Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Q-M0AfY3wufZx3OKsICxQ3ua6Q.roa
File: 0Q-M0AfY3wufZx3OKsICxQ3ua6Q.roa (raw, json)
Hash identifier: vKXODhBfo2V9f3PyFLYx8ptJfHmQGJCAh/nNiiS/Fyo=
Subject key identifier: D1:0F:8C:D0:07:D8:DF:0B:9F:67:1D:CE:2A:C2:02:C5:0D:EE:6B:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018667D8F7621E68AB98F5FA04F02C32154D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Q-M0AfY3wufZx3OKsICxQ3ua6Q.roa
Signing time: Sun 19 Feb 2023 04:05:17 +0000
ROA not before: Sun 19 Feb 2023 04:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:67d8:4543/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:67:d8:f7:62:1e:68:ab:98:f5:fa:04:f0:2c:32:15:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 04:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d10f8cd007d8df0b9f671dce2ac202c50dee6ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:95:40:c9:25:b4:97:92:aa:b2:76:3e:ac:4d:
a1:03:f4:22:00:16:da:3b:69:b3:ac:50:33:cc:23:
0a:d8:fc:5a:7f:cf:95:58:98:3b:42:72:e0:a5:ef:
59:5b:4c:5b:80:5d:43:2a:72:f0:fb:f5:87:52:49:
e4:17:93:48:78:8d:9c:0b:1d:ed:5d:72:b2:7c:a4:
d3:91:04:c2:92:5b:38:08:d4:06:ce:cc:f5:e5:e5:
3e:2e:44:fa:5c:0e:f4:0b:fa:89:0f:b3:2c:7d:3a:
a1:76:8e:99:60:0a:0e:fe:75:38:e1:c8:ee:6f:f7:
e2:5e:7f:18:f1:ae:46:97:7c:52:33:fb:53:6d:17:
55:8a:5a:ba:4c:6c:10:54:c9:42:d6:53:dd:e0:a8:
80:71:32:83:ff:e2:ce:c8:4e:06:a2:6a:ae:2d:6a:
ec:ab:e1:f3:a9:25:54:e0:61:1b:ec:39:aa:6a:87:
66:5a:5b:4f:8a:ab:15:e4:c4:be:57:27:d6:ed:78:
c4:d1:ed:d9:d3:72:a1:d3:47:98:7f:c2:29:6d:98:
97:c8:65:2b:cf:ca:cb:ae:cf:20:16:f8:ac:8b:2b:
7d:df:0b:69:a8:96:80:a2:1e:41:eb:55:bb:df:4d:
28:83:40:25:80:5b:3d:ec:1e:90:b3:df:b0:52:a9:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0F:8C:D0:07:D8:DF:0B:9F:67:1D:CE:2A:C2:02:C5:0D:EE:6B:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Q-M0AfY3wufZx3OKsICxQ3ua6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:05:66:36:09:93:7d:6e:bd:aa:22:1f:ff:be:ac:dc:b7:44:
d5:35:f0:00:29:a4:8e:fb:77:36:59:78:fd:ec:ce:25:b2:c4:
96:3c:5b:94:99:df:39:ba:d0:b4:fd:e1:c3:8a:d0:f2:be:28:
4b:5f:41:54:ed:f4:bb:b4:e2:d2:db:b6:47:e7:57:66:d0:bf:
4a:51:6e:93:fc:10:50:85:5a:a3:9e:35:b0:6d:2c:b4:17:7c:
2e:b9:08:56:73:71:cd:95:14:c9:91:76:3a:ca:c2:44:c7:9b:
7e:12:53:ab:13:d4:34:bd:c2:e0:ed:3b:fd:10:1b:37:71:58:
f7:90:9f:ff:3b:55:98:7a:40:d9:b8:9a:0d:20:a8:8c:7a:1b:
1b:6f:fe:54:b3:0d:c1:58:98:2e:59:a9:04:3c:98:63:63:e7:
09:c9:ea:16:47:1e:f6:26:51:96:27:c8:21:73:db:b3:d5:0e:
4d:8f:e3:24:bd:80:db:c2:ec:7c:e4:f8:71:02:eb:ea:89:61:
de:79:bd:56:65:64:da:45:70:fd:49:e1:9f:a7:68:55:2a:41:
d4:43:92:5f:78:d6:13:59:46:9c:ba:a6:f7:f9:97:27:97:33:
6e:db:bf:5f:16:34:64:b7:d7:37:df:40:98:0e:7c:e0:01:6d:
3c:e9:03:0a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZn2PdiHmirmPX6BPAsMhVNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE5MDQwNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTBmOGNkMDA3ZDhkZjBiOWY2NzFkY2UyYWMyMDJjNTBkZWU2YmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZVAySW0l5KqsnY+rE2hA/QiABba
O2mzrFAzzCMK2Pxaf8+VWJg7QnLgpe9ZW0xbgF1DKnLw+/WHUknkF5NIeI2cCx3t
XXKyfKTTkQTCkls4CNQGzsz15eU+LkT6XA70C/qJD7MsfTqhdo6ZYAoO/nU44cju
b/fiXn8Y8a5Gl3xSM/tTbRdVilq6TGwQVMlC1lPd4KiAcTKD/+LOyE4GomquLWrs
q+HzqSVU4GEb7DmqaodmWltPiqsV5MS+VyfW7XjE0e3Z03Kh00eYf8IpbZiXyGUr
z8rLrs8gFvisiyt93wtpqJaAoh5B61W7300og0AlgFs97B6Qs9+wUqkfsQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNEPjNAH2N8Ln2cdzirCAsUN7mukMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMFEtTTBBZlkzd3VmWngzT0tzSUN4UTN1YTZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHQFZjYJk31uvaoiH/++
rNy3RNU18AAppI77dzZZeP3sziWyxJY8W5SZ3zm60LT94cOK0PK+KEtfQVTt9Lu0
4tLbtkfnV2bQv0pRbpP8EFCFWqOeNbBtLLQXfC65CFZzcc2VFMmRdjrKwkTHm34S
U6sT1DS9wuDtO/0QGzdxWPeQn/87VZh6QNm4mg0gqIx6Gxtv/lSzDcFYmC5ZqQQ8
mGNj5wnJ6hZHHvYmUZYnyCFz27PVDk2P4yS9gNvC7Hzk+HEC6+qJYd55vVZlZNpF
cP1J4Z+naFUqQdRDkl941hNZRpy6pvf5lyeXM27bv18WNGS31zffQJgOfOABbTzp
Awo=
-----END CERTIFICATE-----
Generated at Tue Jun 10 02:23:36 2025 by rpki-client