Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K1Zvgu1FmN5c3StSO-y2YVPCKyA.roa
File: K1Zvgu1FmN5c3StSO-y2YVPCKyA.roa (raw, json)
Hash identifier: /NC4iJc0OnN43a1EKWlmMIEUTX7K4MI9g0tcLwODze4=
Subject key identifier: 2B:56:6F:82:ED:45:98:DE:5C:DD:2B:52:3B:EC:B6:61:53:C2:2B:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181E5733C3FDCEAC06D3C887D8F21D5CB04
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K1Zvgu1FmN5c3StSO-y2YVPCKyA.roa
Signing time: Sun 10 Jul 2022 00:12:23 +0000
ROA not before: Sun 10 Jul 2022 00:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e5:73:3c:3f:dc:ea:c0:6d:3c:88:7d:8f:21:d5:cb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 00:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b566f82ed4598de5cdd2b523becb66153c22b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ff:3e:cc:ca:f5:2e:74:6e:2a:43:b5:f8:70:
19:2f:ef:06:92:01:07:70:5d:d6:9c:11:06:ef:c6:
1e:f5:69:9f:ab:3e:c2:3b:ba:bc:88:66:af:0c:72:
8b:b3:13:f9:ab:c2:06:7e:8e:57:d8:0a:2d:1a:69:
c8:a1:3f:2a:d1:60:4f:b1:08:9f:84:98:c8:3c:03:
69:03:3a:86:c5:41:03:49:ce:4f:6c:75:ab:15:25:
cb:0a:97:12:29:97:ab:31:41:23:18:f6:2d:91:6c:
e5:ac:76:66:f2:32:5e:63:0a:0a:87:57:cc:0b:e7:
cc:2b:54:c1:72:52:fa:24:51:65:37:03:59:5a:5a:
7c:12:a9:b2:28:ca:d3:47:5e:1e:95:13:fe:b5:92:
3c:db:26:05:70:8f:1d:1a:91:aa:2a:75:7c:f2:cf:
ef:89:2b:00:48:0a:0a:68:13:bf:ae:07:ea:ef:b3:
b4:5a:97:da:7a:b7:36:b9:29:8b:6d:3a:62:88:cf:
fe:7b:11:2b:97:ca:82:2f:07:13:51:4f:ab:53:f5:
a9:dd:ba:1b:38:95:99:df:27:71:74:ae:22:bf:a6:
f0:d3:05:fc:c5:fd:de:c6:32:d1:62:a2:52:df:e1:
69:f4:a1:81:c7:35:88:4d:5e:49:d0:e5:85:dd:3f:
91:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:56:6F:82:ED:45:98:DE:5C:DD:2B:52:3B:EC:B6:61:53:C2:2B:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K1Zvgu1FmN5c3StSO-y2YVPCKyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:52:e0:ae:a2:21:de:19:13:42:ea:89:0d:4a:11:a3:eb:9b:
29:33:46:2c:7b:03:dd:23:c2:24:d7:e6:f8:6b:bc:cd:4f:a0:
05:06:64:a1:a1:75:2d:49:d7:0e:bb:13:90:c6:81:35:2a:36:
1d:a4:1b:5e:cc:d4:67:b8:df:35:0b:3e:70:da:a2:ee:62:5d:
73:e1:3f:13:a3:30:ba:08:c4:af:0b:1b:b0:7d:d7:73:e3:77:
2f:67:9d:6b:31:5f:54:05:2d:92:5d:e7:39:d7:d1:56:0f:cd:
86:f0:80:3e:3f:96:8a:c4:17:03:15:90:67:69:e7:61:98:b5:
15:b1:81:ba:3b:0f:d8:ad:59:67:75:a6:51:b2:07:ec:e9:ff:
fe:ff:a0:74:69:c1:14:03:fc:0f:51:ad:62:b1:9a:76:41:0f:
63:a1:9c:bb:fa:6f:d1:66:ce:c5:2a:75:cd:93:87:c7:9e:64:
5b:a4:0d:1a:01:75:0c:da:21:31:ee:33:49:42:d6:de:4b:25:
0b:c2:fa:be:4a:07:85:82:79:3a:f7:9a:d6:f2:97:a5:db:4e:
80:a2:f7:d5:02:27:43:88:da:0c:74:3f:45:af:5f:7f:01:b9:
ef:ea:f0:28:95:e4:e1:4b:5c:23:65:47:0f:d0:8e:a1:6f:d9:
2b:14:16:22
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYHlczw/3OrAbTyIfY8h1csEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzEwMDAxMjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjU2NmY4MmVkNDU5OGRlNWNkZDJiNTIzYmVjYjY2MTUzYzIyYjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/8+zMr1LnRuKkO1+HAZL+8GkgEH
cF3WnBEG78Ye9Wmfqz7CO7q8iGavDHKLsxP5q8IGfo5X2AotGmnIoT8q0WBPsQif
hJjIPANpAzqGxUEDSc5PbHWrFSXLCpcSKZerMUEjGPYtkWzlrHZm8jJeYwoKh1fM
C+fMK1TBclL6JFFlNwNZWlp8EqmyKMrTR14elRP+tZI82yYFcI8dGpGqKnV88s/v
iSsASAoKaBO/rgfq77O0Wpfaerc2uSmLbTpiiM/+exErl8qCLwcTUU+rU/Wp3bob
OJWZ3ydxdK4iv6bw0wX8xf3exjLRYqJS3+Fp9KGBxzWITV5J0OWF3T+RQwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCtWb4LtRZjeXN0rUjvstmFTwisgMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSzFadmd1MUZtTjVjM1N0U08teTJZVlBDS3lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEFS4K6iId4ZE0LqiQ1K
EaPrmykzRix7A90jwiTX5vhrvM1PoAUGZKGhdS1J1w67E5DGgTUqNh2kG17M1Ge4
3zULPnDaou5iXXPhPxOjMLoIxK8LG7B913Pjdy9nnWsxX1QFLZJd5znX0VYPzYbw
gD4/lorEFwMVkGdp52GYtRWxgbo7D9itWWd1plGyB+zp//7/oHRpwRQD/A9RrWKx
mnZBD2OhnLv6b9FmzsUqdc2Th8eeZFukDRoBdQzaITHuM0lC1t5LJQvC+r5KB4WC
eTr3mtbyl6XbToCi99UCJ0OI2gx0P0WvX38Bue/q8CiV5OFLXCNlRw/QjqFv2SsU
FiI=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:04 2025 by rpki-client