Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0KZ2LA8D8KgrvQcujxbzrWiWTrA.roa
File: 0KZ2LA8D8KgrvQcujxbzrWiWTrA.roa (raw, json)
Hash identifier: k+2sdB2fFJqM4RI2OqT1Kjt/n7jlEpDJDt6rcGKPDTI=
Subject key identifier: D0:A6:76:2C:0F:03:F0:A8:2B:BD:07:2E:8F:16:F3:AD:68:96:4E:B0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D703E8BB370A81C998D463C5BAC96177
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0KZ2LA8D8KgrvQcujxbzrWiWTrA.roa
Signing time: Sat 03 Dec 2022 08:04:28 +0000
ROA not before: Sat 03 Dec 2022 08:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:d703:d727/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d7:03:e8:bb:37:0a:81:c9:98:d4:63:c5:ba:c9:61:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 08:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0a6762c0f03f0a82bbd072e8f16f3ad68964eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b3:8c:1f:ba:5c:10:60:56:25:26:27:da:aa:
7c:d7:a0:03:f5:d9:82:a7:de:49:75:c3:c8:4b:d9:
32:0b:11:a0:f1:80:cd:a0:ad:b9:99:5c:40:1d:6a:
a9:ef:99:b6:e6:23:39:cf:b3:dd:ab:81:e1:87:dc:
00:44:3d:27:ea:92:4b:01:d9:40:d5:88:58:d8:a5:
88:f9:a8:7e:60:fc:f8:95:a8:5a:fa:09:3f:34:07:
50:50:0a:c8:9b:a6:76:c1:b4:13:51:85:6a:85:e8:
f9:a1:99:f4:90:56:6d:06:ee:72:3d:60:22:5c:9c:
78:01:db:ae:85:c2:d4:85:cc:8b:cf:52:cd:8e:09:
9f:61:79:e1:3a:14:a4:6a:42:c2:80:92:78:b6:c1:
06:0b:99:9a:79:d7:92:bf:8b:84:72:c2:3c:be:d8:
21:34:eb:9b:4c:22:a6:98:38:9f:9b:d3:ac:20:d8:
3d:dd:ad:fd:ef:a4:ad:84:a6:69:0e:0a:d7:48:7a:
70:7a:f4:cb:5e:6d:0c:86:31:f4:68:55:dd:45:51:
10:6f:32:1d:e7:db:4f:b6:cb:d4:e1:50:97:79:5e:
39:68:b6:d6:d5:35:d6:02:06:87:78:df:19:c6:a1:
0a:1e:42:38:cc:af:c8:c0:d9:d8:7a:70:5c:c7:7d:
61:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A6:76:2C:0F:03:F0:A8:2B:BD:07:2E:8F:16:F3:AD:68:96:4E:B0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0KZ2LA8D8KgrvQcujxbzrWiWTrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:b6:c6:3c:be:01:01:64:ad:ca:6c:96:8c:3f:c6:dd:99:a3:
7e:1a:fd:2e:88:98:b8:f2:1d:1b:01:03:0e:a7:51:2e:d7:f7:
5e:3c:f4:fd:d2:99:4c:9e:dc:ba:00:2b:cd:c8:23:1b:01:c0:
0a:3c:52:34:54:22:28:ae:86:c6:33:d5:17:9a:dd:f8:37:4a:
eb:29:50:8b:75:44:78:51:5f:c5:26:66:1c:f1:7e:96:31:c1:
76:71:5b:b4:69:ea:06:e7:38:e0:6f:3a:ba:28:60:4b:bd:68:
2f:60:25:6e:b2:c0:4d:27:a6:ad:60:8e:07:08:ce:cc:66:b3:
60:42:7c:02:8a:9f:49:84:8a:0b:e1:53:07:b6:3d:22:f6:01:
ea:8b:52:ae:25:80:6c:0f:69:8e:0a:c0:c8:eb:a0:80:12:fe:
0b:94:d3:51:b4:fb:60:41:d4:31:55:86:44:46:d9:c7:ca:ff:
aa:ff:35:a3:48:7b:b5:19:4a:2f:af:0e:dc:a5:11:5b:17:c1:
7a:7b:e8:bd:b2:b8:8f:03:f3:19:21:de:a0:4e:21:2f:66:6f:
29:aa:42:9d:3b:ed:54:de:87:26:85:16:5b:c6:2e:70:2a:94:
46:79:47:9a:17:c2:ee:a9:9c:3e:3d:d9:c8:86:3c:2b:ee:a3:
68:99:cd:59
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTXA+i7NwqByZjUY8W6yWF3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjAzMDgwNDI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGE2NzYyYzBmMDNmMGE4MmJiZDA3MmU4ZjE2ZjNhZDY4OTY0ZWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bOMH7pcEGBWJSYn2qp816AD9dmC
p95JdcPIS9kyCxGg8YDNoK25mVxAHWqp75m25iM5z7Pdq4Hhh9wARD0n6pJLAdlA
1YhY2KWI+ah+YPz4laha+gk/NAdQUArIm6Z2wbQTUYVqhej5oZn0kFZtBu5yPWAi
XJx4AduuhcLUhcyLz1LNjgmfYXnhOhSkakLCgJJ4tsEGC5maedeSv4uEcsI8vtgh
NOubTCKmmDifm9OsINg93a3976SthKZpDgrXSHpwevTLXm0MhjH0aFXdRVEQbzId
59tPtsvU4VCXeV45aLbW1TXWAgaHeN8ZxqEKHkI4zK/IwNnYenBcx31hTwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNCmdiwPA/CoK70HLo8W861olk6wMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMEtaMkxBOEQ4S2dydlFjdWp4YnpyV2lXVHJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALG2xjy+AQFkrcpslow/
xt2Zo34a/S6ImLjyHRsBAw6nUS7X91489P3SmUye3LoAK83IIxsBwAo8UjRUIiiu
hsYz1Rea3fg3SuspUIt1RHhRX8UmZhzxfpYxwXZxW7Rp6gbnOOBvOrooYEu9aC9g
JW6ywE0npq1gjgcIzsxms2BCfAKKn0mEigvhUwe2PSL2AeqLUq4lgGwPaY4KwMjr
oIAS/guU01G0+2BB1DFVhkRG2cfK/6r/NaNIe7UZSi+vDtylEVsXwXp76L2yuI8D
8xkh3qBOIS9mbymqQp077VTehyaFFlvGLnAqlEZ5R5oXwu6pnD492ciGPCvuo2iZ
zVk=
-----END CERTIFICATE-----
Generated at Thu May 1 12:07:47 2025 by rpki-client