Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qai3yhLLmT5kbzDG7ra7NLHTXns.roa
File: Qai3yhLLmT5kbzDG7ra7NLHTXns.roa (raw, json)
Hash identifier: 62RsZQA0jqLxRk6KhCCRys9Un/AnVXoJ8897UuF8ZqU=
Subject key identifier: 41:A8:B7:CA:12:CB:99:3E:64:6F:30:C6:EE:B6:BB:34:B1:D3:5E:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8013F3B1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qai3yhLLmT5kbzDG7ra7NLHTXns.roa
Signing time: Sun 01 May 2022 07:11:18 +0000
ROA not before: Sun 01 May 2022 07:11:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2148791217 (0x8013f3b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 1 07:11:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41a8b7ca12cb993e646f30c6eeb6bb34b1d35e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9c:3c:12:80:8f:b2:aa:cb:ce:c4:53:04:d7:
18:2f:75:4d:96:07:a8:f7:18:71:ac:cc:39:3c:4c:
36:ec:08:b6:b4:26:e4:4c:df:b8:72:1b:2e:20:6d:
32:62:77:d6:83:93:0e:dc:ab:48:84:dc:16:e5:7d:
a0:cd:9c:9f:c5:1d:91:9a:e3:0b:5a:51:33:31:b9:
92:fc:01:6b:47:a8:96:92:0a:36:52:06:86:a6:07:
63:38:18:d5:73:27:f6:ca:b2:53:49:81:ef:66:d9:
25:a4:64:ea:0f:cb:ea:64:7c:89:f0:1a:b9:f3:ae:
7c:6a:6d:1e:88:f8:36:18:10:de:06:1e:0f:b4:cf:
98:b0:6d:9c:d7:20:40:d4:c7:01:4a:af:04:29:da:
2f:b2:55:de:0f:a1:fe:45:11:4d:44:c7:32:20:81:
57:e7:8c:69:07:72:6d:81:fd:d3:ba:fb:e6:6a:e9:
c1:c5:1e:7f:d9:dd:c9:32:c0:33:9e:cd:3e:f7:5d:
b0:4f:95:00:76:f8:ec:fa:58:a9:9e:5c:55:d8:0c:
ea:36:5a:bb:c1:cf:5f:2e:d4:fc:bb:6c:f4:05:a7:
86:28:b2:5a:cb:e7:bd:68:9c:83:e7:58:a0:64:32:
49:c4:a2:0a:29:7f:ed:c8:49:2c:78:c6:92:5f:93:
d5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A8:B7:CA:12:CB:99:3E:64:6F:30:C6:EE:B6:BB:34:B1:D3:5E:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Qai3yhLLmT5kbzDG7ra7NLHTXns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:1b:7f:d7:1f:08:7f:5b:75:aa:0a:d3:87:2b:3d:15:65:e2:
b5:78:20:c5:d1:9e:b7:c7:b1:68:9b:bf:e7:0f:21:9b:34:22:
dd:73:7f:fa:eb:e9:d3:27:05:91:15:21:15:40:60:2f:4c:9f:
ba:00:d8:25:19:cb:6b:94:f8:0a:68:95:10:a9:2a:28:c7:e2:
bf:65:2d:35:e0:f1:29:9e:07:93:37:44:49:4c:e5:05:bb:2f:
a3:05:07:e8:44:67:6d:12:e0:d9:24:de:fd:dc:34:7f:14:7d:
fa:05:a9:6f:ed:82:9d:62:57:09:44:bc:a4:da:df:df:95:66:
09:44:ff:6b:c1:19:1c:5d:60:08:8c:9f:2b:34:74:00:6d:65:
88:db:52:7a:61:46:1b:81:5b:36:00:7f:2d:40:21:82:d2:2b:
69:b4:84:f9:2d:07:9b:9a:c3:74:d5:b3:4c:1b:08:75:9d:07:
1e:d9:fd:fb:3d:d0:12:c7:65:5d:5d:42:45:29:77:dc:96:8d:
6b:34:01:cc:93:c5:a1:97:ee:7f:4f:d6:61:dd:64:e1:89:29:
f0:e4:dc:ad:62:b7:52:76:84:53:7a:64:9c:96:69:5f:a4:be:
f0:5d:a3:e9:2f:1a:c2:09:d1:44:5d:44:c0:5a:1d:f3:3e:f6:
8f:46:f3:8c
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIAT87EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MDEwNzExMThaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDQxYThiN2NhMTJj
Yjk5M2U2NDZmMzBjNmVlYjZiYjM0YjFkMzVlN2IwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCOnDwSgI+yqsvOxFME1xgvdU2WB6j3GHGszDk8TDbsCLa0
JuRM37hyGy4gbTJid9aDkw7cq0iE3BblfaDNnJ/FHZGa4wtaUTMxuZL8AWtHqJaS
CjZSBoamB2M4GNVzJ/bKslNJge9m2SWkZOoPy+pkfInwGrnzrnxqbR6I+DYYEN4G
Hg+0z5iwbZzXIEDUxwFKrwQp2i+yVd4Pof5FEU1ExzIggVfnjGkHcm2B/dO6++Zq
6cHFHn/Z3ckywDOezT73XbBPlQB2+Oz6WKmeXFXYDOo2WrvBz18u1Py7bPQFp4Yo
slrL571onIPnWKBkMknEogopf+3ISSx4xpJfk9WpAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUQai3yhLLmT5kbzDG7ra7NLHTXnswHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9RYWkzeWhMTG1UNWtiekRHN3JhN05MSFRYbnMucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAgBt/1x8If1t1qgrThys9FWXitXggxdGet8ex
aJu/5w8hmzQi3XN/+uvp0ycFkRUhFUBgL0yfugDYJRnLa5T4CmiVEKkqKMfiv2Ut
NeDxKZ4HkzdESUzlBbsvowUH6ERnbRLg2STe/dw0fxR9+gWpb+2CnWJXCUS8pNrf
35VmCUT/a8EZHF1gCIyfKzR0AG1liNtSemFGG4FbNgB/LUAhgtIrabSE+S0Hm5rD
dNWzTBsIdZ0HHtn9+z3QEsdlXV1CRSl33JaNazQBzJPFoZfuf0/WYd1k4Ykp8OTc
rWK3UnaEU3pknJZpX6S+8F2j6S8awgnRRF1EwFod8z72j0bzjA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:08:13 2025 by rpki-client