Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kPnINYm8AUuM7bI4oyi65dZvgPQ.roa
File: kPnINYm8AUuM7bI4oyi65dZvgPQ.roa (raw, json)
Hash identifier: MIb/vKxBmYrkl550gF5V0sk0860s+wsVtj6gEbMtmV4=
Subject key identifier: 90:F9:C8:35:89:BC:01:4B:8C:ED:B2:38:A3:28:BA:E5:D6:6F:80:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897F039072DE70859C4F9627F98AFAD4C9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kPnINYm8AUuM7bI4oyi65dZvgPQ.roa
Signing time: Sat 22 Jul 2023 19:11:27 +0000
ROA not before: Sat 22 Jul 2023 19:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7f:03:90:72:de:70:85:9c:4f:96:27:f9:8a:fa:d4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 19:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90f9c83589bc014b8cedb238a328bae5d66f80f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:cd:40:0a:34:91:d3:0a:56:b4:34:ae:88:
36:2c:91:66:c8:67:b4:9b:85:2a:91:dc:20:dd:9b:
ed:60:4e:80:58:0c:24:a9:f1:33:4e:d2:eb:1e:66:
ac:f9:73:57:6e:75:2c:08:e9:a8:fc:c1:cc:c5:19:
c8:db:5e:68:0c:b2:d5:72:66:02:f2:0b:87:b5:92:
e7:64:29:bf:e0:d9:0e:64:ee:2e:53:7f:47:4c:da:
bf:f4:de:f7:54:80:5b:36:71:a7:2d:50:00:e0:b8:
36:19:f9:ee:82:e7:7f:ab:76:a7:08:eb:10:f7:8b:
d5:0b:54:68:97:62:ac:74:50:66:f1:ba:7f:64:32:
53:19:c9:a1:5c:76:d4:0e:fa:5a:7e:23:ea:e7:59:
10:17:5b:4b:b5:56:53:11:69:db:09:6d:13:dc:bf:
5c:b7:3d:aa:40:20:b1:ea:26:50:aa:ee:76:98:d6:
58:09:1c:f1:4c:b0:5c:9a:ea:18:14:84:e5:78:40:
8f:a8:78:7a:4f:85:7b:26:fa:d4:69:f7:36:18:d6:
e0:98:b6:9f:f1:2b:72:89:85:d9:02:29:f9:4e:52:
71:57:76:31:11:f7:fc:a5:d3:ea:59:45:ca:fa:10:
75:5d:32:b2:86:63:e7:95:9c:62:ca:9b:a4:ea:ee:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F9:C8:35:89:BC:01:4B:8C:ED:B2:38:A3:28:BA:E5:D6:6F:80:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kPnINYm8AUuM7bI4oyi65dZvgPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:ad:9c:7b:f7:11:50:b2:85:2a:38:be:46:7d:77:c4:8e:7f:
f4:82:c1:6b:9a:36:3a:19:9e:ea:60:31:20:22:0e:0f:b0:37:
a8:d5:89:11:e4:3c:2c:73:5d:11:19:d6:26:56:29:48:e9:79:
4a:09:65:29:20:38:a3:41:e3:b1:4d:6f:6c:32:60:1e:d5:bd:
6f:02:f7:b7:bb:dd:1f:ab:93:c8:c7:e6:81:79:15:e7:74:3f:
e2:b6:d5:dd:9a:dd:6c:5b:b2:bf:3c:9c:5d:19:8d:e7:56:1f:
63:f6:cd:cc:b5:72:09:0e:56:c6:07:3a:fa:d3:6b:72:40:96:
e6:a5:95:83:62:88:4e:b5:43:14:c5:ad:49:48:d9:b3:95:c7:
1f:c6:cf:4d:78:63:a7:20:ad:e9:fa:52:99:30:c4:c7:df:7f:
a5:6a:05:26:f5:10:ab:05:27:55:51:eb:b8:82:76:c4:2f:82:
55:c9:a6:fe:d8:6d:7c:3f:02:f2:94:52:c3:ab:74:bf:b3:3b:
22:a0:f1:cc:f2:90:87:d9:7c:8c:1f:fe:4a:a4:fe:01:27:05:
fa:45:1c:ae:28:41:e4:00:16:be:91:20:b2:45:d6:f4:51:62:
5e:cb:a3:d7:fb:e4:0a:37:24:d3:38:54:e4:ad:dd:40:12:79:
2f:c1:2c:bd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYl/A5By3nCFnE+WJ/mK+tTJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzIyMTkxMTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGY5YzgzNTg5YmMwMTRiOGNlZGIyMzhhMzI4YmFlNWQ2NmY4MGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5vNQAo0kdMKVrQ0rog2LJFmyGe0
m4Uqkdwg3ZvtYE6AWAwkqfEzTtLrHmas+XNXbnUsCOmo/MHMxRnI215oDLLVcmYC
8guHtZLnZCm/4NkOZO4uU39HTNq/9N73VIBbNnGnLVAA4Lg2Gfnugud/q3anCOsQ
94vVC1Rol2KsdFBm8bp/ZDJTGcmhXHbUDvpafiPq51kQF1tLtVZTEWnbCW0T3L9c
tz2qQCCx6iZQqu52mNZYCRzxTLBcmuoYFITleECPqHh6T4V7JvrUafc2GNbgmLaf
8StyiYXZAin5TlJxV3YxEff8pdPqWUXK+hB1XTKyhmPnlZxiypuk6u7GrwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJD5yDWJvAFLjO2yOKMouuXWb4D0MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEva1BuSU5ZbThBVXVNN2JJNG95aTY1ZFp2Z1BRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADOtnHv3EVCyhSo4vkZ9
d8SOf/SCwWuaNjoZnupgMSAiDg+wN6jViRHkPCxzXREZ1iZWKUjpeUoJZSkgOKNB
47FNb2wyYB7VvW8C97e73R+rk8jH5oF5Fed0P+K21d2a3Wxbsr88nF0ZjedWH2P2
zcy1cgkOVsYHOvrTa3JAluallYNiiE61QxTFrUlI2bOVxx/Gz014Y6cgren6Upkw
xMfff6VqBSb1EKsFJ1VR67iCdsQvglXJpv7YbXw/AvKUUsOrdL+zOyKg8czykIfZ
fIwf/kqk/gEnBfpFHK4oQeQAFr6RILJF1vRRYl7Lo9f75Ao3JNM4VOSt3UASeS/B
LL0=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:51 2025 by rpki-client