Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kBcBD4m08cJvmX7bJwbkzUm_EQE.roa
File: kBcBD4m08cJvmX7bJwbkzUm_EQE.roa (raw, json)
Hash identifier: ugGcA5FMBCswjgYWxcthcGSo/EORbWmirqkKGwYiciI=
Subject key identifier: 90:17:01:0F:89:B4:F1:C2:6F:99:7E:DB:27:06:E4:CD:49:BF:11:01
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01842F73338E5D45E34DD0791620CC296E74
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kBcBD4m08cJvmX7bJwbkzUm_EQE.roa
Signing time: Mon 31 Oct 2022 19:09:49 +0000
ROA not before: Mon 31 Oct 2022 19:09:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2f:73:33:8e:5d:45:e3:4d:d0:79:16:20:cc:29:6e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 31 19:09:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9017010f89b4f1c26f997edb2706e4cd49bf1101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7c:0c:d2:0e:f0:bb:5d:58:46:5f:98:a2:74:
11:6a:dc:d3:40:75:74:51:40:fe:c1:80:05:9e:6d:
ea:09:90:ef:bf:9c:87:33:30:ed:bd:c3:fb:a8:f7:
80:fe:e4:41:06:1f:d4:fa:99:dd:d2:ec:48:99:13:
e9:93:e0:fc:4c:34:d1:aa:e2:51:60:40:82:77:85:
28:36:1d:e0:f3:89:b1:72:45:51:32:d0:80:e7:61:
ab:93:b1:bc:2b:e5:c0:ff:2a:e7:39:be:a4:57:11:
60:fa:87:ab:e0:d9:e9:9c:ed:16:56:e0:e4:c5:1d:
ef:35:38:36:cc:f2:67:59:61:78:07:30:1d:2b:28:
1f:14:ec:5f:3b:51:f7:11:30:0a:5e:73:ac:23:e7:
db:5e:55:34:eb:14:97:bd:4a:d4:1e:b3:b1:d8:f5:
62:41:31:5c:22:22:35:fd:e8:d8:7d:f7:de:84:69:
98:57:83:06:8e:89:fc:dc:7b:d6:b1:b5:02:5a:5d:
28:4a:72:91:4b:82:50:a8:a2:28:d8:77:84:40:da:
18:fc:35:e4:65:93:9a:ec:22:e3:f8:c7:91:56:02:
39:83:89:55:c3:f5:bf:44:f1:95:21:bc:b0:61:74:
b7:5a:75:8e:8a:2a:56:93:6a:40:6c:34:79:8b:a6:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:17:01:0F:89:B4:F1:C2:6F:99:7E:DB:27:06:E4:CD:49:BF:11:01
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kBcBD4m08cJvmX7bJwbkzUm_EQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:a3:07:d2:da:9f:ce:eb:77:67:2b:09:e9:02:d3:a1:90:d0:
02:4f:72:e9:70:2b:2f:a3:87:c9:5c:9a:24:40:fd:e3:5a:02:
5d:12:7a:69:10:bc:28:9a:37:b6:37:1d:68:1a:55:cb:c8:3f:
b5:a1:c9:ad:26:ea:21:be:ec:a4:68:79:f7:c1:79:4f:d9:3d:
a0:89:b0:91:6a:29:61:79:1b:2b:df:5d:f2:90:de:ec:1a:08:
61:a6:fb:05:27:ff:17:38:5d:fe:ae:28:9c:bc:b4:01:78:eb:
d4:60:ed:88:31:fc:0d:1d:41:53:98:53:32:7f:69:ba:8b:3d:
3e:3f:56:10:e0:12:c0:62:3f:75:c4:51:1e:93:31:34:de:76:
18:c4:40:c4:77:d0:60:5e:c7:af:12:74:3e:07:87:b3:10:09:
42:1a:0e:30:bc:1f:fe:5a:d5:8c:81:bb:6a:59:47:fa:4b:dd:
b4:25:07:79:c1:1d:ee:15:ee:c3:56:2c:81:9d:06:32:bb:24:
d9:62:a7:00:83:ca:10:e2:a8:d0:b1:e4:68:e1:bc:06:33:74:
cd:46:b2:8f:02:4b:d9:3d:a1:72:1a:ab:07:2f:75:f1:0e:b4:
16:45:53:49:84:9d:01:9d:1a:9c:72:7a:db:6f:09:a1:59:ae:
44:ae:b3:76
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYQvczOOXUXjTdB5FiDMKW50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDMxMTkwOTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDE3MDEwZjg5YjRmMWMyNmY5OTdlZGIyNzA2ZTRjZDQ5YmYxMTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HwM0g7wu11YRl+YonQRatzTQHV0
UUD+wYAFnm3qCZDvv5yHMzDtvcP7qPeA/uRBBh/U+pnd0uxImRPpk+D8TDTRquJR
YECCd4UoNh3g84mxckVRMtCA52Grk7G8K+XA/yrnOb6kVxFg+oer4NnpnO0WVuDk
xR3vNTg2zPJnWWF4BzAdKygfFOxfO1H3ETAKXnOsI+fbXlU06xSXvUrUHrOx2PVi
QTFcIiI1/ejYfffehGmYV4MGjon83HvWsbUCWl0oSnKRS4JQqKIo2HeEQNoY/DXk
ZZOa7CLj+MeRVgI5g4lVw/W/RPGVIbywYXS3WnWOiipWk2pAbDR5i6a2awIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJAXAQ+JtPHCb5l+2ycG5M1JvxEBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEva0JjQkQ0bTA4Y0p2bVg3Ykp3Ymt6VW1fRVFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIqjB9Lan87rd2crCekC
06GQ0AJPculwKy+jh8lcmiRA/eNaAl0SemkQvCiaN7Y3HWgaVcvIP7Whya0m6iG+
7KRoeffBeU/ZPaCJsJFqKWF5GyvfXfKQ3uwaCGGm+wUn/xc4Xf6uKJy8tAF469Rg
7Ygx/A0dQVOYUzJ/abqLPT4/VhDgEsBiP3XEUR6TMTTedhjEQMR30GBex68SdD4H
h7MQCUIaDjC8H/5a1YyBu2pZR/pL3bQlB3nBHe4V7sNWLIGdBjK7JNlipwCDyhDi
qNCx5GjhvAYzdM1Gso8CS9k9oXIaqwcvdfEOtBZFU0mEnQGdGpxyettvCaFZrkSu
s3Y=
-----END CERTIFICATE-----
Generated at Sat May 3 13:48:29 2025 by rpki-client