Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KKPlGfZI1llSuwMjFwJhvQeyVs0.roa
File: KKPlGfZI1llSuwMjFwJhvQeyVs0.roa (raw, json)
Hash identifier: PB5MDOP4mtbzhAK3CJz6YB+vNnwQSNmFSs7SWYRxBHA=
Subject key identifier: 28:A3:E5:19:F6:48:D6:59:52:BB:03:23:17:02:61:BD:07:B2:56:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186703BDFD7840F111C5170A89C3E0D2E5D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KKPlGfZI1llSuwMjFwJhvQeyVs0.roa
Signing time: Mon 20 Feb 2023 19:10:17 +0000
ROA not before: Mon 20 Feb 2023 19:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:70:3b:df:d7:84:0f:11:1c:51:70:a8:9c:3e:0d:2e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 19:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28a3e519f648d65952bb0323170261bd07b256cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:14:53:e0:2a:57:d3:da:8c:9e:7d:8b:87:
fe:f5:3f:a6:26:f4:33:97:03:0b:d4:6b:d6:4d:65:
3b:dd:2f:cc:ae:bf:b7:c4:90:9f:dc:c7:de:73:dc:
45:3c:eb:00:c1:e8:e0:e5:c7:2a:c8:43:0b:0a:ba:
b7:31:92:c0:e2:66:01:8f:71:0b:6f:af:3e:fc:69:
f1:21:c6:5f:11:08:71:ae:7b:5d:15:38:3b:82:f0:
07:b0:b2:de:27:7c:03:7a:ec:72:c7:56:93:85:30:
f0:d3:a9:c6:15:28:91:51:3b:a6:b1:1b:bc:96:27:
26:6d:15:a8:54:86:8c:7d:8b:0b:96:b7:8d:00:61:
e6:a5:f2:1a:7b:35:1c:d5:64:13:0c:46:d1:91:85:
c1:53:46:0d:ef:d0:bd:cb:28:be:b3:b8:ff:00:31:
5d:d1:a1:99:66:ca:ce:42:67:1c:a4:d5:29:fb:1b:
c3:43:7b:ca:ae:a7:7f:9d:38:e4:2f:40:bd:6d:dd:
c7:58:55:de:3a:5b:fb:a1:9a:79:df:c4:3b:a0:d0:
bf:43:32:12:b3:f3:65:e3:38:c1:f5:83:3c:6f:04:
53:50:63:b4:66:18:6f:20:f6:7c:33:e9:59:61:9f:
a1:7a:76:ff:ec:df:65:c7:64:44:be:d7:df:d3:77:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A3:E5:19:F6:48:D6:59:52:BB:03:23:17:02:61:BD:07:B2:56:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KKPlGfZI1llSuwMjFwJhvQeyVs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:b4:52:fe:1f:f5:f4:1d:ee:e7:bd:b2:25:2a:68:c5:75:fb:
79:7f:f8:63:72:c4:ff:c8:ae:ac:92:a2:1f:6e:de:3e:c3:2b:
47:81:47:5d:75:9f:06:3e:68:3a:75:b0:86:35:7a:9b:b0:c1:
07:65:97:cb:52:21:82:b8:33:d3:9a:34:9c:bc:82:16:1b:b0:
95:84:af:c6:a8:34:f8:80:ff:0e:a7:b0:c0:68:4a:5c:bc:ca:
33:67:b2:43:68:ac:af:17:99:32:31:c9:b4:20:e3:f1:cc:8d:
00:6a:ed:a8:48:dd:03:d9:33:74:f9:81:14:fb:3c:03:33:49:
2c:92:66:e6:f3:dc:a2:88:35:69:4f:cf:2b:7e:94:59:bd:ca:
c1:49:2a:bc:cc:c5:0e:5f:f9:6c:33:4b:3c:90:e8:53:d8:b6:
db:84:f8:87:b9:48:1c:e4:fe:f5:34:2d:2b:13:20:5c:5b:c3:
d8:51:41:84:6f:c8:97:d6:45:37:48:21:e8:86:69:24:6c:f9:
6d:63:a4:51:9e:68:1a:b2:73:eb:8d:66:b0:ee:e8:73:99:fc:
0e:e4:93:93:50:dd:b8:4e:06:41:9d:fb:12:05:b1:95:a5:4b:
13:23:74:c1:bc:63:53:f1:a4:75:38:67:e8:5c:2e:9f:e5:e8:
81:68:fe:bf
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZwO9/XhA8RHFFwqJw+DS5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjIwMTkxMDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGEzZTUxOWY2NDhkNjU5NTJiYjAzMjMxNzAyNjFiZDA3YjI1NmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9wUU+AqV9PajJ59i4f+9T+mJvQz
lwML1GvWTWU73S/Mrr+3xJCf3Mfec9xFPOsAwejg5ccqyEMLCrq3MZLA4mYBj3EL
b68+/GnxIcZfEQhxrntdFTg7gvAHsLLeJ3wDeuxyx1aThTDw06nGFSiRUTumsRu8
licmbRWoVIaMfYsLlreNAGHmpfIaezUc1WQTDEbRkYXBU0YN79C9yyi+s7j/ADFd
0aGZZsrOQmccpNUp+xvDQ3vKrqd/nTjkL0C9bd3HWFXeOlv7oZp538Q7oNC/QzIS
s/Nl4zjB9YM8bwRTUGO0ZhhvIPZ8M+lZYZ+henb/7N9lx2REvtff03eHUwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCij5Rn2SNZZUrsDIxcCYb0HslbNMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvS0tQbEdmWkkxbGxTdXdNakZ3Smh2UWV5VnMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALS0Uv4f9fQd7ue9siUq
aMV1+3l/+GNyxP/IrqySoh9u3j7DK0eBR111nwY+aDp1sIY1epuwwQdll8tSIYK4
M9OaNJy8ghYbsJWEr8aoNPiA/w6nsMBoSly8yjNnskNorK8XmTIxybQg4/HMjQBq
7ahI3QPZM3T5gRT7PAMzSSySZubz3KKINWlPzyt+lFm9ysFJKrzMxQ5f+WwzSzyQ
6FPYttuE+Ie5SBzk/vU0LSsTIFxbw9hRQYRvyJfWRTdIIeiGaSRs+W1jpFGeaBqy
c+uNZrDu6HOZ/A7kk5NQ3bhOBkGd+xIFsZWlSxMjdMG8Y1PxpHU4Z+hcLp/l6IFo
/r8=
-----END CERTIFICATE-----
Generated at Fri May 2 03:57:43 2025 by rpki-client