Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KTagRwGFQMeYfaJNueAGl1PVekE.roa
File: KTagRwGFQMeYfaJNueAGl1PVekE.roa (raw, json)
Hash identifier: txPcpO5DJH68AnLkrAVgewmoZCFCadN9JXCfVGNB/ks=
Subject key identifier: 29:36:A0:47:01:85:40:C7:98:7D:A2:4D:B9:E0:06:97:53:D5:7A:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 83C68A0F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KTagRwGFQMeYfaJNueAGl1PVekE.roa
Signing time: Fri 13 May 2022 21:10:40 +0000
ROA not before: Fri 13 May 2022 21:10:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2210826767 (0x83c68a0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 13 21:10:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2936a047018540c7987da24db9e0069753d57a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:af:73:20:52:a2:3f:59:1a:e3:a3:82:ae:
91:51:3a:b3:8e:5b:40:99:6c:5a:53:06:3f:16:59:
d4:21:d0:e6:63:60:f5:3d:fa:1a:3b:63:6d:95:f3:
be:e2:1f:b4:74:28:87:a1:5b:29:71:ff:e6:58:a8:
50:71:8b:b5:39:1d:e4:65:16:f2:e0:cb:e6:9b:56:
e6:b2:f7:b7:d0:6f:e3:52:b6:b3:cf:98:af:3f:5c:
0c:54:2d:17:43:d3:58:74:e0:b2:60:8d:95:85:c4:
a2:9f:11:cd:ff:e1:ab:3e:a4:aa:83:ef:2f:f6:f4:
c5:e5:c9:7b:19:63:9e:c7:47:b0:25:c7:03:a4:4d:
5f:01:ff:b9:7c:d1:47:98:54:01:66:2c:fd:50:b5:
83:58:e3:7d:41:0f:af:f9:ba:28:96:b1:ed:ca:98:
0b:8c:e8:18:89:df:91:43:86:fe:44:90:9e:3c:10:
fd:08:bb:f1:59:cf:f5:56:6a:7c:82:7f:eb:a6:ca:
0a:ac:20:04:db:3e:1d:8a:c7:97:a7:e9:e5:2d:00:
e7:c3:12:84:7b:20:09:11:d9:9d:fd:64:ff:ef:b5:
0f:7a:fe:53:58:e6:62:b6:dc:49:01:4c:b2:a9:41:
76:1c:92:10:06:e0:0c:59:06:d0:87:04:51:81:39:
66:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:36:A0:47:01:85:40:C7:98:7D:A2:4D:B9:E0:06:97:53:D5:7A:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KTagRwGFQMeYfaJNueAGl1PVekE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:35:2d:9d:fe:28:b1:b5:58:69:b4:90:c7:c7:8b:4d:3c:d4:
39:09:2d:31:92:f8:54:f4:68:58:3c:67:36:c2:18:2b:89:a5:
2b:20:5c:26:21:3c:49:ee:92:23:45:37:ed:c2:53:28:45:cf:
99:12:07:f2:df:48:4a:ea:84:dc:10:35:f9:52:06:bb:6e:59:
37:db:9a:37:98:a0:12:b6:90:97:e9:1f:7c:db:b6:d4:a7:09:
61:7b:bb:f5:0b:26:6a:31:59:be:11:df:c0:a8:e2:34:f5:0b:
e1:a2:34:21:a0:6f:b1:d0:ad:6a:33:ce:63:8a:50:5a:89:81:
83:ec:71:9f:61:62:ff:7a:ee:4b:59:0e:d7:ec:37:5d:18:e7:
76:40:c1:8b:ee:7a:50:53:f8:0b:8a:52:a7:00:b8:94:1b:8d:
2f:59:52:ae:28:cb:49:f9:56:34:88:f2:46:30:9f:04:78:ab:
57:f0:71:db:3a:72:c2:d1:71:11:f2:78:18:bd:8e:29:74:3d:
65:f6:0c:5e:ca:2b:66:9b:c8:0f:ab:c4:8e:54:48:02:13:5b:
06:0b:b8:bd:6e:b5:d3:d7:31:04:aa:ff:c6:f0:86:87:77:1d:
45:3b:cc:0b:b2:b7:52:f7:26:9a:1f:75:bb:b9:97:58:a6:e3:
29:60:c9:11
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIPGig8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MTMyMTEwNDBaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDI5MzZhMDQ3MDE4
NTQwYzc5ODdkYTI0ZGI5ZTAwNjk3NTNkNTdhNDEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEJq9zIFKiP1ka46OCrpFROrOOW0CZbFpTBj8WWdQh0OZj
YPU9+ho7Y22V877iH7R0KIehWylx/+ZYqFBxi7U5HeRlFvLgy+abVuay97fQb+NS
trPPmK8/XAxULRdD01h04LJgjZWFxKKfEc3/4as+pKqD7y/29MXlyXsZY57HR7Al
xwOkTV8B/7l80UeYVAFmLP1QtYNY431BD6/5uiiWse3KmAuM6BiJ35FDhv5EkJ48
EP0Iu/FZz/VWanyCf+umygqsIATbPh2Kx5en6eUtAOfDEoR7IAkR2Z39ZP/vtQ96
/lNY5mK23EkBTLKpQXYckhAG4AxZBtCHBFGBOWbXAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUKTagRwGFQMeYfaJNueAGl1PVekEwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9LVGFnUndHRlFNZVlmYUpOdWVBR2wxUFZla0Uucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAGDUtnf4osbVYabSQx8eLTTzUOQktMZL4VPRo
WDxnNsIYK4mlKyBcJiE8Se6SI0U37cJTKEXPmRIH8t9ISuqE3BA1+VIGu25ZN9ua
N5igEraQl+kffNu21KcJYXu79QsmajFZvhHfwKjiNPUL4aI0IaBvsdCtajPOY4pQ
WomBg+xxn2Fi/3ruS1kO1+w3XRjndkDBi+56UFP4C4pSpwC4lBuNL1lSrijLSflW
NIjyRjCfBHirV/Bx2zpywtFxEfJ4GL2OKXQ9ZfYMXsorZpvID6vEjlRIAhNbBgu4
vW6109cxBKr/xvCGh3cdRTvMC7K3Uvcmmh91u7mXWKbjKWDJEQ==
-----END CERTIFICATE-----
Generated at Thu May 1 10:03:46 2025 by rpki-client