Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KX71Q6AXOudhon7pnTMGQQtqYls.roa
File: KX71Q6AXOudhon7pnTMGQQtqYls.roa (raw, json)
Hash identifier: D9fQk4zj3YHLWtyxLgu1PsR7Znceb57MbssKEFx22gc=
Subject key identifier: 29:7E:F5:43:A0:17:3A:E7:61:A2:7E:E9:9D:33:06:41:0B:6A:62:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895525DAFACBBBF0B0F78E6D81863A6233
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KX71Q6AXOudhon7pnTMGQQtqYls.roa
Signing time: Fri 14 Jul 2023 16:04:51 +0000
ROA not before: Fri 14 Jul 2023 16:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:189:5525:40c2/128 maxlen: 128
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:55:25:da:fa:cb:bb:f0:b0:f7:8e:6d:81:86:3a:62:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 16:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=297ef543a0173ae761a27ee99d3306410b6a625b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:b9:a6:c6:17:73:b8:82:38:78:18:6a:1e:
47:10:78:59:a9:47:14:f6:82:94:13:81:88:79:c6:
59:f6:fb:a2:ba:c6:d5:49:02:73:91:34:7a:18:e3:
c9:c3:3d:0e:70:24:d5:36:0b:49:87:5e:f2:53:3a:
e5:e6:fd:bd:48:e4:e2:89:ea:10:df:de:fd:fb:c7:
e1:cd:08:db:ca:49:1c:01:d3:ec:25:58:63:40:75:
69:c4:09:24:0f:ac:c9:f1:03:e8:ad:d1:cc:0e:03:
03:f7:c0:9b:ab:dd:1a:3b:3a:26:e6:04:eb:90:18:
76:a2:dd:66:d5:00:a5:7a:57:89:c6:33:d0:8f:01:
4e:52:e0:48:4c:c9:29:0b:22:7e:85:33:7a:2f:37:
b8:f0:46:72:43:61:b2:52:24:56:23:0f:45:5f:ae:
2e:41:22:0e:f6:0d:50:63:00:14:8c:56:b0:99:28:
7e:3b:73:87:5d:80:54:67:10:2c:85:ce:f0:35:32:
5a:02:ef:21:7d:8f:14:bc:c2:77:a7:b3:cc:f3:dc:
cc:24:b2:47:95:c8:a3:3c:30:24:6d:39:1f:a2:40:
9b:22:c2:3c:46:72:fe:e4:1c:4c:86:02:ff:e6:7b:
61:e0:dc:1e:17:d9:fe:03:6b:5f:e7:77:79:e2:de:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7E:F5:43:A0:17:3A:E7:61:A2:7E:E9:9D:33:06:41:0B:6A:62:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KX71Q6AXOudhon7pnTMGQQtqYls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:7b:e1:0c:df:f3:c7:5c:b1:e6:e6:c9:23:d1:9b:37:1f:ad:
d9:22:25:cf:64:10:e7:64:48:e6:fe:89:41:dc:79:33:42:c1:
ed:c3:9f:ac:5c:b4:98:36:29:60:e9:86:49:85:48:20:4c:b7:
78:af:88:46:5b:aa:ff:2b:8c:81:0f:af:dd:c8:01:12:92:c5:
6f:1e:cb:f0:13:3d:54:48:a5:ae:0f:2a:4f:94:b9:74:31:4d:
7d:ac:3c:6f:8e:d4:47:22:7d:da:ce:ed:91:eb:00:64:ba:c7:
21:33:56:d5:31:8a:81:fc:a9:cf:80:0b:18:f6:0d:a4:99:a0:
8c:04:98:76:75:1d:a9:f3:dc:e6:bc:d7:75:9d:64:0e:09:b0:
eb:99:da:42:28:88:4e:06:ab:19:e4:ed:e7:56:db:a8:a2:ad:
98:b1:af:fa:f4:b5:cc:e6:1a:42:3a:69:b8:68:f0:31:5c:03:
97:a7:a4:c3:3a:5e:a4:32:d5:ad:64:6e:35:86:af:c9:3d:3b:
6c:ac:b3:fb:7a:fe:76:b7:28:14:dc:89:7a:94:b3:3b:e4:a3:
bb:47:37:3f:fd:fe:09:60:52:01:5a:6f:15:d6:15:1f:0e:28:
3e:7f:82:7a:da:ca:11:a8:e7:04:8f:66:1a:a9:c2:c1:85:82:
eb:5c:86:fa
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlVJdr6y7vwsPeObYGGOmIzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE0MTYwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTdlZjU0M2EwMTczYWU3NjFhMjdlZTk5ZDMzMDY0MTBiNmE2MjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIW5psYXc7iCOHgYah5HEHhZqUcU
9oKUE4GIecZZ9vuiusbVSQJzkTR6GOPJwz0OcCTVNgtJh17yUzrl5v29SOTiieoQ
3979+8fhzQjbykkcAdPsJVhjQHVpxAkkD6zJ8QPordHMDgMD98Cbq90aOzom5gTr
kBh2ot1m1QCleleJxjPQjwFOUuBITMkpCyJ+hTN6Lze48EZyQ2GyUiRWIw9FX64u
QSIO9g1QYwAUjFawmSh+O3OHXYBUZxAshc7wNTJaAu8hfY8UvMJ3p7PM89zMJLJH
lcijPDAkbTkfokCbIsI8RnL+5BxMhgL/5nth4NweF9n+A2tf53d54t4tVwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCl+9UOgFzrnYaJ+6Z0zBkELamJbMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvS1g3MVE2QVhPdWRob243cG5UTUdRUXRxWWxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABV74Qzf88dcsebmySPR
mzcfrdkiJc9kEOdkSOb+iUHceTNCwe3Dn6xctJg2KWDphkmFSCBMt3iviEZbqv8r
jIEPr93IARKSxW8ey/ATPVRIpa4PKk+UuXQxTX2sPG+O1EcifdrO7ZHrAGS6xyEz
VtUxioH8qc+ACxj2DaSZoIwEmHZ1Hanz3Oa813WdZA4JsOuZ2kIoiE4Gqxnk7edW
26iirZixr/r0tczmGkI6abho8DFcA5enpMM6XqQy1a1kbjWGr8k9O2yss/t6/na3
KBTciXqUszvko7tHNz/9/glgUgFabxXWFR8OKD5/gnrayhGo5wSPZhqpwsGFgutc
hvo=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:33:14 2025 by rpki-client