Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SKQBZzWoMClUtoFlC77dbg125Sw.roa
File: SKQBZzWoMClUtoFlC77dbg125Sw.roa (raw, json)
Hash identifier: LjcUPmwN+9wVV9/TkqiFROSyIwfr0TqCxP6yDcHJLc4=
Subject key identifier: 48:A4:01:67:35:A8:30:29:54:B6:81:65:0B:BE:DD:6E:0D:76:E5:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018554C5B90D968DDA9BD745183D24B2330B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SKQBZzWoMClUtoFlC77dbg125Sw.roa
Signing time: Tue 27 Dec 2022 18:08:42 +0000
ROA not before: Tue 27 Dec 2022 18:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:54:c5:b9:0d:96:8d:da:9b:d7:45:18:3d:24:b2:33:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 18:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48a4016735a8302954b681650bbedd6e0d76e52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:90:c8:2f:e7:56:98:5d:20:a5:e5:2b:dd:
77:3c:73:57:91:69:a2:4a:f4:d7:63:e8:85:52:46:
16:de:54:dc:6b:d6:5e:52:cb:9c:7c:19:97:2b:d3:
f8:9f:85:57:da:7b:41:45:b2:98:20:52:5a:cc:94:
4c:5b:cd:95:9f:84:49:c2:1d:3e:f9:11:52:1a:01:
09:1e:01:e0:e4:72:3d:af:03:0f:da:ae:fa:13:29:
27:9f:40:d5:8f:1a:b1:be:f6:45:eb:59:b2:35:87:
8d:23:ac:01:a7:5c:3a:88:56:64:cf:73:0a:f2:b5:
cc:4e:43:8b:35:4b:7f:87:22:00:2a:30:b6:c1:69:
fb:a7:8b:ac:e7:90:21:55:95:eb:e5:07:22:38:9f:
13:f1:0c:0d:66:42:c0:19:b4:fa:09:fb:92:6b:e0:
81:3e:09:67:08:de:96:0b:b6:c0:a9:7a:49:6f:9f:
b4:6e:9f:b3:43:7b:37:5e:02:6c:d6:76:79:8f:de:
ec:ec:03:c3:94:66:49:1a:3b:5b:e6:5c:5f:cf:78:
c7:ae:77:9e:0c:9a:91:44:50:b7:b1:b2:65:a3:e0:
ec:b3:eb:47:be:bd:ac:b0:48:06:08:ca:d2:f2:a0:
c4:15:63:2c:8e:3f:b2:e4:b5:da:2c:14:3d:1f:69:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A4:01:67:35:A8:30:29:54:B6:81:65:0B:BE:DD:6E:0D:76:E5:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SKQBZzWoMClUtoFlC77dbg125Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:c4:6f:3f:40:da:fa:e4:63:de:8f:6c:c1:c6:97:05:6b:34:
ab:2c:38:99:9b:2e:3e:c8:fc:e8:39:b9:e4:aa:69:88:83:a7:
d0:b9:a6:ba:18:d0:14:a8:7c:c0:4b:e1:73:ab:d8:ee:b7:62:
8b:11:00:1f:7d:e6:31:2c:d9:6d:3b:31:57:49:3a:5a:02:55:
ee:c6:b8:56:3a:c4:18:13:45:ec:2b:fd:a9:c3:5c:f3:8e:74:
c7:c4:b6:28:b9:64:92:b5:48:8e:43:cb:fa:1e:52:e9:34:36:
f6:33:d4:36:b6:08:45:e1:12:5d:d3:46:f6:1e:b9:1c:d8:cd:
81:63:26:96:4a:04:b2:79:4d:24:ce:49:3f:ce:f1:69:27:9b:
d7:af:16:46:15:5b:ff:bb:3a:5c:6e:9b:e9:8a:8b:e3:88:73:
22:b5:cb:f1:a0:6a:2e:3e:19:20:f0:08:d7:b9:cb:b2:9f:78:
d3:de:65:a7:70:5f:41:a1:06:83:36:db:a9:33:af:70:d7:f0:
37:70:49:93:dd:c6:18:5b:cc:f1:8e:9f:eb:02:59:d5:68:41:
d7:f3:c4:8b:76:10:21:7f:32:f6:d9:60:de:30:40:dd:a0:a4:
27:4a:14:29:13:7a:bc:5f:e9:fc:27:c5:32:65:44:54:6b:b6:
9b:47:cb:ad
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVUxbkNlo3am9dFGD0ksjMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI3MTgwODQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGE0MDE2NzM1YTgzMDI5NTRiNjgxNjUwYmJlZGQ2ZTBkNzZlNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt2QyC/nVphdIKXlK913PHNXkWmi
SvTXY+iFUkYW3lTca9ZeUsucfBmXK9P4n4VX2ntBRbKYIFJazJRMW82Vn4RJwh0+
+RFSGgEJHgHg5HI9rwMP2q76Eyknn0DVjxqxvvZF61myNYeNI6wBp1w6iFZkz3MK
8rXMTkOLNUt/hyIAKjC2wWn7p4us55AhVZXr5QciOJ8T8QwNZkLAGbT6CfuSa+CB
PglnCN6WC7bAqXpJb5+0bp+zQ3s3XgJs1nZ5j97s7APDlGZJGjtb5lxfz3jHrnee
DJqRRFC3sbJlo+Dss+tHvr2ssEgGCMrS8qDEFWMsjj+y5LXaLBQ9H2mGTQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEikAWc1qDApVLaBZQu+3W4NduUsMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvU0tRQlp6V29NQ2xVdG9GbEM3N2RiZzEyNVN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAnEbz9A2vrkY96PbMHG
lwVrNKssOJmbLj7I/Og5ueSqaYiDp9C5proY0BSofMBL4XOr2O63YosRAB995jEs
2W07MVdJOloCVe7GuFY6xBgTRewr/anDXPOOdMfEtii5ZJK1SI5Dy/oeUuk0NvYz
1Da2CEXhEl3TRvYeuRzYzYFjJpZKBLJ5TSTOST/O8Wknm9evFkYVW/+7Olxum+mK
i+OIcyK1y/Ggai4+GSDwCNe5y7KfeNPeZadwX0GhBoM226kzr3DX8DdwSZPdxhhb
zPGOn+sCWdVoQdfzxIt2ECF/MvbZYN4wQN2gpCdKFCkTerxf6fwnxTJlRFRrtptH
y60=
-----END CERTIFICATE-----
Generated at Mon Jun 9 09:50:45 2025 by rpki-client