Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sQRG6iRuhnHjeyMsCbZW6QdDIPI.roa
File: sQRG6iRuhnHjeyMsCbZW6QdDIPI.roa (raw, json)
Hash identifier: cn+hypPkogftlmP38557x8ch/kEBC6bNzKJqH/caDrY=
Subject key identifier: B1:04:46:EA:24:6E:86:71:E3:7B:23:2C:09:B6:56:E9:07:43:20:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B2F6588BDE32C23F1BE4D223BD2407E8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sQRG6iRuhnHjeyMsCbZW6QdDIPI.roa
Signing time: Mon 24 Apr 2023 11:11:41 +0000
ROA not before: Mon 24 Apr 2023 11:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:f6:58:8b:de:32:c2:3f:1b:e4:d2:23:bd:24:07:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 11:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b10446ea246e8671e37b232c09b656e9074320f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:00:6b:5e:a9:aa:a5:27:28:d9:91:6a:0c:ce:
57:f0:8d:c4:1c:c6:bb:23:96:90:77:d1:87:0f:fe:
ea:44:41:d6:5d:22:86:18:fc:bd:a6:1a:45:64:1c:
f3:4c:e0:73:5f:52:67:54:54:57:d3:0b:e0:ed:dc:
78:cf:06:49:67:4b:f2:37:a3:3b:59:2c:ee:d6:0e:
84:c7:62:f4:3d:6b:8f:08:37:8e:9c:1c:f2:da:9e:
33:ae:f4:f9:db:8c:c1:3b:69:88:5d:54:93:58:51:
71:14:6d:c0:c5:35:e6:c7:0c:b3:32:e3:b2:b2:b0:
e1:b9:f4:83:69:54:22:ce:85:78:6c:67:86:3b:77:
61:6e:fd:c5:99:68:ed:a7:0e:03:33:6a:87:0d:7e:
94:0d:67:48:68:b2:5c:d9:93:57:06:8e:be:2c:8f:
a7:77:00:97:e3:ba:54:43:a4:d6:6d:da:84:e0:45:
bd:f6:7f:71:0b:c7:14:5f:24:ed:90:26:42:60:22:
99:fe:a6:a9:91:a0:84:f8:76:17:ce:5b:b2:62:26:
aa:8d:c1:c0:f3:3f:cb:e6:2f:c8:81:6c:fc:a7:01:
f5:be:95:3b:d4:a4:52:8c:9b:0d:42:24:b8:03:c1:
82:f2:8d:48:17:75:63:1c:f5:00:ad:a2:80:f5:15:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:04:46:EA:24:6E:86:71:E3:7B:23:2C:09:B6:56:E9:07:43:20:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sQRG6iRuhnHjeyMsCbZW6QdDIPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:b5:40:a9:cf:d3:0e:5a:33:bb:c0:4a:02:b8:3a:41:3b:b3:
d3:27:5b:e2:cf:a3:10:2c:c8:fa:39:0f:b5:9f:bc:3c:aa:f3:
2d:b7:6e:29:58:1f:5a:d6:82:07:85:b6:f6:d0:6f:cc:9d:24:
bb:89:23:bf:ee:66:e8:41:75:bc:6b:46:8c:cf:72:af:6a:88:
53:98:78:af:6f:5a:a3:44:38:58:05:ef:f9:d6:c7:74:0f:21:
4e:14:d6:21:42:50:41:b2:1e:db:26:e3:2b:dd:89:73:c6:fe:
b6:65:68:1e:06:af:6b:a6:47:e8:b1:c7:8e:26:f6:6f:a2:0e:
68:50:90:76:cf:22:9c:76:92:0e:39:4f:6c:68:82:9f:6b:64:
aa:5f:5d:3a:5c:14:94:62:c2:0f:6b:35:61:13:9f:a5:73:63:
5a:f1:88:f9:84:14:89:7c:8c:40:b5:53:df:4d:99:86:0b:6d:
2f:cd:12:5b:b9:67:ba:e7:b3:8c:ea:4e:0b:46:4b:45:71:35:
ba:d8:ae:ba:ef:e5:78:23:d2:36:20:0f:17:5e:16:32:16:a5:
0e:a9:21:51:fe:96:94:50:2f:63:bf:4e:e9:3b:a2:88:64:a3:
c3:90:fb:f4:a1:fa:c2:5d:d7:09:42:1d:ed:49:1a:95:43:1d:
49:98:7e:e0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYey9liL3jLCPxvk0iO9JAfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDI0MTExMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTA0NDZlYTI0NmU4NjcxZTM3YjIzMmMwOWI2NTZlOTA3NDMyMGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwBrXqmqpSco2ZFqDM5X8I3EHMa7
I5aQd9GHD/7qREHWXSKGGPy9phpFZBzzTOBzX1JnVFRX0wvg7dx4zwZJZ0vyN6M7
WSzu1g6Ex2L0PWuPCDeOnBzy2p4zrvT524zBO2mIXVSTWFFxFG3AxTXmxwyzMuOy
srDhufSDaVQizoV4bGeGO3dhbv3FmWjtpw4DM2qHDX6UDWdIaLJc2ZNXBo6+LI+n
dwCX47pUQ6TWbdqE4EW99n9xC8cUXyTtkCZCYCKZ/qapkaCE+HYXzluyYiaqjcHA
8z/L5i/IgWz8pwH1vpU71KRSjJsNQiS4A8GC8o1IF3VjHPUAraKA9RWCTwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLEERuokboZx43sjLAm2VukHQyDyMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvc1FSRzZpUnVobkhqZXlNc0NiWlc2UWRESVBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHa1QKnP0w5aM7vASgK4
OkE7s9MnW+LPoxAsyPo5D7WfvDyq8y23bilYH1rWggeFtvbQb8ydJLuJI7/uZuhB
dbxrRozPcq9qiFOYeK9vWqNEOFgF7/nWx3QPIU4U1iFCUEGyHtsm4yvdiXPG/rZl
aB4Gr2umR+ixx44m9m+iDmhQkHbPIpx2kg45T2xogp9rZKpfXTpcFJRiwg9rNWET
n6VzY1rxiPmEFIl8jEC1U99NmYYLbS/NElu5Z7rns4zqTgtGS0VxNbrYrrrv5Xgj
0jYgDxdeFjIWpQ6pIVH+lpRQL2O/Tuk7oohko8OQ+/Sh+sJd1wlCHe1JGpVDHUmY
fuA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:24:53 2025 by rpki-client