Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kpb3bLVMPSwpX9oHJBNQwhVfBqg.roa
File: kpb3bLVMPSwpX9oHJBNQwhVfBqg.roa (raw, json)
Hash identifier: 8orAOlQ5/m12VqWphbTNswTFccFkIPGyeRFXGwBLMuA=
Subject key identifier: 92:96:F7:6C:B5:4C:3D:2C:29:5F:DA:07:24:13:50:C2:15:5F:06:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8AC181D5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kpb3bLVMPSwpX9oHJBNQwhVfBqg.roa
Signing time: Tue 07 Jun 2022 17:11:02 +0000
ROA not before: Tue 07 Jun 2022 17:11:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2327937493 (0x8ac181d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 7 17:11:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9296f76cb54c3d2c295fda07241350c2155f06a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a4:de:46:50:39:da:d2:9f:18:1d:8b:dc:ee:
02:29:c3:83:36:eb:58:6a:c2:8c:11:b3:dd:dd:79:
31:5a:4c:ff:f7:79:02:96:32:eb:4f:5a:bf:d2:2b:
b9:06:46:82:59:90:ca:4e:82:ed:e2:73:21:d5:3c:
2f:9f:d4:14:cf:a5:a6:ab:9d:bc:b8:96:23:d8:1d:
87:dd:4b:99:04:1c:e8:d5:00:aa:83:05:f0:04:8d:
9c:74:af:77:48:d6:24:aa:6d:c4:3b:42:cd:e2:13:
05:f7:29:86:7d:ce:c8:6e:10:d7:69:55:9d:28:40:
1a:71:32:32:b5:bc:c6:a3:e3:71:1c:c8:12:c1:1a:
80:8e:0c:f7:63:c7:6b:b6:4c:39:c4:71:ab:78:37:
47:01:a9:84:4b:e6:cd:17:13:ab:62:98:24:8d:9a:
bc:da:97:43:95:1e:c0:04:b4:8b:58:73:62:51:fe:
f4:0f:6e:e3:23:b6:e0:cd:06:51:83:5d:90:fb:83:
ab:3e:19:53:91:08:51:02:5b:99:2d:c8:a6:3e:90:
04:c8:63:f3:d6:cc:24:08:f5:59:a4:87:ae:f6:26:
3d:69:e5:7b:f1:53:6b:a5:35:37:9a:58:e4:be:a8:
30:67:f5:da:04:71:52:ae:77:a0:a2:81:ea:94:78:
89:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:96:F7:6C:B5:4C:3D:2C:29:5F:DA:07:24:13:50:C2:15:5F:06:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kpb3bLVMPSwpX9oHJBNQwhVfBqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:50:e8:32:22:3f:79:36:b4:36:1c:34:33:17:7f:ee:8f:df:
85:c8:eb:9c:f9:64:c8:43:fa:14:a6:ab:44:c2:1b:a1:bf:a6:
e4:d4:42:a7:e7:db:20:de:84:69:38:6c:69:61:3f:7f:2a:60:
0f:1e:ae:9d:f6:cb:93:37:d0:a5:dd:61:c8:cc:1f:91:08:6e:
b4:6f:31:c0:b0:06:d9:09:f5:8a:1e:03:7c:82:4c:2e:df:4b:
7b:ea:d8:fe:8a:86:f6:37:ae:17:c3:1b:f9:b7:a2:61:b7:14:
41:87:c1:8a:6f:9b:28:73:10:65:ec:30:1e:44:51:3e:29:fb:
ca:8f:c2:bb:5f:df:37:a8:7a:1a:d3:02:57:b7:d3:a4:b5:50:
8e:99:53:c7:70:96:29:a5:d2:43:84:39:f4:d7:b6:eb:1e:ee:
7d:00:63:0e:46:bd:cd:9b:89:5a:03:93:0b:21:76:98:e3:57:
48:25:d8:05:d0:2b:f6:6d:1d:15:82:76:da:4c:5c:3b:e0:5e:
d6:4f:10:e5:f4:45:10:23:1c:2e:bd:1b:51:1e:b7:82:99:13:
8d:49:02:42:fe:8e:d9:e1:6f:82:e5:50:09:ad:e5:8d:d1:e5:
a7:32:61:c5:2d:15:98:1a:9c:d5:96:ce:69:82:0c:cb:b3:c8:
25:e4:f9:50
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIrBgdUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MDcxNzExMDJaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDkyOTZmNzZjYjU0
YzNkMmMyOTVmZGEwNzI0MTM1MGMyMTU1ZjA2YTgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCMpN5GUDna0p8YHYvc7gIpw4M261hqwowRs93deTFaTP/3
eQKWMutPWr/SK7kGRoJZkMpOgu3icyHVPC+f1BTPpaarnby4liPYHYfdS5kEHOjV
AKqDBfAEjZx0r3dI1iSqbcQ7Qs3iEwX3KYZ9zshuENdpVZ0oQBpxMjK1vMaj43Ec
yBLBGoCODPdjx2u2TDnEcat4N0cBqYRL5s0XE6timCSNmrzal0OVHsAEtItYc2JR
/vQPbuMjtuDNBlGDXZD7g6s+GVORCFECW5ktyKY+kATIY/PWzCQI9Vmkh672Jj1p
5XvxU2ulNTeaWOS+qDBn9doEcVKud6CigeqUeIlHAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUkpb3bLVMPSwpX9oHJBNQwhVfBqgwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9rcGIzYkxWTVBTd3BYOW9ISkJOUXdoVmZCcWcucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEATFDoMiI/eTa0Nhw0Mxd/7o/fhcjrnPlkyEP6
FKarRMIbob+m5NRCp+fbIN6EaThsaWE/fypgDx6unfbLkzfQpd1hyMwfkQhutG8x
wLAG2Qn1ih4DfIJMLt9Le+rY/oqG9jeuF8Mb+beiYbcUQYfBim+bKHMQZewwHkRR
Pin7yo/Cu1/fN6h6GtMCV7fTpLVQjplTx3CWKaXSQ4Q59Ne26x7ufQBjDka9zZuJ
WgOTCyF2mONXSCXYBdAr9m0dFYJ22kxcO+Be1k8Q5fRFECMcLr0bUR63gpkTjUkC
Qv6O2eFvguVQCa3ljdHlpzJhxS0VmBqc1ZbOaYIMy7PIJeT5UA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:47 2025 by rpki-client