Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QVe95p51-Sq34E9UBNPOFizAEiI.roa
File: QVe95p51-Sq34E9UBNPOFizAEiI.roa (raw, json)
Hash identifier: YLBsYqhpObFqKAi8Z2SYrNGMfs4S7/Qg8ZtjX33h2Mc=
Subject key identifier: 41:57:BD:E6:9E:75:F9:2A:B7:E0:4F:54:04:D3:CE:16:2C:C0:12:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185168D4522E6C9F1D050E6C3356DC70C72
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QVe95p51-Sq34E9UBNPOFizAEiI.roa
Signing time: Thu 15 Dec 2022 16:10:35 +0000
ROA not before: Thu 15 Dec 2022 16:10:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:16:8d:45:22:e6:c9:f1:d0:50:e6:c3:35:6d:c7:0c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 16:10:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4157bde69e75f92ab7e04f5404d3ce162cc01222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:7f:3d:1f:9c:0e:76:b0:2e:85:8e:fc:d1:
42:01:90:22:b0:87:3b:63:6c:2d:de:69:e6:c0:10:
2d:30:2b:2a:85:b7:f3:1b:6a:6f:90:93:5f:08:07:
1a:f6:6e:0f:8a:e4:1c:d0:36:6b:c6:61:89:ab:2b:
14:87:ea:6a:fe:05:81:69:53:b5:d7:5c:6f:8f:52:
45:83:a5:06:cc:da:1b:f0:b1:45:c4:e7:26:e2:76:
30:07:c7:ad:7f:30:96:2a:48:18:99:88:16:f4:22:
ab:8a:8d:80:d0:99:55:5d:c6:c9:1e:ab:6f:d2:d4:
ac:36:f1:da:9a:af:74:e8:5c:9b:3e:ce:0c:da:b4:
7e:54:6d:98:7a:1d:bd:08:e7:ac:a9:96:07:c2:f8:
8f:cf:9c:10:34:4b:e9:1a:02:69:0a:cd:71:09:9e:
2b:7d:51:6c:1d:53:c7:82:07:70:be:da:cc:f1:7a:
91:50:53:ab:0c:06:0c:95:f1:83:06:63:10:a9:5a:
7b:17:f8:aa:a6:b4:59:e6:61:14:85:92:c8:ae:3b:
61:a2:d8:d0:ad:6f:12:b1:af:0a:90:8d:1f:8b:a5:
70:69:3e:34:20:4a:cd:33:44:a2:c6:05:ef:db:94:
a3:d6:06:3e:de:61:2d:b1:bc:5b:d5:2f:80:83:f4:
62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:57:BD:E6:9E:75:F9:2A:B7:E0:4F:54:04:D3:CE:16:2C:C0:12:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QVe95p51-Sq34E9UBNPOFizAEiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:e4:cd:0a:55:ca:5b:1e:28:6d:2f:fe:65:d8:8d:cf:2a:6b:
58:14:bb:37:92:2d:e8:56:a7:b6:4e:ec:d7:45:c2:bc:35:e1:
24:52:16:62:80:9f:0a:d3:b4:51:1b:c1:ff:59:cd:76:ba:d4:
6d:7c:fa:10:b5:d7:71:12:db:32:06:3e:dd:be:c6:12:cc:78:
69:6d:c8:20:5d:b3:d6:8d:91:be:3a:3b:b1:d8:19:c4:96:4b:
e3:a1:85:3e:f9:68:9b:34:18:38:4c:06:5d:25:d2:63:cf:28:
d1:30:7b:d8:c2:d4:74:39:a8:47:2f:02:02:f2:a2:dc:a3:2f:
22:e0:95:81:02:e3:94:2e:68:56:b3:78:75:e6:88:ba:5b:05:
cd:23:16:be:02:b7:52:e9:cf:7a:a5:1d:d5:f9:2e:1b:c2:86:
5b:85:c7:25:8e:89:80:ab:9f:61:c9:3a:51:2c:71:85:b1:f0:
60:00:33:80:ab:a7:75:de:2f:30:29:1e:40:db:c1:01:8d:d9:
44:a5:0e:04:40:ee:d4:db:65:33:ba:bc:cb:88:0d:70:5b:94:
ee:46:39:65:73:d3:f1:94:69:a0:e0:9f:86:ed:7e:f4:42:ed:
b6:ba:86:84:7f:1b:2d:82:90:ea:71:4a:93:40:97:96:95:73:
5c:c7:51:03
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUWjUUi5snx0FDmwzVtxwxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE1MTYxMDM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTU3YmRlNjllNzVmOTJhYjdlMDRmNTQwNGQzY2UxNjJjYzAxMjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI1/PR+cDnawLoWO/NFCAZAisIc7
Y2wt3mnmwBAtMCsqhbfzG2pvkJNfCAca9m4PiuQc0DZrxmGJqysUh+pq/gWBaVO1
11xvj1JFg6UGzNob8LFFxOcm4nYwB8etfzCWKkgYmYgW9CKrio2A0JlVXcbJHqtv
0tSsNvHamq906FybPs4M2rR+VG2Yeh29COesqZYHwviPz5wQNEvpGgJpCs1xCZ4r
fVFsHVPHggdwvtrM8XqRUFOrDAYMlfGDBmMQqVp7F/iqprRZ5mEUhZLIrjthotjQ
rW8Ssa8KkI0fi6VwaT40IErNM0SixgXv25Sj1gY+3mEtsbxb1S+Ag/RidQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEFXveaedfkqt+BPVATTzhYswBIiMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUVZlOTVwNTEtU3EzNEU5VUJOUE9GaXpBRWlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEzkzQpVylseKG0v/mXY
jc8qa1gUuzeSLehWp7ZO7NdFwrw14SRSFmKAnwrTtFEbwf9ZzXa61G18+hC113ES
2zIGPt2+xhLMeGltyCBds9aNkb46O7HYGcSWS+OhhT75aJs0GDhMBl0l0mPPKNEw
e9jC1HQ5qEcvAgLyotyjLyLglYEC45QuaFazeHXmiLpbBc0jFr4Ct1Lpz3qlHdX5
LhvChluFxyWOiYCrn2HJOlEscYWx8GAAM4Crp3XeLzApHkDbwQGN2USlDgRA7tTb
ZTO6vMuIDXBblO5GOWVz0/GUaaDgn4btfvRC7ba6hoR/Gy2CkOpxSpNAl5aVc1zH
UQM=
-----END CERTIFICATE-----
Generated at Mon Jun 9 08:07:49 2025 by rpki-client