Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KT5Xruz99TfIMgN4UlCeX_mOwe8.roa
File: KT5Xruz99TfIMgN4UlCeX_mOwe8.roa (raw, json)
Hash identifier: jaQHwgFli1LjzhIJU/wnW+g86MMkjhLq+otlyq/72L0=
Subject key identifier: 29:3E:57:AE:EC:FD:F5:37:C8:32:03:78:52:50:9E:5F:F9:8E:C1:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187619CDC32480F5774094F489B74015512
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KT5Xruz99TfIMgN4UlCeX_mOwe8.roa
Signing time: Sat 08 Apr 2023 16:04:42 +0000
ROA not before: Sat 08 Apr 2023 16:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:619c:848a/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:61:9c:dc:32:48:0f:57:74:09:4f:48:9b:74:01:55:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 8 16:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=293e57aeecfdf537c832037852509e5ff98ec1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:08:07:01:b0:8e:20:11:ed:3f:70:98:d9:16:
12:ca:f2:ce:fc:26:74:0a:f0:9f:16:c2:75:c2:ee:
df:51:38:16:f4:18:0d:3b:e3:e9:e0:9d:9d:6d:15:
f1:31:24:a8:3a:10:96:4d:84:ff:c2:c6:a6:ad:56:
3a:36:9f:65:e8:7e:a4:91:44:67:65:70:dc:52:ff:
c5:6d:f6:4c:4b:94:f7:b7:99:56:f4:28:82:14:14:
91:4b:42:6d:70:22:5f:d3:30:04:ec:e9:d7:7b:d3:
20:f8:c4:50:f9:ad:23:5e:e9:99:dd:68:07:d7:1a:
60:02:18:c7:23:0c:6f:da:13:ef:bc:84:dd:c3:38:
1a:f6:fd:61:8c:3e:d8:82:c9:22:73:8c:19:51:99:
ea:b7:f4:81:3f:f4:cd:a1:fc:93:2f:ca:b9:56:e5:
65:4f:5e:d7:ac:ea:1e:0a:58:26:fe:56:d2:7b:d9:
84:73:76:4f:1a:2f:32:50:81:0a:23:5a:07:e6:d9:
9f:1b:9c:28:fe:65:ab:e6:4a:d1:8e:29:2b:6f:7d:
e9:32:d6:ee:fe:0a:8d:37:dd:e8:84:1d:80:0b:d5:
eb:f4:43:2d:3e:2f:96:8a:08:b9:87:0b:22:11:41:
57:15:cd:a2:29:ba:be:b4:65:75:ff:4c:62:4e:ba:
70:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3E:57:AE:EC:FD:F5:37:C8:32:03:78:52:50:9E:5F:F9:8E:C1:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KT5Xruz99TfIMgN4UlCeX_mOwe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:9f:21:46:84:8e:53:30:27:cb:49:ff:3f:e6:c7:4a:69:33:
19:97:0b:40:8e:ac:bf:c3:5e:e0:85:10:2e:b6:83:dd:d6:34:
4e:1d:3f:87:25:97:2b:f6:a1:dc:54:7f:02:12:4b:12:07:44:
f5:81:f8:37:2d:33:c9:bd:38:c2:a4:c8:81:3b:44:a9:e8:e4:
5f:7c:72:c6:c3:f0:b5:94:8b:d1:dc:5e:b6:37:3d:25:f8:a0:
f3:f3:15:fb:6b:b1:f5:00:1f:29:4d:e0:d7:40:d5:6c:ba:5c:
cd:01:7d:29:8d:d2:4c:52:82:b7:f2:dd:d4:19:d5:3d:5e:a1:
19:a5:e3:1d:6b:40:2d:49:65:2d:46:ad:0c:31:e1:6e:09:39:
4e:13:b4:20:d6:c9:5c:be:ec:47:4e:d1:af:d9:47:7b:36:5d:
e2:4e:2d:6d:18:a3:54:a0:f4:37:25:92:ad:f5:27:68:13:15:
61:4e:df:91:fa:5c:38:28:1a:5d:e6:b6:98:a3:71:94:62:48:
bc:84:9a:62:7f:2f:a1:9f:30:9b:e5:be:d6:7a:0c:88:7c:eb:
d8:fc:90:c4:b9:34:34:45:5f:6b:55:6d:52:11:28:ba:8a:84:
f2:aa:50:c6:47:73:c9:58:b9:6d:d2:25:8e:d8:db:b7:c1:29:
8d:e3:2d:a6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdhnNwySA9XdAlPSJt0AVUSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA4MTYwNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTNlNTdhZWVjZmRmNTM3YzgzMjAzNzg1MjUwOWU1ZmY5OGVjMWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmggHAbCOIBHtP3CY2RYSyvLO/CZ0
CvCfFsJ1wu7fUTgW9BgNO+Pp4J2dbRXxMSSoOhCWTYT/wsamrVY6Np9l6H6kkURn
ZXDcUv/FbfZMS5T3t5lW9CiCFBSRS0JtcCJf0zAE7OnXe9Mg+MRQ+a0jXumZ3WgH
1xpgAhjHIwxv2hPvvITdwzga9v1hjD7Ygskic4wZUZnqt/SBP/TNofyTL8q5VuVl
T17XrOoeClgm/lbSe9mEc3ZPGi8yUIEKI1oH5tmfG5wo/mWr5krRjikrb33pMtbu
/gqNN93ohB2AC9Xr9EMtPi+Wigi5hwsiEUFXFc2iKbq+tGV1/0xiTrpwsQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCk+V67s/fU3yDIDeFJQnl/5jsHvMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvS1Q1WHJ1ejk5VGZJTWdONFVsQ2VYX21Pd2U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAICfIUaEjlMwJ8tJ/z/m
x0ppMxmXC0COrL/DXuCFEC62g93WNE4dP4cllyv2odxUfwISSxIHRPWB+DctM8m9
OMKkyIE7RKno5F98csbD8LWUi9HcXrY3PSX4oPPzFftrsfUAHylN4NdA1Wy6XM0B
fSmN0kxSgrfy3dQZ1T1eoRml4x1rQC1JZS1GrQwx4W4JOU4TtCDWyVy+7EdO0a/Z
R3s2XeJOLW0Yo1Sg9Dclkq31J2gTFWFO35H6XDgoGl3mtpijcZRiSLyEmmJ/L6Gf
MJvlvtZ6DIh869j8kMS5NDRFX2tVbVIRKLqKhPKqUMZHc8lYuW3SJY7Y27fBKY3j
LaY=
-----END CERTIFICATE-----
Generated at Thu May 1 11:13:47 2025 by rpki-client