Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KIG2z6NRGnatJO6lXI8G69q5Mzg.roa
File: KIG2z6NRGnatJO6lXI8G69q5Mzg.roa (raw, json)
Hash identifier: 7uSWUiUBtahxqZpxM9dO5/ReWZp+ODGeG3p1E0jQFC4=
Subject key identifier: 28:81:B6:CF:A3:51:1A:76:AD:24:EE:A5:5C:8F:06:EB:DA:B9:33:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018841A6B6698A551E7B9F73D552EC7E3E1E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KIG2z6NRGnatJO6lXI8G69q5Mzg.roa
Signing time: Mon 22 May 2023 04:10:24 +0000
ROA not before: Mon 22 May 2023 04:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:41:a6:b6:69:8a:55:1e:7b:9f:73:d5:52:ec:7e:3e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 22 04:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2881b6cfa3511a76ad24eea55c8f06ebdab93338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:82:39:2a:8d:5a:3d:0d:dd:31:06:ff:11:b5:
21:84:0c:50:9c:58:85:a9:83:ac:a7:eb:25:21:f3:
6d:ba:08:24:1b:31:e9:7e:c8:9a:81:2d:87:b7:f3:
20:48:ec:0a:63:41:eb:1e:95:7c:97:4b:9d:ae:67:
ba:c4:48:89:c2:3c:ed:12:5f:e4:4e:e9:e0:d2:8b:
09:8f:94:ca:9a:7b:b5:d2:d1:19:c2:b9:ca:22:33:
49:7c:01:03:1d:cb:69:5b:eb:94:bf:5b:2c:ab:0a:
a7:25:7c:93:04:2a:0b:e9:de:d0:22:15:f9:12:9d:
2f:68:90:22:b6:d8:01:84:66:9c:30:3f:28:7e:c7:
bb:81:1d:e6:f5:d6:76:4c:3e:eb:66:35:4c:71:13:
4e:74:9a:3b:71:21:fa:1e:e5:22:76:3b:e4:ad:bd:
ad:ae:7d:40:79:73:84:25:68:e9:4e:9c:e6:dc:e8:
2e:57:e2:c6:5d:e9:10:64:a4:38:a6:66:a5:ef:c6:
43:95:b8:97:2a:7b:dd:25:95:b0:07:51:07:1f:04:
ff:b8:eb:33:f7:f7:18:ed:f0:bd:6a:1b:63:8b:6b:
04:97:d1:42:f9:9e:74:3b:c8:ec:f2:f9:2f:12:25:
6b:df:17:68:73:13:b2:e6:27:80:e4:87:cf:fd:97:
81:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:81:B6:CF:A3:51:1A:76:AD:24:EE:A5:5C:8F:06:EB:DA:B9:33:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KIG2z6NRGnatJO6lXI8G69q5Mzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:fc:63:2d:da:7f:0a:80:81:8b:7e:da:06:23:9d:0f:df:ee:
e6:e4:a9:a5:08:41:c6:bd:47:a7:a3:a1:55:33:97:94:67:95:
5c:4c:69:2c:29:6f:db:48:d5:80:ac:62:29:6b:a1:be:d3:a2:
24:96:2e:5b:31:8e:a0:c7:1a:08:5d:82:9c:e3:3b:57:15:13:
fb:96:f9:40:9e:f8:f3:bf:b6:71:df:d8:c3:22:24:35:90:8d:
e7:ff:8a:27:be:8a:40:a8:4b:7a:bb:7d:f7:10:27:6e:c7:bd:
54:76:18:1f:2d:c2:31:0c:33:67:9b:87:9a:7a:5d:1b:8e:d1:
28:83:92:d5:84:5b:65:e2:1b:79:61:fa:02:81:f7:fc:05:72:
95:7c:4a:cb:90:fd:4a:33:16:34:e2:c1:17:29:ec:ed:11:11:
c2:ca:d4:2c:91:72:74:7f:f2:10:7c:6f:11:5f:4a:44:d8:91:
16:ff:c8:77:03:73:22:04:96:19:d9:3e:4e:a6:e2:61:af:4c:
bd:d5:b5:53:f9:16:98:d8:76:da:8d:5a:2a:01:da:e3:16:8d:
2b:6f:6e:d2:69:ef:b2:f1:d1:1f:46:d9:f4:20:e2:3f:c4:13:
b6:8e:3d:8c:38:3e:da:51:13:81:3a:15:82:fb:3b:fc:bb:5f:
23:4c:14:4d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhBprZpilUee59z1VLsfj4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTIyMDQxMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODgxYjZjZmEzNTExYTc2YWQyNGVlYTU1YzhmMDZlYmRhYjkzMzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4I5Ko1aPQ3dMQb/EbUhhAxQnFiF
qYOsp+slIfNtuggkGzHpfsiagS2Ht/MgSOwKY0HrHpV8l0udrme6xEiJwjztEl/k
Tung0osJj5TKmnu10tEZwrnKIjNJfAEDHctpW+uUv1ssqwqnJXyTBCoL6d7QIhX5
Ep0vaJAittgBhGacMD8ofse7gR3m9dZ2TD7rZjVMcRNOdJo7cSH6HuUidjvkrb2t
rn1AeXOEJWjpTpzm3OguV+LGXekQZKQ4pmal78ZDlbiXKnvdJZWwB1EHHwT/uOsz
9/cY7fC9ahtji2sEl9FC+Z50O8js8vkvEiVr3xdocxOy5ieA5IfP/ZeB+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCiBts+jURp2rSTupVyPBuvauTM4MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvS0lHMno2TlJHbmF0Sk82bFhJOEc2OXE1TXpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHP8Yy3afwqAgYt+2gYj
nQ/f7ubkqaUIQca9R6ejoVUzl5RnlVxMaSwpb9tI1YCsYilrob7ToiSWLlsxjqDH
GghdgpzjO1cVE/uW+UCe+PO/tnHf2MMiJDWQjef/iie+ikCoS3q7ffcQJ27HvVR2
GB8twjEMM2ebh5p6XRuO0SiDktWEW2XiG3lh+gKB9/wFcpV8SsuQ/UozFjTiwRcp
7O0REcLK1CyRcnR/8hB8bxFfSkTYkRb/yHcDcyIElhnZPk6m4mGvTL3VtVP5FpjY
dtqNWioB2uMWjStvbtJp77Lx0R9G2fQg4j/EE7aOPYw4PtpRE4E6FYL7O/y7XyNM
FE0=
-----END CERTIFICATE-----
Generated at Sat May 3 12:12:42 2025 by rpki-client