Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kByr6fDHmJ8Yd8fBsw-MfLWp8ug.roa
File: kByr6fDHmJ8Yd8fBsw-MfLWp8ug.roa (raw, json)
Hash identifier: vo1aEsv8NzpoIP5Yyw/8OlJTPMu0Zxmp7KFyZ5utX2Q=
Subject key identifier: 90:1C:AB:E9:F0:C7:98:9F:18:77:C7:C1:B3:0F:8C:7C:B5:A9:F2:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 71A1272E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kByr6fDHmJ8Yd8fBsw-MfLWp8ug.roa
Signing time: Fri 11 Mar 2022 14:10:47 +0000
ROA not before: Fri 11 Mar 2022 14:10:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1906386734 (0x71a1272e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 14:10:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=901cabe9f0c7989f1877c7c1b30f8c7cb5a9f2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:ea:1e:9f:42:35:39:af:bf:f2:f9:d3:aa:
a3:b9:db:71:c6:90:f4:ac:e9:21:7c:e5:0f:3e:6b:
68:52:72:d8:44:17:bb:da:37:88:11:3e:06:72:02:
e2:5c:31:6b:d5:53:62:a1:31:67:2e:85:7b:2a:4f:
46:c1:bd:61:8f:72:35:b1:72:df:a1:0f:74:0a:58:
f0:35:e1:57:a4:aa:11:70:9a:8c:9e:b5:ad:a5:86:
8d:b2:10:1c:d0:b0:e0:08:3b:08:1d:58:df:d7:37:
f9:3e:85:05:f4:30:6d:b8:d9:3b:36:7d:d7:2d:1a:
13:27:7e:b4:32:b2:c8:86:37:e9:dd:aa:4e:c2:37:
d8:5b:9f:7d:4a:61:bd:e8:05:99:df:9e:34:fd:c4:
90:f6:49:cf:bb:d6:7d:6a:7a:f8:cb:95:4b:84:85:
06:29:3a:a6:bd:e2:92:31:43:7b:ac:40:5e:d3:e5:
53:66:8b:4b:69:f8:6d:18:c2:ed:c5:d9:33:8b:34:
91:20:55:f7:29:f4:02:54:ea:82:0b:35:d9:e2:66:
ac:04:0f:4d:20:72:43:67:eb:03:85:cd:6a:16:40:
a7:76:11:07:a3:11:5f:ba:f0:ed:6e:d2:75:d7:b7:
a2:61:cc:1c:be:12:ce:74:05:6c:e1:78:85:bb:cf:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1C:AB:E9:F0:C7:98:9F:18:77:C7:C1:B3:0F:8C:7C:B5:A9:F2:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kByr6fDHmJ8Yd8fBsw-MfLWp8ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:53:1f:1a:bd:7b:c1:ef:4a:fc:e7:08:63:7a:5c:61:db:da:
6d:1d:8a:77:ca:89:49:09:df:5f:5d:bc:f6:dd:d4:5f:b5:49:
86:c2:e4:b5:3b:d9:58:f6:0a:23:21:35:d1:cc:16:d5:01:b7:
12:3f:af:25:a2:7b:e7:1f:1b:86:95:09:7c:53:f5:11:33:52:
39:84:a6:7d:22:73:27:11:c6:fa:de:fe:dd:51:b5:38:6f:e3:
be:a5:3c:60:35:95:95:c9:14:dd:5e:4e:b0:f3:3e:17:cb:cb:
f0:8d:c3:e3:67:59:69:7c:1a:2f:df:f0:fa:25:9d:be:50:01:
f8:2f:ea:9c:c5:a4:ac:01:79:44:e4:a2:f5:9c:88:68:07:51:
f3:66:67:99:04:1b:bc:12:14:65:83:f7:fe:26:44:82:83:69:
7e:e9:58:b4:74:7f:05:3a:3b:8f:d4:56:40:b9:6b:f6:38:73:
44:cf:40:fc:98:8c:90:e3:ae:62:aa:82:e5:41:ea:29:39:71:
0f:48:7c:25:75:9e:a4:22:ee:8c:99:42:95:19:ea:99:06:25:
be:64:d3:97:17:95:4f:70:8c:6a:dc:33:d8:22:ec:6c:32:11:
c1:23:d4:bf:29:00:f4:26:d7:84:dc:5b:af:b2:3b:6b:75:aa:
aa:8f:24:25
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcaEnLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMx
MTE0MTA0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTAxY2FiZTlmMGM3
OTg5ZjE4NzdjN2MxYjMwZjhjN2NiNWE5ZjJlODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKRg6h6fQjU5r7/y+dOqo7nbccaQ9KzpIXzlDz5raFJy2EQX
u9o3iBE+BnIC4lwxa9VTYqExZy6FeypPRsG9YY9yNbFy36EPdApY8DXhV6SqEXCa
jJ61raWGjbIQHNCw4Ag7CB1Y39c3+T6FBfQwbbjZOzZ91y0aEyd+tDKyyIY36d2q
TsI32FuffUphvegFmd+eNP3EkPZJz7vWfWp6+MuVS4SFBik6pr3ikjFDe6xAXtPl
U2aLS2n4bRjC7cXZM4s0kSBV9yn0AlTqggs12eJmrAQPTSByQ2frA4XNahZAp3YR
B6MRX7rw7W7Sdde3omHMHL4SznQFbOF4hbvPai8CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSQHKvp8MeYnxh3x8GzD4x8tany6DAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2tCeXI2ZkRIbUo4WWQ4ZkJzdy1NZkxXcDh1Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBcUx8avXvB70r85whjelxh29ptHYp3yolJCd9f
Xbz23dRftUmGwuS1O9lY9gojITXRzBbVAbcSP68lonvnHxuGlQl8U/URM1I5hKZ9
InMnEcb63v7dUbU4b+O+pTxgNZWVyRTdXk6w8z4Xy8vwjcPjZ1lpfBov3/D6JZ2+
UAH4L+qcxaSsAXlE5KL1nIhoB1HzZmeZBBu8EhRlg/f+JkSCg2l+6Vi0dH8FOjuP
1FZAuWv2OHNEz0D8mIyQ465iqoLlQeopOXEPSHwldZ6kIu6MmUKVGeqZBiW+ZNOX
F5VPcIxq3DPYIuxsMhHBI9S/KQD0JteE3FuvsjtrdaqqjyQl
-----END CERTIFICATE-----
Generated at Thu May 1 20:12:42 2025 by rpki-client