uYH3y1Ey72wLGMLJOB0P/
8oR9mAw9htNZLJ0XCjsVqy3TLgE0bOZ9CIWI0FE+Lj6yhDLCNw2C0vOnqih/y+yh
LUqCNHcW42WF9rsd2wYQAFilak6c9jh+pR4/DX4tEkx7+OksX7SYftOx64vsICi5
MrAUA7OMNTA226Xn7/kSCbix71yocXYizmp8OwJ36NmXcVQP7COIm0dor04dYgAS
HLMYhzTh9gNzp1WC0EUqjzukLr2Ic/3xkxV7k01jbX1P4j+IoP0Xx6U+1wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKrl5UtVqOuijv78M/eNY2lvZWioMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcXVYbFMxV282NktPX3Z3ejk0MWphVzlsYUtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIbhMFVD1hMGU4Bcb7Oj
3t5M5+Rty89VoTYtvyHMQxDWdSRBFVTynkNvPkrJ/X/l4FILXaJo0WXDjmbhKHjU
DDHRAWe3OTmdhHavJ1KIhLkKmK08mKEeIujbxOlH+OalkjPa29itu5ve9S0XJnKZ
+SS2ELKHTnCcD20uEuwE9WFV29iNlrsNGjYatmJ4TYaeyUngZahji4GrVkc89SSd
as7ADgMDXJ+tTbgeNqn1mjtjXudiJrBBvUU6uimnwth9yKLcE6KNiCr1o14e0AU/
ZWg4vVHH08qIWAvHGu4eiGrmZLD3lcjhME5DmubXgGJIWiBfUH5AOcEqXLXU0OTJ
c0Q=
-----END CERTIFICATE-----
Generated at Thu May 1 04:26:53 2025 by rpki-client