Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kXX86IrGgFcNp4ZwheA7ZFvqJNU.roa
File: kXX86IrGgFcNp4ZwheA7ZFvqJNU.roa (raw, json)
Hash identifier: PIMCGPvNMAS5WmSTCotHxPJ7WsBaMSaFX22Fq/xjK+M=
Subject key identifier: 91:75:FC:E8:8A:C6:80:57:0D:A7:86:70:85:E0:3B:64:5B:EA:24:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186940C16D34CB8B0761574F91E7C653E94
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kXX86IrGgFcNp4ZwheA7ZFvqJNU.roa
Signing time: Mon 27 Feb 2023 18:04:25 +0000
ROA not before: Mon 27 Feb 2023 18:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:940b:f039/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:94:0c:16:d3:4c:b8:b0:76:15:74:f9:1e:7c:65:3e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 18:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9175fce88ac680570da7867085e03b645bea24d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:1f:41:6c:55:b9:3f:36:41:c4:a0:19:fe:
21:1a:19:17:ba:5d:e6:b6:0a:46:d4:0e:a6:7b:21:
24:53:18:e2:72:2f:e2:b6:00:38:36:48:60:03:97:
29:45:81:e3:53:1c:4c:a3:5f:95:f2:dc:a1:8f:0a:
16:2b:37:af:6e:e2:11:ac:b4:98:76:c4:08:af:c6:
a7:4d:b6:89:6e:c2:4d:10:67:8d:b7:1d:d3:19:d5:
c0:1c:6a:34:d3:56:80:5e:8a:8a:a6:55:05:40:4b:
e4:68:50:dc:c0:db:7c:a0:19:57:34:6f:08:e6:fa:
0d:fa:2e:21:64:84:57:3d:e9:16:45:a8:73:6c:b4:
d4:a2:55:87:5b:cc:21:df:52:7f:16:cd:9d:71:df:
9b:6e:a5:04:2a:f6:c2:8d:1e:26:2b:8b:f5:62:4e:
80:f9:36:d1:4a:eb:d4:a0:d2:3e:a4:47:9f:30:bf:
16:9d:b1:59:ad:fc:09:90:ac:3e:cd:e6:5f:de:98:
c5:42:70:08:2c:ce:dc:de:5f:bc:83:2b:a6:e1:bf:
a5:c5:2d:11:db:5d:f2:a4:70:10:bd:31:73:b7:78:
80:36:69:a4:9a:66:4d:99:9f:35:5e:56:e8:39:13:
89:10:da:41:9d:a6:0a:9c:dc:96:ec:3e:6d:48:2e:
d0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:75:FC:E8:8A:C6:80:57:0D:A7:86:70:85:E0:3B:64:5B:EA:24:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kXX86IrGgFcNp4ZwheA7ZFvqJNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:d3:ca:1f:49:4f:f3:b1:f9:67:51:90:7d:2b:99:6c:8c:7e:
13:29:41:8f:1f:2f:92:71:a8:5f:6a:1a:91:5c:15:19:6e:7a:
db:83:58:e0:e2:7c:38:c5:15:a6:65:94:4d:17:74:2d:31:36:
81:c3:e2:a6:53:16:20:51:61:82:4f:b4:17:ee:58:21:d0:cf:
57:87:70:b1:09:77:72:f5:4e:7a:37:98:22:79:7a:e6:20:35:
e8:53:64:53:a1:dd:ba:e0:f1:5d:90:87:ec:c6:20:da:36:ba:
ee:1f:08:64:a2:8a:df:3e:61:8b:bd:e8:85:5a:3d:db:bb:f3:
00:a7:df:33:d6:b5:5f:df:a9:43:11:41:74:ed:65:79:b3:ca:
a3:36:87:f0:72:c8:26:6d:f0:0e:86:b8:0b:8d:80:ff:5a:f7:
8c:39:4e:3a:67:ad:81:d6:fa:ce:c2:ee:2c:8a:ed:14:73:41:
f9:09:06:de:76:11:e4:0f:3b:80:07:cf:eb:9b:35:78:28:19:
58:81:56:f0:20:c9:a1:6a:3d:37:d8:ca:35:4f:d3:80:70:30:
5a:10:03:48:61:ed:84:a1:9d:e9:7c:57:dd:0a:1f:5e:26:83:
46:34:8f:1b:1f:6e:14:89:d2:4e:9b:85:91:00:78:b7:db:5d:
4b:bb:84:58
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaUDBbTTLiwdhV0+R58ZT6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI3MTgwNDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTc1ZmNlODhhYzY4MDU3MGRhNzg2NzA4NWUwM2I2NDViZWEyNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBMfQWxVuT82QcSgGf4hGhkXul3m
tgpG1A6meyEkUxjici/itgA4NkhgA5cpRYHjUxxMo1+V8tyhjwoWKzevbuIRrLSY
dsQIr8anTbaJbsJNEGeNtx3TGdXAHGo001aAXoqKplUFQEvkaFDcwNt8oBlXNG8I
5voN+i4hZIRXPekWRahzbLTUolWHW8wh31J/Fs2dcd+bbqUEKvbCjR4mK4v1Yk6A
+TbRSuvUoNI+pEefML8WnbFZrfwJkKw+zeZf3pjFQnAILM7c3l+8gyum4b+lxS0R
213ypHAQvTFzt3iANmmkmmZNmZ81XlboOROJENpBnaYKnNyW7D5tSC7QeQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJF1/OiKxoBXDaeGcIXgO2Rb6iTVMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEva1hYODZJckdnRmNOcDRad2hlQTdaRnZxSk5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIvTyh9JT/Ox+WdRkH0r
mWyMfhMpQY8fL5JxqF9qGpFcFRluetuDWODifDjFFaZllE0XdC0xNoHD4qZTFiBR
YYJPtBfuWCHQz1eHcLEJd3L1Tno3mCJ5euYgNehTZFOh3brg8V2Qh+zGINo2uu4f
CGSiit8+YYu96IVaPdu78wCn3zPWtV/fqUMRQXTtZXmzyqM2h/ByyCZt8A6GuAuN
gP9a94w5TjpnrYHW+s7C7iyK7RRzQfkJBt52EeQPO4AHz+ubNXgoGViBVvAgyaFq
PTfYyjVP04BwMFoQA0hh7YShnel8V90KH14mg0Y0jxsfbhSJ0k6bhZEAeLfbXUu7
hFg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:33 2025 by rpki-client