Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KJs_9rNPn6lYM0G3TxwgbfkS58E.roa
File: KJs_9rNPn6lYM0G3TxwgbfkS58E.roa (raw, json)
Hash identifier: DQ+GHpu9NWV5v6SLRikJO/udyRmYxcCcygVoMOf4ysg=
Subject key identifier: 28:9B:3F:F6:B3:4F:9F:A9:58:33:41:B7:4F:1C:20:6D:F9:12:E7:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018432E9EAB5A7E796AFA8CCC63F53D2A5AA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KJs_9rNPn6lYM0G3TxwgbfkS58E.roa
Signing time: Tue 01 Nov 2022 11:18:21 +0000
ROA not before: Tue 01 Nov 2022 11:18:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:32:e9:ea:b5:a7:e7:96:af:a8:cc:c6:3f:53:d2:a5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 1 11:18:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=289b3ff6b34f9fa9583341b74f1c206df912e7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:8b:6a:0c:51:87:c6:25:22:cf:56:91:cf:
55:57:f8:46:ae:5b:55:7f:e4:cb:c3:a9:a1:4b:38:
22:05:4c:88:a7:fd:69:21:95:37:8b:47:1a:e0:85:
89:38:3e:dc:25:55:d0:bd:ce:c4:ad:13:31:ed:30:
3e:44:5e:ac:1b:fb:49:f2:14:2d:a3:8a:e1:ab:a9:
fc:06:78:bf:a8:16:32:dc:07:4c:3c:7c:cf:d3:26:
1a:5d:1f:4e:ac:83:d8:6c:31:e1:c1:f7:cb:fb:39:
f9:b4:c8:d7:ba:ca:38:aa:56:eb:5c:08:10:8d:34:
d8:fe:77:59:d1:55:38:63:c2:35:b4:7d:ff:61:a0:
f0:bd:11:9f:0f:23:0e:10:78:81:75:f3:eb:f0:6e:
00:cb:50:b4:bb:ac:0f:70:25:12:cd:6e:d7:86:9e:
c7:96:47:13:e8:67:2d:ce:b2:50:91:3a:67:24:af:
43:68:76:bc:91:4d:a4:a7:e4:51:4f:ed:86:1b:70:
75:2d:ed:e3:69:96:c1:31:5c:18:6d:e3:0a:8e:0b:
2e:04:db:fc:e3:f4:e7:26:ef:89:5d:eb:28:cf:48:
3c:c0:96:90:45:e2:44:fb:63:3a:8c:ea:d0:8c:80:
19:ab:f5:71:30:ad:a3:00:12:cf:d9:33:dc:4d:09:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9B:3F:F6:B3:4F:9F:A9:58:33:41:B7:4F:1C:20:6D:F9:12:E7:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KJs_9rNPn6lYM0G3TxwgbfkS58E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:d3:3e:45:7e:9c:97:90:a0:ee:3b:fc:d1:e4:40:e8:ce:e1:
2f:10:56:c2:8a:cc:d2:cc:12:ed:c9:60:79:97:08:f2:43:07:
8e:00:bc:a5:19:ed:b7:8d:ae:e3:3f:06:b8:ec:3e:34:fa:fd:
a5:96:64:5f:75:f2:be:20:0d:b8:5b:ae:8b:40:46:c5:b2:2f:
06:f5:1f:ac:04:1a:9c:f2:53:2e:8a:c5:19:71:75:a0:0f:0c:
7a:7e:cd:87:a9:f4:ed:af:6a:11:83:44:5f:35:82:47:62:13:
80:8d:ca:fb:8f:64:a4:ac:55:50:c3:4f:bc:a4:b4:9f:fa:b9:
1a:ad:2f:1b:8b:77:73:0e:9f:62:77:16:ef:4b:5d:12:ff:7e:
3b:f5:0d:a8:55:63:8e:55:61:ea:b1:a3:f1:c9:4d:73:dc:8a:
d9:dc:7d:05:82:79:b7:35:7b:d6:36:d7:5b:5a:34:bf:2a:36:
8c:72:ff:b3:0a:3c:04:d3:ce:72:34:3c:5e:18:ae:87:67:7e:
8e:0f:64:5c:e9:07:26:fe:a3:02:b3:48:9e:ad:18:37:7b:a8:
27:b3:d2:2b:a3:3c:54:f9:9f:b6:e0:7c:2b:2b:c7:b2:e5:df:
ac:e8:89:97:cf:8a:53:bc:6a:b8:d6:96:e6:15:c4:1a:6f:9f:
f5:46:f5:df
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYQy6eq1p+eWr6jMxj9T0qWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTAxMTExODIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODliM2ZmNmIzNGY5ZmE5NTgzMzQxYjc0ZjFjMjA2ZGY5MTJlN2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzqLagxRh8YlIs9Wkc9VV/hGrltV
f+TLw6mhSzgiBUyIp/1pIZU3i0ca4IWJOD7cJVXQvc7ErRMx7TA+RF6sG/tJ8hQt
o4rhq6n8Bni/qBYy3AdMPHzP0yYaXR9OrIPYbDHhwffL+zn5tMjXuso4qlbrXAgQ
jTTY/ndZ0VU4Y8I1tH3/YaDwvRGfDyMOEHiBdfPr8G4Ay1C0u6wPcCUSzW7Xhp7H
lkcT6GctzrJQkTpnJK9DaHa8kU2kp+RRT+2GG3B1Le3jaZbBMVwYbeMKjgsuBNv8
4/TnJu+JXesoz0g8wJaQReJE+2M6jOrQjIAZq/VxMK2jABLP2TPcTQmadQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCibP/azT5+pWDNBt08cIG35EufBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvS0pzXzlyTlBuNmxZTTBHM1R4d2diZmtTNThFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJnTPkV+nJeQoO47/NHk
QOjO4S8QVsKKzNLMEu3JYHmXCPJDB44AvKUZ7beNruM/BrjsPjT6/aWWZF918r4g
DbhbrotARsWyLwb1H6wEGpzyUy6KxRlxdaAPDHp+zYep9O2vahGDRF81gkdiE4CN
yvuPZKSsVVDDT7yktJ/6uRqtLxuLd3MOn2J3Fu9LXRL/fjv1DahVY45VYeqxo/HJ
TXPcitncfQWCebc1e9Y211taNL8qNoxy/7MKPATTznI0PF4Yrodnfo4PZFzpByb+
owKzSJ6tGDd7qCez0iujPFT5n7bgfCsrx7Ll36zoiZfPilO8arjWluYVxBpvn/VG
9d8=
-----END CERTIFICATE-----
Generated at Thu May 1 07:55:16 2025 by rpki-client