Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qTuR7dpVR5O4kZ6em-b7Dr3wBTY.roa
File: qTuR7dpVR5O4kZ6em-b7Dr3wBTY.roa (raw, json)
Hash identifier: ymneGLtyEXvdIT40vWuQkvUYrLIJkiC1/3lffxzznXw=
Subject key identifier: A9:3B:91:ED:DA:55:47:93:B8:91:9E:9E:9B:E6:FB:0E:BD:F0:05:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B6604A76A3C3CECA875618136185B375
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qTuR7dpVR5O4kZ6em-b7Dr3wBTY.roa
Signing time: Tue 13 Jun 2023 20:09:03 +0000
ROA not before: Tue 13 Jun 2023 20:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b6:60:4a:76:a3:c3:ce:ca:87:56:18:13:61:85:b3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 20:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a93b91edda554793b8919e9e9be6fb0ebdf00536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:5f:69:dd:fc:19:bb:57:4e:4d:e5:8f:9d:
fd:91:3e:fa:62:3e:9e:ab:a8:1d:65:80:57:09:ac:
eb:0f:b5:db:5f:48:8b:7d:8c:69:95:c0:e6:65:18:
26:22:c0:ca:01:73:30:87:ca:15:43:59:74:a7:4e:
2e:ff:dc:77:8c:08:5b:75:62:25:22:50:c9:e3:f7:
e8:09:33:c9:df:74:4e:83:67:9a:f8:f2:a6:1b:b4:
bb:28:28:e0:51:90:62:da:f6:ef:1c:73:09:88:fa:
12:74:43:fa:7c:01:cb:a6:85:0b:43:e2:67:1e:7a:
9b:fa:33:7a:5d:ea:dd:78:a4:ac:4e:c4:a1:30:7b:
7a:a2:32:33:2d:18:28:b1:15:07:ca:ba:b5:d7:63:
78:0f:54:e0:88:63:1b:2f:08:02:de:dc:8c:5c:0d:
76:3e:ff:80:cc:cc:67:6b:34:ae:c6:6d:09:f7:71:
f1:8f:bd:0b:01:89:8f:14:19:f5:b1:91:42:eb:d9:
08:76:1b:fa:fb:03:50:68:68:5c:63:ad:c3:04:ea:
e9:91:e5:19:b7:f2:1e:9c:44:4f:59:2b:f1:0f:e3:
e3:6f:22:92:69:4f:fc:cb:0d:08:10:4f:de:21:22:
79:0a:da:c4:d9:89:c1:16:98:92:f0:53:10:fc:ec:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3B:91:ED:DA:55:47:93:B8:91:9E:9E:9B:E6:FB:0E:BD:F0:05:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qTuR7dpVR5O4kZ6em-b7Dr3wBTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:75:11:df:ac:77:d4:f3:bb:7e:70:73:d1:2a:86:35:8c:eb:
51:20:26:08:f0:8b:e0:4c:1a:11:a1:9f:cd:8e:6b:e2:69:a0:
c0:44:64:7f:71:a3:d2:ad:6e:8e:e4:12:2e:c5:83:d9:12:97:
86:c1:1b:d2:9b:64:e3:67:5c:ed:21:89:7e:50:df:fb:74:51:
bc:2f:5c:e5:9d:ed:56:b0:c3:3a:06:a4:f9:97:77:cd:1d:ac:
d7:27:c3:37:61:9e:ed:4b:85:5b:55:1c:71:49:3d:4b:7f:6c:
19:5f:a5:ea:9d:b3:08:1e:ff:5d:12:cb:4a:01:1f:43:93:23:
39:ea:32:19:4d:70:c7:6d:0f:d2:d2:ed:1a:35:a7:8d:bc:65:
75:d4:c3:f5:07:12:2d:c7:13:c0:7b:b9:a4:8d:ae:65:d9:03:
d2:b6:90:2c:33:ac:e5:ba:d0:1e:4e:9d:ce:ac:ea:93:02:f3:
e8:4f:27:0a:79:32:f4:8e:cf:c3:ba:96:62:dc:f5:04:95:b6:
2f:5e:c4:d3:8b:d8:f2:cf:2b:e4:4a:33:3b:6f:6e:65:05:c3:
64:07:e2:c7:16:b4:64:f8:7f:52:ba:5a:f9:ee:c7:d5:6e:33:
3e:da:73:88:1b:1a:47:61:08:ff:98:c2:c1:8f:a4:23:e6:64:
10:03:82:75
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYi2YEp2o8POyodWGBNhhbN1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjEzMjAwOTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTNiOTFlZGRhNTU0NzkzYjg5MTllOWU5YmU2ZmIwZWJkZjAwNTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJhfad38GbtXTk3lj539kT76Yj6e
q6gdZYBXCazrD7XbX0iLfYxplcDmZRgmIsDKAXMwh8oVQ1l0p04u/9x3jAhbdWIl
IlDJ4/foCTPJ33ROg2ea+PKmG7S7KCjgUZBi2vbvHHMJiPoSdEP6fAHLpoULQ+Jn
Hnqb+jN6XerdeKSsTsShMHt6ojIzLRgosRUHyrq112N4D1TgiGMbLwgC3tyMXA12
Pv+AzMxnazSuxm0J93Hxj70LAYmPFBn1sZFC69kIdhv6+wNQaGhcY63DBOrpkeUZ
t/IenERPWSvxD+PjbyKSaU/8yw0IEE/eISJ5CtrE2YnBFpiS8FMQ/OwK7wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKk7ke3aVUeTuJGenpvm+w698AU2MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcVR1UjdkcFZSNU80a1o2ZW0tYjdEcjN3QlRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKN1Ed+sd9Tzu35wc9Eq
hjWM61EgJgjwi+BMGhGhn82Oa+JpoMBEZH9xo9Ktbo7kEi7Fg9kSl4bBG9KbZONn
XO0hiX5Q3/t0UbwvXOWd7VawwzoGpPmXd80drNcnwzdhnu1LhVtVHHFJPUt/bBlf
peqdswge/10Sy0oBH0OTIznqMhlNcMdtD9LS7Ro1p428ZXXUw/UHEi3HE8B7uaSN
rmXZA9K2kCwzrOW60B5Onc6s6pMC8+hPJwp5MvSOz8O6lmLc9QSVti9exNOL2PLP
K+RKMztvbmUFw2QH4scWtGT4f1K6Wvnux9VuMz7ac4gbGkdhCP+YwsGPpCPmZBAD
gnU=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:24:53 2025 by rpki-client