Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qzkwRRPHRhmiovQNcO0LZ3ZUtAE.roa
File: qzkwRRPHRhmiovQNcO0LZ3ZUtAE.roa (raw, json)
Hash identifier: DuKkMUuD6udLeWKNghg9r761dqFSc/RACrbZgDcuGg8=
Subject key identifier: AB:39:30:45:13:C7:46:19:A2:A2:F4:0D:70:ED:0B:67:76:54:B4:01
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01879DB863DEA8A9997EC3BF81F279080FB1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qzkwRRPHRhmiovQNcO0LZ3ZUtAE.roa
Signing time: Thu 20 Apr 2023 08:11:59 +0000
ROA not before: Thu 20 Apr 2023 08:11:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:b8:63:de:a8:a9:99:7e:c3:bf:81:f2:79:08:0f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 20 08:11:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab39304513c74619a2a2f40d70ed0b677654b401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1a:96:d2:10:f9:74:66:14:54:87:25:21:79:
64:a3:b4:e5:bb:1d:43:8f:bf:49:47:f9:56:69:c7:
2b:0a:ff:25:5d:4a:34:96:b8:39:b1:2d:5a:5a:de:
d5:a6:84:b2:d2:4a:49:9f:af:3a:c3:ce:dc:49:62:
61:ec:62:c5:f5:24:47:2c:31:52:05:ca:76:d0:ec:
ab:20:bd:0c:5c:36:0d:6a:7b:93:bb:bc:0d:4c:fc:
45:80:9f:83:2d:4e:8b:29:de:ea:9f:9e:31:9b:da:
70:d2:57:80:79:47:fe:ed:8b:36:5d:43:b2:b8:16:
3b:cc:14:28:42:1d:d8:d2:95:55:0c:fc:fe:f7:e8:
98:15:4e:23:07:4d:93:13:ab:29:c9:7f:3a:ba:ce:
31:a2:4a:1a:4b:43:a1:e8:8b:b5:ca:34:92:1b:5e:
1c:5a:8a:50:77:01:df:35:3b:34:75:d6:80:58:a2:
e2:42:48:77:46:40:ff:82:c6:62:ce:95:17:b1:cc:
f6:38:6b:a6:e3:89:c5:85:f6:ba:d2:72:2f:2b:d3:
28:9a:c6:bc:2a:86:04:34:28:cf:b8:c8:05:42:5a:
d8:67:69:df:a9:1e:a6:83:05:ae:98:54:e2:ad:10:
13:6a:7e:74:b2:fc:64:20:25:54:f6:f1:24:05:d0:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:39:30:45:13:C7:46:19:A2:A2:F4:0D:70:ED:0B:67:76:54:B4:01
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qzkwRRPHRhmiovQNcO0LZ3ZUtAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:57:b0:20:be:11:f1:b5:98:55:b1:1b:6d:af:dc:00:ea:44:
a5:12:36:99:9f:d7:a9:b8:c2:a8:f8:f8:22:08:10:aa:10:84:
3d:be:01:ee:58:e7:25:76:dd:28:ee:ef:60:7b:d1:09:0d:6f:
d9:35:4c:3d:28:6b:79:8a:71:8f:de:9f:35:7d:75:1c:b4:3e:
78:72:5c:23:c4:eb:f9:c0:66:79:93:8e:24:dd:dd:38:4c:f2:
ee:c6:86:b5:fd:b3:07:a6:42:4e:e7:b0:3d:c5:d7:83:87:fe:
48:90:04:ba:88:8d:9f:1e:ad:5b:34:19:f9:46:25:a5:d8:b3:
60:f1:ba:d3:74:32:91:8f:2b:37:bc:fa:57:bb:48:05:cc:7d:
28:5e:d3:c8:c6:e0:47:14:48:0c:e3:20:9b:ba:1e:a4:d2:dd:
8d:90:78:b9:4c:1c:35:db:06:ae:3e:30:98:66:19:c0:b9:de:
33:78:cb:22:e0:1f:83:cb:fa:36:4a:6b:36:51:15:02:ba:69:
c0:71:a4:cd:a3:98:d1:cf:fd:47:8c:f6:22:67:cd:35:e7:7c:
69:06:83:5c:47:60:e1:46:1b:52:12:46:77:6c:47:0c:7e:7d:
35:d2:ad:de:bd:c1:64:23:52:9b:dc:88:19:68:a4:49:3f:e6:
fb:cc:6f:70
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYeduGPeqKmZfsO/gfJ5CA+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDIwMDgxMTU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjM5MzA0NTEzYzc0NjE5YTJhMmY0MGQ3MGVkMGI2Nzc2NTRiNDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixqW0hD5dGYUVIclIXlko7Tlux1D
j79JR/lWaccrCv8lXUo0lrg5sS1aWt7VpoSy0kpJn686w87cSWJh7GLF9SRHLDFS
Bcp20OyrIL0MXDYNanuTu7wNTPxFgJ+DLU6LKd7qn54xm9pw0leAeUf+7Ys2XUOy
uBY7zBQoQh3Y0pVVDPz+9+iYFU4jB02TE6spyX86us4xokoaS0Oh6Iu1yjSSG14c
WopQdwHfNTs0ddaAWKLiQkh3RkD/gsZizpUXscz2OGum44nFhfa60nIvK9Momsa8
KoYENCjPuMgFQlrYZ2nfqR6mgwWumFTirRATan50svxkICVU9vEkBdAixQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKs5MEUTx0YZoqL0DXDtC2d2VLQBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcXprd1JSUEhSaG1pb3ZRTmNPMExaM1pVdEFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIBXsCC+EfG1mFWxG22v
3ADqRKUSNpmf16m4wqj4+CIIEKoQhD2+Ae5Y5yV23Sju72B70QkNb9k1TD0oa3mK
cY/enzV9dRy0PnhyXCPE6/nAZnmTjiTd3ThM8u7GhrX9swemQk7nsD3F14OH/kiQ
BLqIjZ8erVs0GflGJaXYs2DxutN0MpGPKze8+le7SAXMfShe08jG4EcUSAzjIJu6
HqTS3Y2QeLlMHDXbBq4+MJhmGcC53jN4yyLgH4PL+jZKazZRFQK6acBxpM2jmNHP
/UeM9iJnzTXnfGkGg1xHYOFGG1ISRndsRwx+fTXSrd69wWQjUpvciBlopEk/5vvM
b3A=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:07:37 2025 by rpki-client