Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/krbYqahgmxCU6BXBOPiLFItDmhE.roa
File: krbYqahgmxCU6BXBOPiLFItDmhE.roa (raw, json)
Hash identifier: ufyZSyjG9zeJT/8ce/HhMt97ejN7I0KS4EZ2z+Ephxo=
Subject key identifier: 92:B6:D8:A9:A8:60:9B:10:94:E8:15:C1:38:F8:8B:14:8B:43:9A:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184EF123CC075524B1D6015A2489B9C46A2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/krbYqahgmxCU6BXBOPiLFItDmhE.roa
Signing time: Thu 08 Dec 2022 00:11:00 +0000
ROA not before: Thu 08 Dec 2022 00:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ef:12:3c:c0:75:52:4b:1d:60:15:a2:48:9b:9c:46:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 8 00:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92b6d8a9a8609b1094e815c138f88b148b439a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:23:76:11:f0:26:7e:ab:d1:48:b9:d0:70:
bf:b9:66:14:60:82:a8:c8:93:c0:f4:f9:fc:d8:a9:
f1:9c:11:a7:b5:08:23:9d:cc:73:f2:a9:fc:49:ad:
5f:8b:2a:dc:ad:e1:3c:1d:43:c8:da:c4:2a:2f:de:
bd:25:e9:0c:4f:66:13:18:63:fc:68:a6:cd:31:fb:
2d:dd:c3:29:a8:ce:3e:41:b6:54:04:a2:91:e3:bf:
26:97:a9:d7:75:ed:35:1a:e4:76:77:18:4f:e4:66:
bf:8d:36:30:51:28:99:06:5b:af:d8:74:92:d6:b1:
a9:c4:83:87:24:83:d5:5b:9f:5a:74:91:ab:3b:a0:
82:77:2c:da:0d:c7:74:54:a5:7f:19:26:e8:2c:da:
08:dc:84:7f:83:15:1b:fb:f1:68:c0:ba:cf:02:8c:
dc:bd:48:f2:ac:62:73:fa:da:a4:30:ac:14:3d:e7:
72:b5:cb:cf:f8:bc:9b:d4:05:fc:0f:f2:fa:f5:52:
60:51:e1:b8:13:9a:e8:3f:1b:b0:72:a6:1d:ba:1d:
f2:d3:e5:66:78:55:99:18:7c:24:b8:82:04:3a:e8:
14:27:ab:a1:56:cb:0a:ad:1c:bf:34:5c:56:c0:c4:
e3:6e:35:fe:8c:72:fc:bc:fc:b9:71:f8:b1:52:49:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B6:D8:A9:A8:60:9B:10:94:E8:15:C1:38:F8:8B:14:8B:43:9A:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/krbYqahgmxCU6BXBOPiLFItDmhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:15:df:86:da:6e:a0:e5:50:57:a3:f1:d5:e1:24:f3:1e:9b:
df:b7:27:e2:53:04:3a:9a:f5:83:cd:7f:17:9f:de:7c:cb:4e:
26:f1:d0:1b:1d:b9:4d:7f:ed:67:61:1d:a2:65:f2:8b:07:69:
39:19:ac:35:5c:42:bb:d3:95:a7:bd:d7:0b:98:cc:fe:64:ac:
f8:7a:ab:87:62:d8:12:ef:98:9c:38:23:c7:94:5c:aa:f5:a7:
a4:c2:49:90:54:46:74:da:ec:d1:93:db:1d:a8:cf:02:28:da:
ae:29:85:1e:0e:43:44:5a:0d:fb:2c:d2:0d:2e:b2:d5:4b:f9:
06:bf:5b:56:7d:36:7e:12:45:47:48:7c:eb:e0:64:75:da:f6:
b7:f8:f4:bb:d7:1c:5c:2e:c5:4f:73:99:e4:03:91:0e:09:38:
2f:1f:00:52:f6:d2:53:bd:5e:31:c6:5b:3b:c3:7c:fb:87:54:
db:d3:e7:12:6a:4d:35:41:cd:24:ff:64:20:27:92:41:07:06:
90:47:bd:ad:86:80:b3:07:9d:6d:32:b6:69:df:37:27:e4:4b:
05:62:2c:71:5e:72:a3:06:33:73:10:b8:16:70:29:9a:cf:62:
52:db:5e:dc:4c:ec:e1:1d:a0:eb:0c:0f:7b:73:f7:aa:4b:b8:
c3:71:f2:db
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTvEjzAdVJLHWAVokibnEaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjA4MDAxMTAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmI2ZDhhOWE4NjA5YjEwOTRlODE1YzEzOGY4OGIxNDhiNDM5YTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIMjdhHwJn6r0Ui50HC/uWYUYIKo
yJPA9Pn82KnxnBGntQgjncxz8qn8Sa1fiyrcreE8HUPI2sQqL969JekMT2YTGGP8
aKbNMfst3cMpqM4+QbZUBKKR478ml6nXde01GuR2dxhP5Ga/jTYwUSiZBluv2HSS
1rGpxIOHJIPVW59adJGrO6CCdyzaDcd0VKV/GSboLNoI3IR/gxUb+/FowLrPAozc
vUjyrGJz+tqkMKwUPedytcvP+Lyb1AX8D/L69VJgUeG4E5roPxuwcqYduh3y0+Vm
eFWZGHwkuIIEOugUJ6uhVssKrRy/NFxWwMTjbjX+jHL8vPy5cfixUkkK5wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJK22KmoYJsQlOgVwTj4ixSLQ5oRMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEva3JiWXFhaGdteENVNkJYQk9QaUxGSXREbWhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFIV34babqDlUFej8dXh
JPMem9+3J+JTBDqa9YPNfxef3nzLTibx0BsduU1/7WdhHaJl8osHaTkZrDVcQrvT
lae91wuYzP5krPh6q4di2BLvmJw4I8eUXKr1p6TCSZBURnTa7NGT2x2ozwIo2q4p
hR4OQ0RaDfss0g0ustVL+Qa/W1Z9Nn4SRUdIfOvgZHXa9rf49LvXHFwuxU9zmeQD
kQ4JOC8fAFL20lO9XjHGWzvDfPuHVNvT5xJqTTVBzST/ZCAnkkEHBpBHva2GgLMH
nW0ytmnfNyfkSwViLHFecqMGM3MQuBZwKZrPYlLbXtxM7OEdoOsMD3tz96pLuMNx
8ts=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:00 2025 by rpki-client