Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kuHEXCvZr_wfys7yRQg6La9i2ys.roa
File: kuHEXCvZr_wfys7yRQg6La9i2ys.roa (raw, json)
Hash identifier: bkJewWz9Y79kO0bwVk9qXc2kfauuD0PF69g6JJxSQMA=
Subject key identifier: 92:E1:C4:5C:2B:D9:AF:FC:1F:CA:CE:F2:45:08:3A:2D:AF:62:DB:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EB5A1ABA25DACACF5436E6CFEDF31AB4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kuHEXCvZr_wfys7yRQg6La9i2ys.roa
Signing time: Sat 12 Aug 2023 20:04:58 +0000
ROA not before: Sat 12 Aug 2023 20:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:eb59:7a2e/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:eb:5a:1a:ba:25:da:ca:cf:54:36:e6:cf:ed:f3:1a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 20:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92e1c45c2bd9affc1fcacef245083a2daf62db2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:08:39:57:9d:5d:20:d3:6d:65:de:0f:60:e1:
dc:58:2c:61:e5:b9:17:29:88:bb:4f:60:4d:4b:c4:
76:a6:8b:8e:60:e7:4c:18:27:31:d9:c3:e5:44:83:
cf:14:7b:93:80:8f:db:4f:0f:9e:30:06:ba:d3:21:
b8:15:58:be:66:f8:44:96:34:da:2f:89:71:ce:0c:
54:60:91:03:bf:ef:9f:11:cd:a4:5d:6b:d5:98:41:
82:27:63:18:5f:a1:5a:b7:ec:81:73:4d:f1:e2:4e:
47:1e:1e:61:6b:b7:09:07:c0:e8:65:37:d6:f8:2f:
8f:ab:10:68:ab:02:70:a2:21:55:61:3e:b1:95:52:
aa:d4:37:fa:ac:ee:1d:46:28:08:3a:b4:27:eb:48:
98:98:78:af:ee:c8:75:66:5e:45:81:59:e7:db:d0:
65:0f:de:8f:16:6d:4a:5f:5f:75:e2:10:a1:29:6e:
7d:f3:0c:a6:b9:72:03:45:61:d0:7f:0d:16:db:7b:
2e:e7:2a:81:8a:4f:99:9d:24:20:0e:5d:72:de:dd:
71:9d:b9:60:16:65:3a:1f:10:fc:76:07:43:13:e9:
a8:ae:74:00:62:68:bd:74:36:3a:85:4f:04:81:2f:
99:d1:0f:ca:f9:7c:d1:db:8d:4c:69:f4:39:ba:14:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E1:C4:5C:2B:D9:AF:FC:1F:CA:CE:F2:45:08:3A:2D:AF:62:DB:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kuHEXCvZr_wfys7yRQg6La9i2ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:3c:f7:93:15:db:0d:c2:bd:44:fa:c8:82:a1:db:83:a6:34:
20:3e:5c:08:e8:0a:d6:78:ff:a9:69:1d:85:75:f1:50:bc:8e:
e6:af:39:d8:9c:f7:59:1a:06:54:a9:94:a5:f6:89:33:f8:c2:
d6:ad:fe:b5:ed:0c:b2:33:8a:78:e7:46:01:52:69:3a:cb:8c:
ef:c3:a4:f1:43:3a:fc:87:6a:98:f1:3f:62:e4:a8:32:67:b5:
df:cf:9a:2c:ac:99:92:f1:c7:d5:fd:94:30:b5:14:c0:2a:77:
f7:64:91:ba:97:bf:ad:92:8d:2a:b1:51:92:4f:8f:bc:e4:ed:
10:fb:b9:ce:d8:59:e6:aa:0a:91:37:06:ae:a4:be:3e:15:c9:
6d:3a:dc:c4:1e:92:ee:c9:82:c1:30:de:84:fe:c8:92:40:47:
dc:f3:c1:f9:80:d8:f9:b5:e6:f5:f2:b5:5e:fe:54:24:e4:cc:
aa:90:bb:04:94:f7:74:5f:97:53:18:50:79:39:5f:6c:f1:d0:
d1:35:c6:5a:9c:d4:06:dc:8d:6a:6a:66:fe:f8:b3:79:4e:52:
ba:5a:af:dc:c8:42:34:85:4a:40:2e:29:6b:e0:73:fe:dd:ec:
98:3c:9b:74:ef:3e:7e:de:05:d5:c9:cf:3f:8a:2f:c3:94:a2:
fc:27:39:0e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnrWhq6JdrKz1Q25s/t8xq0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODEyMjAwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmUxYzQ1YzJiZDlhZmZjMWZjYWNlZjI0NTA4M2EyZGFmNjJkYjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAg5V51dINNtZd4PYOHcWCxh5bkX
KYi7T2BNS8R2pouOYOdMGCcx2cPlRIPPFHuTgI/bTw+eMAa60yG4FVi+ZvhEljTa
L4lxzgxUYJEDv++fEc2kXWvVmEGCJ2MYX6Fat+yBc03x4k5HHh5ha7cJB8DoZTfW
+C+PqxBoqwJwoiFVYT6xlVKq1Df6rO4dRigIOrQn60iYmHiv7sh1Zl5FgVnn29Bl
D96PFm1KX1914hChKW598wymuXIDRWHQfw0W23su5yqBik+ZnSQgDl1y3t1xnblg
FmU6HxD8dgdDE+mornQAYmi9dDY6hU8EgS+Z0Q/K+XzR241MafQ5uhR7RwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJLhxFwr2a/8H8rO8kUIOi2vYtsrMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEva3VIRVhDdlpyX3dmeXM3eVJRZzZMYTlpMnlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIY895MV2w3CvUT6yIKh
24OmNCA+XAjoCtZ4/6lpHYV18VC8juavOdic91kaBlSplKX2iTP4wtat/rXtDLIz
injnRgFSaTrLjO/DpPFDOvyHapjxP2LkqDJntd/PmiysmZLxx9X9lDC1FMAqd/dk
kbqXv62SjSqxUZJPj7zk7RD7uc7YWeaqCpE3Bq6kvj4VyW063MQeku7JgsEw3oT+
yJJAR9zzwfmA2Pm15vXytV7+VCTkzKqQuwSU93Rfl1MYUHk5X2zx0NE1xlqc1Abc
jWpqZv74s3lOUrpar9zIQjSFSkAuKWvgc/7d7Jg8m3TvPn7eBdXJzz+KL8OUovwn
OQ4=
-----END CERTIFICATE-----
Generated at Thu May 1 12:52:36 2025 by rpki-client