Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KnovTiPuKj88wn7lKRfIIAdCD-A.roa
File: KnovTiPuKj88wn7lKRfIIAdCD-A.roa (raw, json)
Hash identifier: MWu7+iWk6YDG2Orlye9RECn+4OWtYvONK3kE5OxCX+E=
Subject key identifier: 2A:7A:2F:4E:23:EE:2A:3F:3C:C2:7E:E5:29:17:C8:20:07:42:0F:E0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018531CCD6506D28397C481113BD02BE005A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KnovTiPuKj88wn7lKRfIIAdCD-A.roa
Signing time: Tue 20 Dec 2022 23:09:45 +0000
ROA not before: Tue 20 Dec 2022 23:09:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:31:cc:d6:50:6d:28:39:7c:48:11:13:bd:02:be:00:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 20 23:09:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a7a2f4e23ee2a3f3cc27ee52917c82007420fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:3f:0d:f4:2c:19:6f:38:58:2f:f2:fe:06:
8f:73:a4:bb:ec:40:d5:40:d9:5b:00:1b:52:85:2a:
aa:48:2e:f3:72:c9:20:4c:18:03:6a:fe:95:71:24:
68:e0:1a:f9:be:99:48:45:ce:90:b6:8c:eb:4b:7b:
a5:2d:21:19:be:01:11:d0:f2:0a:47:99:39:a3:ee:
de:82:c1:3e:a0:13:fa:b6:77:dc:79:df:b8:c2:7a:
34:26:86:ee:dc:65:b9:06:73:b5:a5:65:7c:33:20:
09:cf:0d:31:e3:13:76:b7:43:65:71:4f:3b:27:a3:
43:11:23:e9:44:94:d6:37:d9:3e:30:c6:0f:bf:23:
85:27:2b:dc:4e:26:31:24:73:07:89:86:e3:03:e1:
9a:e2:91:c7:a3:a0:f8:f9:e0:5d:85:2b:68:29:cf:
d8:4d:a2:b7:43:8a:b8:3c:e9:fa:2c:59:0e:e4:32:
ec:50:72:67:e2:0c:5a:51:94:09:9c:af:30:0e:da:
d4:2f:e9:4a:82:f3:8e:b0:df:54:26:3a:02:17:e5:
1a:7d:b4:2a:1e:78:31:26:c1:61:1b:ea:44:01:bb:
19:1e:7f:22:ca:4f:5c:43:ea:f3:24:36:7c:6b:37:
1e:32:2d:b4:3c:6c:4c:d9:01:0d:60:85:27:74:28:
b2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7A:2F:4E:23:EE:2A:3F:3C:C2:7E:E5:29:17:C8:20:07:42:0F:E0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KnovTiPuKj88wn7lKRfIIAdCD-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:21:dd:07:ea:c9:74:98:0e:6e:26:6a:98:f9:43:bb:7a:10:
ae:b1:14:64:bb:3b:7e:bf:8b:a1:0f:75:cc:e4:62:4d:52:2a:
6a:02:11:43:5e:e8:51:d5:bd:48:e1:60:8a:55:9e:55:fc:9c:
90:db:ee:0a:f2:8f:ea:f6:0a:e5:35:43:52:29:36:89:e9:59:
a0:c1:02:2f:dc:f6:1d:d7:0a:a2:0e:b2:02:3d:11:2b:9e:fa:
8f:2b:7c:73:e3:61:9c:42:a0:9e:58:fb:28:22:33:b5:5e:95:
fe:d0:cb:22:5c:a5:8c:78:46:29:be:6a:15:9f:82:71:48:7e:
0c:2c:a6:bf:8a:8a:d5:36:b9:73:50:29:87:34:0b:b3:cc:08:
14:54:1b:c7:d9:33:57:4e:c4:56:8c:bf:b6:90:96:6a:c6:8b:
9f:77:ff:f6:59:5a:3c:a2:39:3d:db:64:d3:f1:22:43:bb:5d:
32:23:23:34:f5:38:a5:bc:1a:9c:a3:1b:e6:64:88:94:74:f4:
dc:4b:2f:6a:09:8b:16:be:21:0d:7a:86:95:f7:70:99:07:84:
0c:cf:fb:36:06:78:21:18:16:32:0d:ae:76:65:66:8d:26:3c:
c3:a6:d2:7c:a0:dc:0c:e1:d5:e6:ac:e3:96:f3:d1:54:b6:c7:
6a:36:df:62
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUxzNZQbSg5fEgRE70CvgBaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjIwMjMwOTQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTdhMmY0ZTIzZWUyYTNmM2NjMjdlZTUyOTE3YzgyMDA3NDIwZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ0/DfQsGW84WC/y/gaPc6S77EDV
QNlbABtShSqqSC7zcskgTBgDav6VcSRo4Br5vplIRc6QtozrS3ulLSEZvgER0PIK
R5k5o+7egsE+oBP6tnfced+4wno0Jobu3GW5BnO1pWV8MyAJzw0x4xN2t0NlcU87
J6NDESPpRJTWN9k+MMYPvyOFJyvcTiYxJHMHiYbjA+Ga4pHHo6D4+eBdhStoKc/Y
TaK3Q4q4POn6LFkO5DLsUHJn4gxaUZQJnK8wDtrUL+lKgvOOsN9UJjoCF+UafbQq
HngxJsFhG+pEAbsZHn8iyk9cQ+rzJDZ8azceMi20PGxM2QENYIUndCiyVwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCp6L04j7io/PMJ+5SkXyCAHQg/gMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvS25vdlRpUHVLajg4d243bEtSZklJQWRDRC1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADoh3QfqyXSYDm4mapj5
Q7t6EK6xFGS7O36/i6EPdczkYk1SKmoCEUNe6FHVvUjhYIpVnlX8nJDb7gryj+r2
CuU1Q1IpNonpWaDBAi/c9h3XCqIOsgI9ESue+o8rfHPjYZxCoJ5Y+ygiM7Velf7Q
yyJcpYx4Rim+ahWfgnFIfgwspr+KitU2uXNQKYc0C7PMCBRUG8fZM1dOxFaMv7aQ
lmrGi593//ZZWjyiOT3bZNPxIkO7XTIjIzT1OKW8GpyjG+ZkiJR09NxLL2oJixa+
IQ16hpX3cJkHhAzP+zYGeCEYFjINrnZlZo0mPMOm0nyg3Azh1eas45bz0VS2x2o2
32I=
-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:18 2025 by rpki-client