Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NQn5yM0lQ-3oCVHB8rCqht1Xd30.roa
File: NQn5yM0lQ-3oCVHB8rCqht1Xd30.roa (raw, json)
Hash identifier: P5I6FXHa14NAYzYs5er11rYt+0EI01BaEL2J4KV40Gg=
Subject key identifier: 35:09:F9:C8:CD:25:43:ED:E8:09:51:C1:F2:B0:AA:86:DD:57:77:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B7ABD2604F9731F841D22D60785553B6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NQn5yM0lQ-3oCVHB8rCqht1Xd30.roa
Signing time: Wed 02 Aug 2023 19:13:58 +0000
ROA not before: Wed 02 Aug 2023 19:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b7:ab:d2:60:4f:97:31:f8:41:d2:2d:60:78:55:53:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 19:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3509f9c8cd2543ede80951c1f2b0aa86dd57777d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:15:7e:16:1b:5f:ac:4d:e9:69:cd:ef:4c:e1:
5d:35:c9:44:95:96:17:97:b5:23:e5:fd:08:aa:28:
0a:0d:97:3f:69:93:fe:e3:73:48:7e:ad:86:90:ba:
0b:0f:86:02:10:f6:2a:8a:6a:ec:7e:98:cf:15:e7:
bd:8d:21:99:c5:28:c3:b8:e3:95:ab:c2:1e:8c:17:
f0:e9:c7:7a:83:aa:e5:52:35:f9:00:ef:be:ab:88:
4e:b5:24:34:45:8e:ba:e8:ee:2c:df:55:cc:01:43:
a7:5b:0b:e5:0e:c9:de:52:de:1b:1c:53:59:33:00:
65:28:6b:a9:f0:4e:f2:38:6d:53:44:e8:c4:5a:11:
01:e8:3e:5c:3a:b2:b1:b8:e8:cb:92:e8:9c:5d:67:
1d:31:e4:d7:89:31:e0:f5:bd:fc:55:e7:5c:4a:ad:
fa:87:97:74:7c:6d:61:5d:ce:30:fc:d0:09:99:08:
dc:e0:3c:e9:7b:fd:f4:b3:2f:65:d9:69:77:5a:ad:
be:f2:b2:d2:79:8e:35:a1:38:68:a4:53:67:26:e2:
e7:cc:38:83:0c:d5:4e:c4:e8:19:65:4b:ba:f0:94:
ab:c1:65:01:3e:8b:cb:2c:08:9b:81:8e:df:22:f4:
6b:0a:92:25:06:d3:06:19:6b:e2:d2:f9:35:76:5b:
1e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:09:F9:C8:CD:25:43:ED:E8:09:51:C1:F2:B0:AA:86:DD:57:77:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NQn5yM0lQ-3oCVHB8rCqht1Xd30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:52:6b:be:07:38:47:14:60:8b:dd:5c:b2:93:44:d6:a0:ba:
de:d2:66:8b:19:5a:b1:d4:2d:12:35:d0:f9:99:de:10:b1:7b:
0b:ee:14:0e:ee:8c:8b:84:c5:5e:3e:31:0e:0d:53:28:73:00:
e2:57:06:b2:d3:4e:21:a8:2d:52:e9:19:83:36:2d:42:14:f2:
ab:4e:a1:fb:9d:b0:56:e9:59:00:35:65:30:96:bb:53:21:17:
9a:4f:b3:57:7b:5d:ce:c8:c5:79:18:10:35:2c:a8:3b:dd:07:
0a:52:f9:67:41:ca:6a:7f:f8:b6:04:44:82:4f:81:db:ba:7d:
17:fb:da:c7:44:3c:83:ce:78:e6:f0:73:30:15:c6:b8:d6:1a:
4c:50:e2:1b:aa:b3:d9:00:b7:03:6b:08:03:65:a0:c7:0f:2e:
17:56:00:e0:b5:1a:3b:eb:b3:59:b5:60:ce:f7:9d:a3:55:28:
67:d9:a5:ef:a7:0a:c9:a9:f3:6b:35:95:1d:ff:90:e1:62:02:
b4:6c:71:82:fb:bb:6d:d9:76:28:df:fa:e6:90:cc:77:14:a3:
83:0c:bd:07:76:a1:7e:6a:8c:e9:00:6c:a7:ad:c3:63:60:40:
db:76:23:45:fd:c6:97:0f:e2:e6:65:0f:e4:f9:e2:9b:63:a8:
41:b3:c9:ee
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYm3q9JgT5cx+EHSLWB4VVO2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODAyMTkxMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTA5ZjljOGNkMjU0M2VkZTgwOTUxYzFmMmIwYWE4NmRkNTc3NzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBV+FhtfrE3pac3vTOFdNclElZYX
l7Uj5f0IqigKDZc/aZP+43NIfq2GkLoLD4YCEPYqimrsfpjPFee9jSGZxSjDuOOV
q8IejBfw6cd6g6rlUjX5AO++q4hOtSQ0RY666O4s31XMAUOnWwvlDsneUt4bHFNZ
MwBlKGup8E7yOG1TROjEWhEB6D5cOrKxuOjLkuicXWcdMeTXiTHg9b38VedcSq36
h5d0fG1hXc4w/NAJmQjc4Dzpe/30sy9l2Wl3Wq2+8rLSeY41oThopFNnJuLnzDiD
DNVOxOgZZUu68JSrwWUBPovLLAibgY7fIvRrCpIlBtMGGWvi0vk1dlsecwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDUJ+cjNJUPt6AlRwfKwqobdV3d9MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTlFuNXlNMGxRLTNvQ1ZIQjhyQ3FodDFYZDMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKZSa74HOEcUYIvdXLKT
RNagut7SZosZWrHULRI10PmZ3hCxewvuFA7ujIuExV4+MQ4NUyhzAOJXBrLTTiGo
LVLpGYM2LUIU8qtOofudsFbpWQA1ZTCWu1MhF5pPs1d7Xc7IxXkYEDUsqDvdBwpS
+WdBymp/+LYERIJPgdu6fRf72sdEPIPOeObwczAVxrjWGkxQ4huqs9kAtwNrCANl
oMcPLhdWAOC1Gjvrs1m1YM73naNVKGfZpe+nCsmp82s1lR3/kOFiArRscYL7u23Z
dijf+uaQzHcUo4MMvQd2oX5qjOkAbKetw2NgQNt2I0X9xpcP4uZlD+T54ptjqEGz
ye4=
-----END CERTIFICATE-----
Generated at Mon Jun 9 08:24:10 2025 by rpki-client