Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k8hs9RK2fqw2w8V_-cjN9hRN0WU.roa
File: k8hs9RK2fqw2w8V_-cjN9hRN0WU.roa (raw, json)
Hash identifier: ZqaBsa53/lab5TMg98j70mjqPpgknDeEX3MY39XORgc=
Subject key identifier: 93:C8:6C:F5:12:B6:7E:AC:36:C3:C5:7F:F9:C8:CD:F6:14:4D:D1:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888E7721D4634F4A447DE12320AEF1F0B5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k8hs9RK2fqw2w8V_-cjN9hRN0WU.roa
Signing time: Tue 06 Jun 2023 02:09:12 +0000
ROA not before: Tue 06 Jun 2023 02:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8e:77:21:d4:63:4f:4a:44:7d:e1:23:20:ae:f1:f0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 6 02:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93c86cf512b67eac36c3c57ff9c8cdf6144dd165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e3:0f:3e:6b:04:73:0e:56:ed:d4:91:39:7a:
c0:c7:88:55:55:db:fe:a8:72:9a:7a:b1:0e:9d:ee:
37:09:27:99:37:99:e2:b0:f1:81:2a:2e:58:eb:00:
de:e5:c5:85:1d:d3:af:df:f1:d6:6d:b7:26:b0:c1:
d9:ad:25:5e:5d:9b:c5:77:da:a8:e4:f2:72:0c:19:
b0:f8:75:1f:7d:ab:1a:19:e8:6a:8c:93:52:1b:5f:
12:c8:e2:73:57:e0:4a:5d:53:a7:2e:cb:e5:10:72:
3c:3f:00:6f:14:3c:94:1c:56:08:44:7d:7d:1d:0b:
c7:bb:45:ec:c4:61:19:e8:fe:eb:42:40:6b:17:2f:
f7:99:83:45:27:c9:f5:f4:8f:32:be:98:cc:3f:46:
92:f7:2e:1c:a1:28:3b:90:5a:b2:6f:8f:4f:2e:5d:
26:41:39:10:92:e3:42:b7:fd:55:11:5c:c1:ef:58:
6a:97:69:3d:02:a5:6b:94:27:75:bb:02:d0:67:bb:
ba:71:2b:39:07:e5:b7:a4:1b:ad:55:77:96:bc:d2:
27:86:e8:02:95:94:7c:ae:42:01:da:27:eb:83:11:
50:7f:37:7a:1b:a3:de:26:00:cb:22:e0:8d:1f:fc:
41:ef:19:c3:89:04:75:78:a6:3a:0e:bc:ac:7b:e1:
24:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C8:6C:F5:12:B6:7E:AC:36:C3:C5:7F:F9:C8:CD:F6:14:4D:D1:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k8hs9RK2fqw2w8V_-cjN9hRN0WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:1b:6b:34:cb:31:fd:c3:54:e1:3d:32:a9:d7:64:ea:e1:aa:
2d:39:4d:b6:fb:d2:15:cf:55:12:6d:5a:21:f5:d0:7d:74:30:
fa:44:40:86:3b:0e:4c:bf:91:66:5b:2c:95:d5:a5:f6:18:a3:
10:f9:0c:b4:bb:7c:89:d6:72:42:49:bf:24:0f:51:00:39:af:
ae:cf:c0:ed:ca:02:11:ad:a7:1a:2c:4a:e8:88:3f:cb:0b:1f:
c4:5d:ca:88:fd:42:a4:4c:83:ce:90:28:3f:de:5b:b3:12:e7:
d9:b5:74:ca:6d:58:43:33:7a:75:ac:79:18:62:58:41:3e:89:
c7:ac:fb:e3:b9:42:69:a9:84:eb:38:ed:1a:e7:56:fc:40:8b:
b0:37:66:d5:e3:fe:6e:99:c7:41:65:15:e6:25:e7:8a:cb:78:
a4:bc:c3:02:87:f7:af:6b:2d:89:26:25:be:6c:6b:d7:fd:d4:
7d:ce:d7:9c:68:68:f2:dd:cc:49:36:49:64:b9:ed:ce:a3:62:
3a:d6:e0:87:05:99:db:5a:34:e3:14:af:29:93:f7:4a:8e:12:
d8:81:0b:89:81:78:55:a4:7a:83:f1:52:ff:77:31:a2:6a:e5:
89:74:f1:be:11:03:7d:0b:4d:1b:36:04:bc:8e:64:55:10:3a:
d1:e1:96:37
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYiOdyHUY09KRH3hIyCu8fC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjA2MDIwOTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2M4NmNmNTEyYjY3ZWFjMzZjM2M1N2ZmOWM4Y2RmNjE0NGRkMTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuMPPmsEcw5W7dSROXrAx4hVVdv+
qHKaerEOne43CSeZN5nisPGBKi5Y6wDe5cWFHdOv3/HWbbcmsMHZrSVeXZvFd9qo
5PJyDBmw+HUffasaGehqjJNSG18SyOJzV+BKXVOnLsvlEHI8PwBvFDyUHFYIRH19
HQvHu0XsxGEZ6P7rQkBrFy/3mYNFJ8n19I8yvpjMP0aS9y4coSg7kFqyb49PLl0m
QTkQkuNCt/1VEVzB71hql2k9AqVrlCd1uwLQZ7u6cSs5B+W3pButVXeWvNInhugC
lZR8rkIB2ifrgxFQfzd6G6PeJgDLIuCNH/xB7xnDiQR1eKY6Dryse+EkzwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJPIbPUStn6sNsPFf/nIzfYUTdFlMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvazhoczlSSzJmcXcydzhWXy1jak45aFJOMFdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIEbazTLMf3DVOE9MqnX
ZOrhqi05Tbb70hXPVRJtWiH10H10MPpEQIY7Dky/kWZbLJXVpfYYoxD5DLS7fInW
ckJJvyQPUQA5r67PwO3KAhGtpxosSuiIP8sLH8Rdyoj9QqRMg86QKD/eW7MS59m1
dMptWEMzenWseRhiWEE+ices++O5QmmphOs47RrnVvxAi7A3ZtXj/m6Zx0FlFeYl
54rLeKS8wwKH969rLYkmJb5sa9f91H3O15xoaPLdzEk2SWS57c6jYjrW4IcFmdta
NOMUrymT90qOEtiBC4mBeFWkeoPxUv93MaJq5Yl08b4RA30LTRs2BLyOZFUQOtHh
ljc=
-----END CERTIFICATE-----
Generated at Thu May 1 06:30:55 2025 by rpki-client