Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ckWKtkI9Z7rPbSRmiLeKi3C-1_A.roa
File: ckWKtkI9Z7rPbSRmiLeKi3C-1_A.roa (raw, json)
Hash identifier: yed6JbLY1YT6YEmHniotCmtPRpnZrQFH+Tl6gkUaUDc=
Subject key identifier: 72:45:8A:B6:42:3D:67:BA:CF:6D:24:66:88:B7:8A:8B:70:BE:D7:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01827EAA89B1734CBEE83946DAED883794FE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ckWKtkI9Z7rPbSRmiLeKi3C-1_A.roa
Signing time: Mon 08 Aug 2022 18:14:41 +0000
ROA not before: Mon 08 Aug 2022 18:14:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7e:aa:89:b1:73:4c:be:e8:39:46:da:ed:88:37:94:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 18:14:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72458ab6423d67bacf6d246688b78a8b70bed7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:04:7d:1f:93:1f:85:6a:36:c0:1c:22:05:69:
cd:fe:a3:1c:8f:2d:18:fe:ee:dc:fb:c1:88:5b:c1:
74:ab:c9:9a:94:7b:a3:61:f2:08:0d:20:d7:b3:f4:
87:cb:d9:bf:1a:1c:1f:d4:90:e4:b7:f6:c2:24:ad:
9f:8d:00:ff:ab:b2:62:cb:8d:3e:cf:f9:d7:2d:89:
f8:54:5c:60:28:8e:11:9d:21:c2:b4:c3:ca:77:f9:
db:27:f3:60:58:05:ec:76:51:22:72:aa:36:c7:5e:
7d:02:8b:43:ff:bf:14:6a:93:7c:0b:24:f7:7e:4b:
c1:70:a6:2b:15:7a:cf:55:70:0e:9e:44:45:aa:8b:
a1:ef:3a:c2:83:57:3c:01:a9:5a:93:d4:ea:bc:92:
8f:01:54:e1:b2:4d:9b:cf:10:0c:8a:d6:87:df:60:
f3:5a:64:8e:9c:bf:2d:a4:d1:87:28:3d:f4:90:44:
4d:bc:34:17:82:e3:fe:11:ba:75:c9:f7:33:9c:0b:
cd:c2:19:fe:5b:79:db:b9:8b:4c:fe:97:5b:ec:72:
fb:bd:8d:58:ac:8c:79:b6:38:75:66:4d:44:e6:ee:
ee:b0:d5:80:16:58:73:06:fd:7c:23:28:e9:09:5f:
2b:b4:cb:3e:62:a8:b3:19:9d:3c:ce:c5:ca:54:e2:
8f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:45:8A:B6:42:3D:67:BA:CF:6D:24:66:88:B7:8A:8B:70:BE:D7:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ckWKtkI9Z7rPbSRmiLeKi3C-1_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:f8:47:9f:a6:3d:6b:37:1a:8e:3e:70:ff:99:23:c0:4d:5c:
5d:34:a5:77:93:4e:14:22:d7:49:b4:92:22:da:89:c2:7d:e6:
2c:6f:5a:d4:59:43:39:40:38:0b:a5:da:4d:45:77:72:91:f5:
b3:2b:36:f6:6e:f3:2d:b4:ac:0c:e0:d5:71:93:bc:6e:75:dd:
3e:1c:84:7c:25:f7:4a:f9:d2:96:9b:11:9b:7a:00:c3:9b:d0:
06:c7:76:90:9f:e2:3c:bd:7a:7b:bf:05:4d:e0:6a:d2:bd:ee:
d9:8f:0f:03:cb:07:5e:50:e8:55:2c:3e:df:b6:8f:1d:da:bf:
76:e8:43:c2:a6:03:93:9d:39:a9:8d:69:d5:bb:83:6e:fe:0e:
17:cf:72:28:af:02:e4:49:78:51:b4:93:3f:b2:9e:8d:75:a8:
52:d4:5a:52:bd:46:10:a0:d5:98:2a:34:36:d1:95:44:f0:de:
04:43:a0:f8:46:23:ee:e5:eb:09:6f:48:d9:0b:30:c2:c5:5e:
1e:a9:24:50:b0:35:cc:c0:9b:08:e6:9b:5b:db:90:fb:3f:6f:
76:a3:e5:cf:82:ef:eb:38:86:a3:8d:2d:63:36:e6:4e:00:73:
75:2a:55:3b:dc:7e:80:08:c5:b9:9b:c7:fd:85:34:35:48:62:
0d:a2:e3:59
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJ+qomxc0y+6DlG2u2IN5T+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODA4MTgxNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjQ1OGFiNjQyM2Q2N2JhY2Y2ZDI0NjY4OGI3OGE4YjcwYmVkN2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAR9H5MfhWo2wBwiBWnN/qMcjy0Y
/u7c+8GIW8F0q8malHujYfIIDSDXs/SHy9m/Ghwf1JDkt/bCJK2fjQD/q7Jiy40+
z/nXLYn4VFxgKI4RnSHCtMPKd/nbJ/NgWAXsdlEicqo2x159AotD/78UapN8CyT3
fkvBcKYrFXrPVXAOnkRFqouh7zrCg1c8Aalak9TqvJKPAVThsk2bzxAMitaH32Dz
WmSOnL8tpNGHKD30kERNvDQXguP+Ebp1yfcznAvNwhn+W3nbuYtM/pdb7HL7vY1Y
rIx5tjh1Zk1E5u7usNWAFlhzBv18IyjpCV8rtMs+YqizGZ08zsXKVOKP+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHJFirZCPWe6z20kZoi3iotwvtfwMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvY2tXS3RrSTlaN3JQYlNSbWlMZUtpM0MtMV9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ74R5+mPWs3Go4+cP+Z
I8BNXF00pXeTThQi10m0kiLaicJ95ixvWtRZQzlAOAul2k1Fd3KR9bMrNvZu8y20
rAzg1XGTvG513T4chHwl90r50pabEZt6AMOb0AbHdpCf4jy9enu/BU3gatK97tmP
DwPLB15Q6FUsPt+2jx3av3boQ8KmA5OdOamNadW7g27+DhfPciivAuRJeFG0kz+y
no11qFLUWlK9RhCg1ZgqNDbRlUTw3gRDoPhGI+7l6wlvSNkLMMLFXh6pJFCwNczA
mwjmm1vbkPs/b3aj5c+C7+s4hqONLWM25k4Ac3UqVTvcfoAIxbmbx/2FNDVIYg2i
41k=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:34 2025 by rpki-client