Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qDnm4EKzm3ZQWuEzrYggN93GfrY.roa
File: qDnm4EKzm3ZQWuEzrYggN93GfrY.roa (raw, json)
Hash identifier: a1IohFD9+8gKtw8VzM6flw5kdj5W9+bKDOxhiWoSe4k=
Subject key identifier: A8:39:E6:E0:42:B3:9B:76:50:5A:E1:33:AD:88:20:37:DD:C6:7E:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888A96B309B4321C17FFD92A55EBD285C6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qDnm4EKzm3ZQWuEzrYggN93GfrY.roa
Signing time: Mon 05 Jun 2023 08:05:12 +0000
ROA not before: Mon 05 Jun 2023 08:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:188:8a96:1eaa/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:96:b3:09:b4:32:1c:17:ff:d9:2a:55:eb:d2:85:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 5 08:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a839e6e042b39b76505ae133ad882037ddc67eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:46:16:11:a3:37:f0:55:f6:cf:82:94:2b:f9:
b4:e9:13:e3:70:5c:e8:e3:20:72:fa:b2:2e:4e:d7:
e4:93:d5:62:c0:92:13:6d:17:8c:4d:32:08:06:05:
5e:21:81:0e:b4:de:69:0e:20:0e:2a:99:7a:70:b0:
76:1b:35:ff:ba:2f:b5:0f:13:0f:20:44:02:d0:8b:
41:2e:31:5e:f5:db:8f:93:06:b3:70:da:75:a7:ab:
06:0a:ad:35:8e:7b:bb:86:cb:8d:cd:77:28:20:1e:
68:27:6f:92:a7:d8:87:f8:f9:46:5f:f5:fc:29:89:
37:85:9f:e8:8a:36:51:4b:7a:19:76:69:c3:9d:1d:
f1:00:03:06:62:11:57:5e:6e:58:f0:f7:28:bf:df:
49:38:06:17:a2:91:b2:a2:27:39:d8:86:1a:61:82:
c3:d1:03:65:24:73:2f:1f:af:42:b4:c4:3b:e7:a9:
48:73:e4:ef:50:da:d1:18:91:d6:5a:43:92:1e:13:
78:5a:50:64:d7:28:58:35:26:a3:c0:19:b0:d2:64:
39:fa:5a:c7:f5:63:12:b7:3c:22:bc:07:12:f4:6a:
a3:0e:d1:f8:79:55:9b:cd:79:67:d5:22:47:e0:d0:
48:dd:2a:4f:08:60:61:aa:c6:35:f2:58:5e:87:a4:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:39:E6:E0:42:B3:9B:76:50:5A:E1:33:AD:88:20:37:DD:C6:7E:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qDnm4EKzm3ZQWuEzrYggN93GfrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:89:fe:33:c7:2c:26:22:d6:c9:9d:5a:98:92:e9:6e:04:d1:
54:55:9f:0d:86:7c:22:11:12:35:b6:d6:82:da:d5:21:c9:c9:
2a:4f:c3:01:a6:a8:ef:db:cd:72:f5:d0:31:73:10:ea:e8:69:
e4:ce:cc:c3:f5:5b:e8:6b:46:db:64:03:e5:1c:81:3e:9d:35:
42:8d:f5:12:0b:a0:e1:16:18:3c:66:b0:20:e6:2a:c9:07:8b:
c1:8b:0a:ea:24:b5:f5:ec:d7:74:e4:f4:e6:7f:c5:c8:0e:dc:
06:ee:c9:5d:21:d3:8d:59:e4:41:85:e4:c8:b8:64:3a:ed:70:
b8:40:49:e7:a9:8e:f0:cb:e3:3f:f6:03:20:cc:84:c2:7b:46:
1e:0c:8a:cc:0d:da:a4:60:03:35:44:75:fa:f4:6d:16:35:6e:
48:93:c0:10:ba:5d:4e:fd:8d:4a:09:86:5d:72:c4:a5:b6:50:
cb:f6:b2:f8:46:2c:b7:85:0e:11:e5:3b:3a:6b:f2:f7:1c:6a:
17:61:b2:7a:e3:2a:a4:46:cd:e2:12:2a:8d:2d:5b:fc:32:d5:
ae:90:c4:15:f2:55:e7:ae:5a:6a:89:3a:05:2c:af:6b:6a:60:
e8:f7:7c:3a:f4:1d:8c:52:7a:78:3d:29:38:25:9e:59:d7:4d:
a9:2b:78:bc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYiKlrMJtDIcF//ZKlXr0oXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjA1MDgwNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODM5ZTZlMDQyYjM5Yjc2NTA1YWUxMzNhZDg4MjAzN2RkYzY3ZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUYWEaM38FX2z4KUK/m06RPjcFzo
4yBy+rIuTtfkk9ViwJITbReMTTIIBgVeIYEOtN5pDiAOKpl6cLB2GzX/ui+1DxMP
IEQC0ItBLjFe9duPkwazcNp1p6sGCq01jnu7hsuNzXcoIB5oJ2+Sp9iH+PlGX/X8
KYk3hZ/oijZRS3oZdmnDnR3xAAMGYhFXXm5Y8Pcov99JOAYXopGyoic52IYaYYLD
0QNlJHMvH69CtMQ756lIc+TvUNrRGJHWWkOSHhN4WlBk1yhYNSajwBmw0mQ5+lrH
9WMStzwivAcS9GqjDtH4eVWbzXln1SJH4NBI3SpPCGBhqsY18lheh6Rk8wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKg55uBCs5t2UFrhM62IIDfdxn62MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcURubTRFS3ptM1pRV3VFenJZZ2dOOTNHZnJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAyJ/jPHLCYi1smdWpiS
6W4E0VRVnw2GfCIREjW21oLa1SHJySpPwwGmqO/bzXL10DFzEOroaeTOzMP1W+hr
RttkA+UcgT6dNUKN9RILoOEWGDxmsCDmKskHi8GLCuoktfXs13Tk9OZ/xcgO3Abu
yV0h041Z5EGF5Mi4ZDrtcLhASeepjvDL4z/2AyDMhMJ7Rh4MiswN2qRgAzVEdfr0
bRY1bkiTwBC6XU79jUoJhl1yxKW2UMv2svhGLLeFDhHlOzpr8vccahdhsnrjKqRG
zeISKo0tW/wy1a6QxBXyVeeuWmqJOgUsr2tqYOj3fDr0HYxSeng9KTglnlnXTakr
eLw=
-----END CERTIFICATE-----
Generated at Thu Jun 12 09:17:43 2025 by rpki-client