Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QZ2SUwHqiWG2lft0BjvaQW1cq9I.roa
File: QZ2SUwHqiWG2lft0BjvaQW1cq9I.roa (raw, json)
Hash identifier: /IJX0kEkKa8TBxCaAltiBSqylA4isH+JAde2Nzt3Xug=
Subject key identifier: 41:9D:92:53:01:EA:89:61:B6:95:FB:74:06:3B:DA:41:6D:5C:AB:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182B7F4E35190138001ADB4DF01A3D39BBA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QZ2SUwHqiWG2lft0BjvaQW1cq9I.roa
Signing time: Fri 19 Aug 2022 21:14:15 +0000
ROA not before: Fri 19 Aug 2022 21:14:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b7:f4:e3:51:90:13:80:01:ad:b4:df:01:a3:d3:9b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 21:14:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=419d925301ea8961b695fb74063bda416d5cabd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ce:1d:8a:9a:10:6c:9c:84:11:bd:45:97:cf:
d3:d7:62:c7:b5:3c:d5:00:89:90:e1:ab:b0:af:e1:
26:b9:77:44:7c:ef:10:5e:b4:14:dd:82:d9:8f:6b:
40:f7:f2:ae:b4:a3:9b:00:4a:d7:fb:e3:cc:44:06:
93:2a:ac:1a:8a:9e:12:8e:a9:69:ff:ab:7a:23:87:
38:da:47:9e:e7:0c:82:4c:33:85:48:c6:e5:6d:d7:
d1:b2:33:44:60:1d:7e:49:4a:78:f8:00:52:a4:d0:
0f:ca:a9:58:b6:0b:70:f7:fa:73:e5:14:5c:1e:08:
90:2e:13:04:a3:cd:a2:d7:91:dd:e6:c7:cc:4a:91:
86:35:de:14:09:52:c5:d6:77:ea:f7:42:fe:42:ef:
83:1d:60:c2:74:93:b0:57:30:fb:51:36:91:cc:bf:
97:dd:6b:7f:f2:1b:a0:98:b6:38:78:58:c2:f9:ba:
b6:89:2b:4a:3b:00:c0:7b:e2:90:41:5b:06:fa:76:
44:1b:28:f3:18:08:75:1e:00:39:f9:8b:2d:7e:11:
4f:c0:3d:c0:4d:79:b9:bb:77:b6:05:cb:3a:4f:61:
b5:28:46:d9:7a:d1:5d:86:d0:af:a9:9c:5c:16:db:
90:cd:4f:c7:51:bc:e4:7b:27:69:0c:5a:c1:66:18:
1f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9D:92:53:01:EA:89:61:B6:95:FB:74:06:3B:DA:41:6D:5C:AB:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QZ2SUwHqiWG2lft0BjvaQW1cq9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:f5:ad:90:f3:90:2f:01:48:e0:7f:5c:51:ec:0a:e5:f3:98:
3d:19:da:d7:3a:a7:c7:34:3d:9a:34:53:08:0c:d5:ac:3d:85:
69:5e:71:b8:93:21:16:51:f6:f3:29:16:93:73:61:4a:db:fd:
c5:00:be:63:62:00:d7:77:2d:65:06:91:3b:21:0a:33:a2:59:
7f:97:86:85:5b:d0:cf:e5:03:f4:fc:e9:0c:ee:46:70:08:9d:
75:d1:bb:90:6a:29:af:c6:9d:1d:1c:6f:bb:e6:1e:1d:be:44:
f5:8b:a2:78:88:ff:2a:5b:cd:d3:25:5a:10:13:78:7f:2d:5c:
75:83:24:9f:6c:f6:0f:e1:66:71:8d:a6:b7:c0:6d:7a:e9:a9:
ce:36:fa:f0:ae:78:b1:08:9d:3c:a9:05:f1:06:b9:a3:86:88:
6a:55:73:11:ca:2d:b0:94:9b:17:43:30:17:73:83:1c:ea:d0:
a7:6b:38:99:b2:82:ce:de:e6:55:4a:ba:2e:32:bb:36:68:07:
77:f4:d3:24:ee:d4:6b:1b:af:ec:7e:b4:3d:ff:f7:0d:8b:18:
d3:5b:64:21:28:00:d5:d8:ee:67:33:77:cd:f4:27:d3:22:b9:
e5:1c:df:1b:24:84:05:ab:49:97:6e:10:01:52:d1:a6:38:8f:
67:2d:38:db
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYK39ONRkBOAAa203wGj05u6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODE5MjExNDE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTlkOTI1MzAxZWE4OTYxYjY5NWZiNzQwNjNiZGE0MTZkNWNhYmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk84dipoQbJyEEb1Fl8/T12LHtTzV
AImQ4auwr+EmuXdEfO8QXrQU3YLZj2tA9/KutKObAErX++PMRAaTKqwaip4Sjqlp
/6t6I4c42kee5wyCTDOFSMblbdfRsjNEYB1+SUp4+ABSpNAPyqlYtgtw9/pz5RRc
HgiQLhMEo82i15Hd5sfMSpGGNd4UCVLF1nfq90L+Qu+DHWDCdJOwVzD7UTaRzL+X
3Wt/8hugmLY4eFjC+bq2iStKOwDAe+KQQVsG+nZEGyjzGAh1HgA5+YstfhFPwD3A
TXm5u3e2Bcs6T2G1KEbZetFdhtCvqZxcFtuQzU/HUbzkeydpDFrBZhgfIwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEGdklMB6olhtpX7dAY72kFtXKvSMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUVoyU1V3SHFpV0cybGZ0MEJqdmFRVzFjcTlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJH1rZDzkC8BSOB/XFHs
CuXzmD0Z2tc6p8c0PZo0UwgM1aw9hWlecbiTIRZR9vMpFpNzYUrb/cUAvmNiANd3
LWUGkTshCjOiWX+XhoVb0M/lA/T86QzuRnAInXXRu5BqKa/GnR0cb7vmHh2+RPWL
oniI/ypbzdMlWhATeH8tXHWDJJ9s9g/hZnGNprfAbXrpqc42+vCueLEInTypBfEG
uaOGiGpVcxHKLbCUmxdDMBdzgxzq0KdrOJmygs7e5lVKui4yuzZoB3f00yTu1Gsb
r+x+tD3/9w2LGNNbZCEoANXY7mczd830J9MiueUc3xskhAWrSZduEAFS0aY4j2ct
ONs=
-----END CERTIFICATE-----
Generated at Wed Jun 11 07:23:13 2025 by rpki-client