Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bKnH0WvVj4WcMIt02q2Vxmi5l6I.roa
File: bKnH0WvVj4WcMIt02q2Vxmi5l6I.roa (raw, json)
Hash identifier: CsY/Zm7Y+5LlmFcbP0jnrpG10JXIFyhvbwCk6NuNp28=
Subject key identifier: 6C:A9:C7:D1:6B:D5:8F:85:9C:30:8B:74:DA:AD:95:C6:68:B9:97:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018702CD1597C5689820ADF28BE472E11126
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bKnH0WvVj4WcMIt02q2Vxmi5l6I.roa
Signing time: Tue 21 Mar 2023 06:13:27 +0000
ROA not before: Tue 21 Mar 2023 06:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:02:cd:15:97:c5:68:98:20:ad:f2:8b:e4:72:e1:11:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 06:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ca9c7d16bd58f859c308b74daad95c668b997a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:29:41:6f:19:37:a4:95:b7:d7:4b:72:09:
37:9f:66:c0:90:ca:4f:8e:0e:fb:e8:7f:76:ab:db:
c1:52:ba:94:fb:a8:10:62:f7:31:87:6a:ac:54:1e:
93:f2:6f:56:80:6e:f9:e1:29:e0:48:80:3a:15:2f:
7b:1d:2b:d8:16:4d:6a:52:32:e3:8d:ae:c7:28:e3:
b7:08:a7:92:e2:e4:1d:0b:5a:0a:02:27:97:f1:3e:
d9:69:01:13:1c:e4:65:9a:84:24:68:2f:1d:5e:88:
02:e8:36:2e:97:e3:a4:8d:29:de:54:d0:df:64:72:
22:63:80:c1:9d:ed:18:b5:b5:e9:5a:85:e4:f7:d4:
80:50:39:be:85:b9:f9:e2:60:2e:ec:0f:dc:f1:51:
b1:98:03:44:6f:35:f2:bc:e9:17:64:89:b2:ac:5c:
c7:d1:e4:d8:42:d6:06:64:a3:1d:0d:e2:2c:ac:7d:
21:fa:4c:b1:a0:a8:85:28:f5:73:b4:14:09:31:d2:
da:03:a6:d5:4d:2b:73:f3:ec:3f:c9:e7:e7:25:5b:
a5:21:0a:e0:5d:5c:a8:7c:ee:ab:6a:cb:ca:ec:3f:
9f:84:12:58:9b:66:f9:a6:29:98:51:bf:86:61:91:
0a:b5:9d:a9:22:c1:b5:e9:85:5f:f4:d9:df:a5:d4:
37:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A9:C7:D1:6B:D5:8F:85:9C:30:8B:74:DA:AD:95:C6:68:B9:97:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bKnH0WvVj4WcMIt02q2Vxmi5l6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:67:0a:44:8d:ca:3b:8b:02:f5:61:e4:61:75:d4:2a:52:18:
80:52:c8:cf:9d:00:b8:a9:70:5a:cd:79:cb:da:28:e6:ad:cd:
ea:0a:19:c7:5a:3b:e4:bd:07:78:ed:2f:7d:26:c1:a9:c4:7b:
49:1e:61:34:21:a5:10:87:25:11:e0:67:95:7c:a5:42:a8:5d:
85:ef:5f:bb:8d:ff:e5:2b:50:5a:22:c7:e9:55:d3:67:ec:43:
e3:ff:e2:1a:24:3e:15:f7:81:7d:bf:29:14:c2:ca:c5:8a:dc:
38:7e:e3:b9:43:6f:de:e8:fa:14:b4:6a:51:24:8b:8a:43:6b:
5e:58:08:9d:d8:2c:b3:d2:6d:17:91:07:b0:a9:42:70:4a:d6:
2e:9d:a8:24:5c:c3:3d:78:6d:1c:e7:b2:e9:4b:a8:d8:3c:57:
a8:56:c8:85:b8:c8:40:83:ce:45:2a:76:aa:56:7a:9c:6c:e4:
dc:71:d6:91:5d:8a:70:3f:07:6f:aa:00:99:25:f5:6d:f5:18:
ae:90:84:d7:ce:39:da:48:df:d3:6d:19:51:fa:7e:e9:63:98:
1f:05:4f:9e:3e:4a:b6:57:2a:5f:53:1d:b1:4c:d3:62:f6:62:
30:fd:62:42:ff:fc:36:1c:c9:f9:b3:93:35:7f:95:99:b6:83:
9a:52:3f:19
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcCzRWXxWiYIK3yi+Ry4REmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzIxMDYxMzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2E5YzdkMTZiZDU4Zjg1OWMzMDhiNzRkYWFkOTVjNjY4Yjk5N2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf0pQW8ZN6SVt9dLcgk3n2bAkMpP
jg776H92q9vBUrqU+6gQYvcxh2qsVB6T8m9WgG754SngSIA6FS97HSvYFk1qUjLj
ja7HKOO3CKeS4uQdC1oKAieX8T7ZaQETHORlmoQkaC8dXogC6DYul+OkjSneVNDf
ZHIiY4DBne0YtbXpWoXk99SAUDm+hbn54mAu7A/c8VGxmANEbzXyvOkXZImyrFzH
0eTYQtYGZKMdDeIsrH0h+kyxoKiFKPVztBQJMdLaA6bVTStz8+w/yefnJVulIQrg
XVyofO6rasvK7D+fhBJYm2b5pimYUb+GYZEKtZ2pIsG16YVf9NnfpdQ3bQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGypx9Fr1Y+FnDCLdNqtlcZouZeiMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYktuSDBXdlZqNFdjTUl0MDJxMlZ4bWk1bDZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHNnCkSNyjuLAvVh5GF1
1CpSGIBSyM+dALipcFrNecvaKOatzeoKGcdaO+S9B3jtL30mwanEe0keYTQhpRCH
JRHgZ5V8pUKoXYXvX7uN/+UrUFoix+lV02fsQ+P/4hokPhX3gX2/KRTCysWK3Dh+
47lDb97o+hS0alEki4pDa15YCJ3YLLPSbReRB7CpQnBK1i6dqCRcwz14bRznsulL
qNg8V6hWyIW4yECDzkUqdqpWepxs5Nxx1pFdinA/B2+qAJkl9W31GK6QhNfOOdpI
39NtGVH6fuljmB8FT54+SrZXKl9THbFM02L2YjD9YkL//DYcyfmzkzV/lZm2g5pS
Pxk=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:34 2025 by rpki-client