Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QWiKXeuUQPrC0MiD7jsj42EoVlo.roa
File: QWiKXeuUQPrC0MiD7jsj42EoVlo.roa (raw, json)
Hash identifier: nNqY99x7MTM9SCylYF8yFVvuua7vdD3QJ/B2Qo0PBbk=
Subject key identifier: 41:68:8A:5D:EB:94:40:FA:C2:D0:C8:83:EE:3B:23:E3:61:28:56:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 89950A08
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QWiKXeuUQPrC0MiD7jsj42EoVlo.roa
Signing time: Fri 03 Jun 2022 13:10:20 +0000
ROA not before: Fri 03 Jun 2022 13:10:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2308246024 (0x89950a08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 3 13:10:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41688a5deb9440fac2d0c883ee3b23e36128565a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4b:66:23:35:17:2d:dc:d1:9e:1a:1b:1a:de:
81:24:74:05:38:52:0d:8c:2d:e0:4b:1a:fa:da:9c:
75:a2:63:4a:d7:06:ec:26:65:c1:93:0c:7a:2b:fd:
6f:60:9a:d9:3a:a7:00:48:f9:11:02:27:30:98:18:
e6:b7:56:7f:c2:94:a8:a8:f8:37:b4:0c:8b:41:fb:
b3:ec:89:58:2a:db:f6:2d:8c:a4:42:d2:88:9a:03:
b4:68:c3:91:09:db:7b:62:c2:ef:88:78:8a:14:8c:
68:d0:0f:c9:ef:6f:6f:af:e3:83:b8:5f:c3:c1:cf:
51:6a:00:b7:d2:51:d3:6b:5a:c0:e1:23:87:b1:d0:
a5:cf:d8:7d:36:02:cc:5b:51:7b:8b:84:b3:14:8d:
91:d2:50:81:5a:cb:f2:b3:9f:23:24:21:4a:e4:8a:
90:fa:ce:c3:de:7b:43:fa:45:96:51:d9:4a:72:f7:
a2:46:e7:ae:e4:05:85:cf:c7:04:b5:c2:15:31:48:
fd:6b:a3:ee:37:26:24:67:52:11:3a:08:cd:bf:08:
4f:11:85:0b:cc:48:b6:d5:1f:1d:20:dd:53:3a:f0:
13:0e:31:c3:63:4d:a9:8f:64:e3:e2:6c:51:6a:33:
01:b0:13:6f:dc:7f:11:1f:1a:42:b8:b9:f4:ca:ab:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:68:8A:5D:EB:94:40:FA:C2:D0:C8:83:EE:3B:23:E3:61:28:56:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QWiKXeuUQPrC0MiD7jsj42EoVlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:ec:0d:4e:c3:e2:fa:bb:07:23:45:09:fd:9b:f6:9f:47:9a:
c3:1e:0c:57:72:5c:ba:37:f7:df:e7:1a:70:d7:3a:7e:80:97:
80:35:1d:36:7a:6a:07:d3:6e:db:c2:68:b7:54:f9:a3:41:68:
44:64:99:8b:1f:08:41:1e:d5:da:d2:b7:3c:15:b6:71:38:a1:
34:c5:14:8b:18:cb:16:83:f4:71:02:6e:95:55:49:0f:45:a2:
fb:6d:af:57:b7:98:65:fe:ff:fd:b7:bc:de:f5:25:ae:9c:34:
33:8f:5e:57:1e:0f:fb:9e:c5:f0:54:23:34:36:f0:66:17:ef:
b6:86:1a:95:1d:bb:eb:17:92:cc:6c:44:08:8b:c7:8e:b1:c3:
69:a0:40:18:79:be:2e:91:ea:de:a6:45:ed:da:fb:c5:a8:13:
4b:a2:30:c0:82:83:c3:27:de:91:7e:9f:e0:8c:60:ab:27:49:
d0:c6:34:b8:ef:b1:2d:c3:aa:73:16:3c:cc:f3:51:f4:40:c9:
59:dc:06:b9:bf:8e:8b:40:03:27:6d:d1:87:5d:36:c7:c7:51:
c9:2e:37:22:9f:4e:78:a2:1d:65:db:62:3e:07:f8:ed:a4:09:
85:96:db:fa:7e:4e:fc:7d:0d:e9:55:e8:c1:1f:2e:c9:50:d2:
be:24:7d:81
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAImVCggwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MDMxMzEwMjBaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDQxNjg4YTVkZWI5
NDQwZmFjMmQwYzg4M2VlM2IyM2UzNjEyODU2NWEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDVS2YjNRct3NGeGhsa3oEkdAU4Ug2MLeBLGvranHWiY0rX
BuwmZcGTDHor/W9gmtk6pwBI+RECJzCYGOa3Vn/ClKio+De0DItB+7PsiVgq2/Yt
jKRC0oiaA7Row5EJ23tiwu+IeIoUjGjQD8nvb2+v44O4X8PBz1FqALfSUdNrWsDh
I4ex0KXP2H02AsxbUXuLhLMUjZHSUIFay/KznyMkIUrkipD6zsPee0P6RZZR2Upy
96JG567kBYXPxwS1whUxSP1ro+43JiRnUhE6CM2/CE8RhQvMSLbVHx0g3VM68BMO
McNjTamPZOPibFFqMwGwE2/cfxEfGkK4ufTKq9gtAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUQWiKXeuUQPrC0MiD7jsj42EoVlowHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9RV2lLWGV1VVFQckMwTWlEN2pzajQyRW9WbG8ucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAqewNTsPi+rsHI0UJ/Zv2n0eawx4MV3Jcujf3
3+cacNc6foCXgDUdNnpqB9Nu28Jot1T5o0FoRGSZix8IQR7V2tK3PBW2cTihNMUU
ixjLFoP0cQJulVVJD0Wi+22vV7eYZf7//be83vUlrpw0M49eVx4P+57F8FQjNDbw
ZhfvtoYalR276xeSzGxECIvHjrHDaaBAGHm+LpHq3qZF7dr7xagTS6IwwIKDwyfe
kX6f4IxgqydJ0MY0uO+xLcOqcxY8zPNR9EDJWdwGub+Oi0ADJ23Rh102x8dRyS43
Ip9OeKIdZdtiPgf47aQJhZbb+n5O/H0N6VXowR8uyVDSviR9gQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:20:17 2025 by rpki-client