Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qVHzNSZs26sRemN425yqJRF_4AQ.roa
File: qVHzNSZs26sRemN425yqJRF_4AQ.roa (raw, json)
Hash identifier: 2QX5J+MHcgmS6h7xGhXPoyunsIIV8M4EMk9DtmS398o=
Subject key identifier: A9:51:F3:35:26:6C:DB:AB:11:7A:63:78:DB:9C:AA:25:11:7F:E0:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B43FEF2A675D80CA58F0C22F6675E3D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qVHzNSZs26sRemN425yqJRF_4AQ.roa
Signing time: Mon 24 Apr 2023 17:11:41 +0000
ROA not before: Mon 24 Apr 2023 17:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b4:3f:ef:2a:67:5d:80:ca:58:f0:c2:2f:66:75:e3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 17:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a951f335266cdbab117a6378db9caa25117fe004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a5:f8:b9:fb:5e:87:6d:c4:3d:04:ef:4b:4a:
2a:fe:fc:41:f2:3b:d3:66:ac:7b:80:10:52:7f:97:
3f:35:3f:78:56:51:17:c6:4b:1e:85:70:19:62:c7:
8d:96:f8:f5:43:df:97:aa:68:12:bc:2e:74:ed:3a:
47:f5:4a:8d:11:7f:18:68:e1:ec:cb:aa:9b:33:35:
d9:af:6d:d5:2e:c2:a9:de:c2:5b:b0:9f:2f:b4:d9:
93:d7:0d:31:7e:17:0a:39:0d:6c:1c:ee:14:37:5d:
7a:d2:87:91:a6:fa:f1:a5:b0:37:8d:68:24:de:1b:
d4:e4:eb:9c:2d:78:77:46:0c:d3:28:17:28:08:70:
eb:3b:f6:ba:08:c6:f8:6f:9a:30:34:a0:48:31:a4:
a5:7c:a5:0c:4a:05:c5:60:7d:bb:28:97:6c:28:6a:
0e:2b:88:bb:3d:4d:3f:ae:2c:cb:80:f8:1d:03:c3:
82:ca:43:1f:04:2d:94:68:70:04:3e:72:43:e1:07:
71:30:6c:5d:27:8f:f3:f4:91:31:12:4e:2b:87:97:
95:9f:23:5b:1b:54:17:0a:26:15:1c:1b:f0:2e:e7:
41:ab:ad:3e:f7:e0:cf:55:9a:9a:a0:c6:cc:89:6d:
84:37:87:58:28:4d:11:2c:58:30:35:98:ea:ba:50:
af:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:51:F3:35:26:6C:DB:AB:11:7A:63:78:DB:9C:AA:25:11:7F:E0:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qVHzNSZs26sRemN425yqJRF_4AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:05:6b:ad:53:a9:f9:8a:25:00:3e:f2:ac:48:f7:3c:b5:79:
f0:7f:10:5d:b0:db:9b:70:be:73:8e:bb:5e:ca:1f:f5:7f:98:
8b:2f:de:c5:08:e7:b7:75:77:aa:1c:c9:7e:fc:74:20:c8:1b:
f6:0a:8b:0c:0d:b4:a1:7f:ec:32:f0:b0:d1:34:94:7d:f2:95:
6a:33:02:3c:48:24:b3:84:16:29:a2:ab:b4:b4:0f:c0:13:cf:
88:cb:65:31:16:92:8e:5e:43:6a:1a:2f:c2:a5:cb:70:93:f7:
9d:0e:6d:56:32:a8:70:cf:eb:12:62:78:e7:9e:4c:d4:23:f9:
58:ca:12:f5:73:49:5e:67:6e:53:ab:12:1e:30:17:4b:e1:bf:
c2:3f:48:1e:49:e6:be:2f:7a:bd:66:6b:db:0d:48:4c:4b:55:
c2:e9:65:6e:1e:11:fe:e7:dc:e7:e9:79:cf:d5:6b:75:67:52:
a4:7f:0b:3b:37:40:50:18:17:7e:cf:13:a1:5b:2d:30:46:9a:
95:34:10:64:3c:94:10:50:cf:62:11:87:c9:cf:14:f3:28:8c:
20:27:0e:40:cc:a7:71:2c:df:00:e6:a5:62:f3:f6:88:5f:28:
e5:a8:2b:a2:09:f0:01:28:a6:6c:f2:cf:43:72:45:40:ce:f2:
a9:fd:7b:1b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYe0P+8qZ12Ayljwwi9mdePWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDI0MTcxMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTUxZjMzNTI2NmNkYmFiMTE3YTYzNzhkYjljYWEyNTExN2ZlMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaX4ufteh23EPQTvS0oq/vxB8jvT
Zqx7gBBSf5c/NT94VlEXxksehXAZYseNlvj1Q9+XqmgSvC507TpH9UqNEX8YaOHs
y6qbMzXZr23VLsKp3sJbsJ8vtNmT1w0xfhcKOQ1sHO4UN1160oeRpvrxpbA3jWgk
3hvU5OucLXh3RgzTKBcoCHDrO/a6CMb4b5owNKBIMaSlfKUMSgXFYH27KJdsKGoO
K4i7PU0/rizLgPgdA8OCykMfBC2UaHAEPnJD4QdxMGxdJ4/z9JExEk4rh5eVnyNb
G1QXCiYVHBvwLudBq60+9+DPVZqaoMbMiW2EN4dYKE0RLFgwNZjqulCv2wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKlR8zUmbNurEXpjeNucqiURf+AEMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcVZIek5TWnMyNnNSZW1ONDI1eXFKUkZfNEFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEkFa61TqfmKJQA+8qxI
9zy1efB/EF2w25twvnOOu17KH/V/mIsv3sUI57d1d6ocyX78dCDIG/YKiwwNtKF/
7DLwsNE0lH3ylWozAjxIJLOEFimiq7S0D8ATz4jLZTEWko5eQ2oaL8Kly3CT950O
bVYyqHDP6xJieOeeTNQj+VjKEvVzSV5nblOrEh4wF0vhv8I/SB5J5r4ver1ma9sN
SExLVcLpZW4eEf7n3Ofpec/Va3VnUqR/Czs3QFAYF37PE6FbLTBGmpU0EGQ8lBBQ
z2IRh8nPFPMojCAnDkDMp3Es3wDmpWLz9ohfKOWoK6IJ8AEopmzyz0NyRUDO8qn9
exs=
-----END CERTIFICATE-----
Generated at Wed Jun 11 06:08:33 2025 by rpki-client