Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K2ECdT3srFy4o3uNGO8BLMxZEFg.roa
File: K2ECdT3srFy4o3uNGO8BLMxZEFg.roa (raw, json)
Hash identifier: VIAJbaDGgDjYDXyDGDgccNhH4p4InjFGkzQ2dsiudoI=
Subject key identifier: 2B:61:02:75:3D:EC:AC:5C:B8:A3:7B:8D:18:EF:01:2C:CC:59:10:58
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182253282D4EAC06EB9ABC0A20BC691179C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K2ECdT3srFy4o3uNGO8BLMxZEFg.roa
Signing time: Fri 22 Jul 2022 09:17:23 +0000
ROA not before: Fri 22 Jul 2022 09:17:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:25:32:82:d4:ea:c0:6e:b9:ab:c0:a2:0b:c6:91:17:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 09:17:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b6102753decac5cb8a37b8d18ef012ccc591058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:c8:97:b2:26:0b:9d:ed:c1:6f:b1:3e:e0:
79:05:5d:ff:99:9c:18:74:5f:ae:3d:55:e2:e1:8e:
0a:a6:0f:11:ca:b5:67:49:35:2d:88:b6:00:25:fe:
39:77:bb:f1:b3:7e:54:0e:06:13:62:55:d9:16:00:
c2:4d:4d:8d:a8:ca:74:ab:c9:4d:81:8c:fe:f2:b7:
6a:d7:69:33:f6:06:33:33:14:16:76:c7:26:a9:a3:
3b:e7:e9:09:de:59:db:42:58:f3:29:35:38:5c:53:
63:2b:c5:80:17:84:74:a1:3b:43:38:0f:5a:2c:d9:
75:db:b9:57:13:44:2b:13:eb:38:e2:0f:3c:99:35:
f2:92:07:5c:b7:61:15:8a:96:96:00:fd:29:f7:78:
16:de:3f:8c:a2:ae:ad:2e:55:28:c0:13:6d:5d:41:
3d:98:4d:ea:16:a7:2e:e6:44:4b:db:6c:18:f3:ff:
ba:cc:29:e4:28:93:51:f5:8f:d7:a7:80:c6:32:34:
23:99:0a:f8:96:3f:b7:8e:72:d2:94:51:a1:09:06:
f1:c9:9a:a2:ba:1c:ae:62:a1:5a:90:ef:75:40:ad:
77:7e:4f:45:d6:48:99:30:37:46:06:4e:4a:76:0a:
bf:88:70:1c:81:eb:32:8f:84:95:2c:8b:0e:7d:92:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:61:02:75:3D:EC:AC:5C:B8:A3:7B:8D:18:EF:01:2C:CC:59:10:58
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K2ECdT3srFy4o3uNGO8BLMxZEFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:c8:5b:25:a9:ff:40:d7:54:31:65:ac:5d:fc:96:8b:47:10:
4f:63:ee:92:19:76:d5:37:34:8f:f4:f2:fa:7a:a9:c0:a3:df:
f1:66:77:bc:63:5f:75:1b:71:e1:7f:64:00:3e:77:af:b8:2f:
40:b1:77:01:ca:1f:e8:07:3e:32:8c:14:40:f1:93:fa:df:93:
46:35:e2:1d:af:9b:78:3c:e6:05:c9:fb:79:ad:e1:59:cf:54:
99:46:b7:ed:58:49:f9:20:90:9c:83:ee:f4:d4:e0:78:06:57:
ba:c3:b0:af:7e:6d:e6:a6:18:0b:86:bf:f2:2d:27:ef:97:7f:
b0:da:16:85:d9:62:a8:25:1e:54:e6:d3:cc:1e:d6:16:2e:24:
da:e6:04:25:89:8a:d0:3a:c0:78:77:c2:ab:f3:98:03:b7:1a:
9f:72:18:6c:eb:c4:84:e9:89:88:7f:5c:de:55:80:ea:df:0c:
fe:95:d9:3b:b7:43:2a:ba:65:c4:3e:5b:b2:f4:0e:da:b2:24:
84:d0:6b:67:31:03:af:2e:30:d2:5b:74:e0:76:04:33:92:1c:
86:55:d2:0b:ad:31:41:33:09:e6:50:5d:7b:a3:82:3c:6c:85:
25:77:59:54:c0:71:81:97:d5:8f:78:e3:e4:7c:fb:90:2e:a2:
b8:ac:e3:cd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYIlMoLU6sBuuavAogvGkRecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzIyMDkxNzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjYxMDI3NTNkZWNhYzVjYjhhMzdiOGQxOGVmMDEyY2NjNTkxMDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJfIl7ImC53twW+xPuB5BV3/mZwY
dF+uPVXi4Y4Kpg8RyrVnSTUtiLYAJf45d7vxs35UDgYTYlXZFgDCTU2NqMp0q8lN
gYz+8rdq12kz9gYzMxQWdscmqaM75+kJ3lnbQljzKTU4XFNjK8WAF4R0oTtDOA9a
LNl127lXE0QrE+s44g88mTXykgdct2EVipaWAP0p93gW3j+Moq6tLlUowBNtXUE9
mE3qFqcu5kRL22wY8/+6zCnkKJNR9Y/Xp4DGMjQjmQr4lj+3jnLSlFGhCQbxyZqi
uhyuYqFakO91QK13fk9F1kiZMDdGBk5Kdgq/iHAcgesyj4SVLIsOfZK+JwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCthAnU97KxcuKN7jRjvASzMWRBYMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSzJFQ2RUM3NyRnk0bzN1TkdPOEJMTXhaRUZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACvIWyWp/0DXVDFlrF38
lotHEE9j7pIZdtU3NI/08vp6qcCj3/Fmd7xjX3UbceF/ZAA+d6+4L0CxdwHKH+gH
PjKMFEDxk/rfk0Y14h2vm3g85gXJ+3mt4VnPVJlGt+1YSfkgkJyD7vTU4HgGV7rD
sK9+beamGAuGv/ItJ++Xf7DaFoXZYqglHlTm08we1hYuJNrmBCWJitA6wHh3wqvz
mAO3Gp9yGGzrxITpiYh/XN5VgOrfDP6V2Tu3Qyq6ZcQ+W7L0DtqyJITQa2cxA68u
MNJbdOB2BDOSHIZV0gutMUEzCeZQXXujgjxshSV3WVTAcYGX1Y944+R8+5Auoris
480=
-----END CERTIFICATE-----
Generated at Fri May 2 19:31:34 2025 by rpki-client