Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QeWR0A3GFHZzgwKYyOLWoDRWf2o.roa
File: QeWR0A3GFHZzgwKYyOLWoDRWf2o.roa (raw, json)
Hash identifier: X+IPThHNs+5kdoYokjRwmlPOJc2ZdnjWi4LZApda7a4=
Subject key identifier: 41:E5:91:D0:0D:C6:14:76:73:83:02:98:C8:E2:D6:A0:34:56:7F:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880259A5632E36BFA36807B53BC28A428F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QeWR0A3GFHZzgwKYyOLWoDRWf2o.roa
Signing time: Tue 09 May 2023 21:10:09 +0000
ROA not before: Tue 09 May 2023 21:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:02:59:a5:63:2e:36:bf:a3:68:07:b5:3b:c2:8a:42:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 9 21:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41e591d00dc6147673830298c8e2d6a034567f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:a4:47:1a:c7:25:eb:5a:42:c4:41:97:d0:
ab:a3:90:0a:4a:e2:37:7d:1e:83:22:bc:17:e2:94:
6d:e0:1f:cf:ca:a7:54:63:a3:d9:73:50:fd:36:ff:
3f:ae:e4:06:b3:57:87:8e:d1:cd:46:9a:72:0c:53:
30:03:21:c2:a5:b7:91:9a:2d:45:71:ce:6c:c2:0d:
23:6c:19:a5:7c:59:ad:cb:23:41:32:b9:97:b3:d3:
3a:4f:80:7a:6c:9b:c8:9c:c9:4f:0b:a8:d4:a3:ba:
a1:6c:b1:a2:05:fa:a3:dc:e9:99:2a:82:e4:c4:06:
0e:b1:43:15:12:22:ea:01:c9:29:ad:04:5c:de:ae:
9d:7d:7d:d1:99:98:51:dc:11:b4:0d:ec:b4:bc:e6:
35:2b:6d:fc:63:db:b8:59:a4:29:c5:4f:a7:da:69:
cc:30:2c:a5:53:b6:cc:f5:08:2d:c1:5f:da:57:4f:
8d:ee:d1:be:93:c0:d2:d9:ff:7d:8c:a1:b3:31:fb:
22:6a:4d:d0:24:d8:0e:31:e5:a8:24:fe:81:3f:81:
a1:c7:76:68:6d:49:ca:3e:ad:a7:d0:c4:86:40:aa:
35:58:b4:57:41:30:98:16:d3:68:dc:70:54:81:b4:
22:6c:b1:27:b3:ca:c6:1d:c6:b8:95:8e:1f:50:96:
d5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E5:91:D0:0D:C6:14:76:73:83:02:98:C8:E2:D6:A0:34:56:7F:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QeWR0A3GFHZzgwKYyOLWoDRWf2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:98:b0:f3:a8:e6:d7:6e:d2:68:54:7f:c9:d6:6e:ad:d7:58:
32:a3:6a:09:a3:35:36:e3:97:7b:3b:0e:42:fc:ae:8d:1b:16:
62:2a:58:59:79:79:04:cd:07:fb:59:87:83:8b:ff:83:f7:91:
02:8b:43:e7:4a:17:a7:de:07:fb:a9:6f:0a:78:d5:ff:e0:38:
34:99:ef:95:b9:57:43:07:c7:32:16:f4:04:79:93:58:2a:5e:
4f:72:de:25:e8:c3:5c:fd:c3:84:2e:f8:b9:25:93:09:d4:3b:
20:ff:74:7a:a3:56:4e:ef:9a:a3:ac:9d:dc:8a:4b:33:05:8f:
86:d9:c9:a7:7c:b3:6c:be:f2:21:12:24:a8:f0:42:04:76:12:
86:2f:a5:20:4c:a6:7c:8c:af:93:53:89:32:01:9c:b1:b4:31:
81:28:8b:b1:9b:db:4c:1a:8e:fd:1c:ea:47:09:a0:ef:c1:27:
9c:89:f8:e2:a4:5b:53:c5:e9:67:a6:09:1a:e9:2c:3f:36:b0:
cc:17:42:f2:e2:0b:b2:0b:05:ff:28:1e:f5:3c:29:4c:93:a1:
33:db:ee:96:f6:88:63:af:28:68:1b:e4:a3:50:3e:75:2a:1c:
15:57:bb:d1:b3:b5:8a:4d:a8:2c:c1:06:ae:bf:f2:c5:6c:7a:
c8:8e:2b:b0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgCWaVjLja/o2gHtTvCikKPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTA5MjExMDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWU1OTFkMDBkYzYxNDc2NzM4MzAyOThjOGUyZDZhMDM0NTY3ZjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwikRxrHJetaQsRBl9Cro5AKSuI3
fR6DIrwX4pRt4B/PyqdUY6PZc1D9Nv8/ruQGs1eHjtHNRppyDFMwAyHCpbeRmi1F
cc5swg0jbBmlfFmtyyNBMrmXs9M6T4B6bJvInMlPC6jUo7qhbLGiBfqj3OmZKoLk
xAYOsUMVEiLqAckprQRc3q6dfX3RmZhR3BG0Dey0vOY1K238Y9u4WaQpxU+n2mnM
MCylU7bM9QgtwV/aV0+N7tG+k8DS2f99jKGzMfsiak3QJNgOMeWoJP6BP4Ghx3Zo
bUnKPq2n0MSGQKo1WLRXQTCYFtNo3HBUgbQibLEns8rGHca4lY4fUJbVjwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEHlkdANxhR2c4MCmMji1qA0Vn9qMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUWVXUjBBM0dGSFp6Z3dLWXlPTFdvRFJXZjJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFqYsPOo5tdu0mhUf8nW
bq3XWDKjagmjNTbjl3s7DkL8ro0bFmIqWFl5eQTNB/tZh4OL/4P3kQKLQ+dKF6fe
B/upbwp41f/gODSZ75W5V0MHxzIW9AR5k1gqXk9y3iXow1z9w4Qu+LklkwnUOyD/
dHqjVk7vmqOsndyKSzMFj4bZyad8s2y+8iESJKjwQgR2EoYvpSBMpnyMr5NTiTIB
nLG0MYEoi7Gb20wajv0c6kcJoO/BJ5yJ+OKkW1PF6WemCRrpLD82sMwXQvLiC7IL
Bf8oHvU8KUyToTPb7pb2iGOvKGgb5KNQPnUqHBVXu9GztYpNqCzBBq6/8sVsesiO
K7A=
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:06:03 2025 by rpki-client