Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pXKKNsS2OXEn_JlwCYnXnQbq_KU.roa
File: pXKKNsS2OXEn_JlwCYnXnQbq_KU.roa (raw, json)
Hash identifier: xu6Bi6R+VUewS4cFb/Tj9vCi7+tXkr1gvd0ris6jBZM=
Subject key identifier: A5:72:8A:36:C4:B6:39:71:27:FC:99:70:09:89:D7:9D:06:EA:FC:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F3FE0051452ECEAA4FEED76D12A5F37F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pXKKNsS2OXEn_JlwCYnXnQbq_KU.roa
Signing time: Fri 27 Jan 2023 16:09:47 +0000
ROA not before: Fri 27 Jan 2023 16:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:fe:00:51:45:2e:ce:aa:4f:ee:d7:6d:12:a5:f3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 27 16:09:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5728a36c4b6397127fc99700989d79d06eafca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a5:b3:35:47:32:5d:eb:86:93:e8:30:4e:57:
fe:4d:06:42:08:e1:93:f4:9d:da:cc:35:af:d5:26:
4a:8f:bd:78:d4:53:3c:2a:06:77:8e:cc:7b:16:fc:
32:5e:df:00:aa:47:31:72:dc:fa:a0:4f:cb:f2:99:
74:a0:0f:e7:22:c4:38:80:45:20:44:4b:25:84:a5:
de:8e:96:2a:78:98:9a:e1:0d:87:a4:cf:6c:3c:d6:
00:6b:68:d1:ce:b2:43:dd:f8:7c:ae:69:3a:bd:f8:
4b:db:60:87:83:0a:e8:ac:b3:ef:14:e1:11:c8:2e:
1b:c9:cd:d6:05:bf:43:2c:c6:2c:5f:e2:57:89:31:
63:48:ab:df:c3:76:84:bd:7e:dc:97:13:4b:c7:7f:
e8:81:bf:22:8b:ec:9e:0d:f9:a3:a5:c7:34:a0:1b:
a1:97:32:17:6f:b9:de:fc:82:3a:45:f6:d8:35:4b:
19:e2:bc:bc:55:53:e4:7a:b9:12:f6:b2:1b:43:4d:
a0:80:ff:8b:cf:4b:ca:a3:e7:79:59:4c:62:21:e2:
14:e7:3e:6b:58:9a:b4:0c:22:b9:68:91:9d:04:3b:
a4:1a:55:d3:e2:c4:82:41:fd:a7:60:4d:b4:ff:25:
1a:9b:01:ad:5f:c9:37:25:5d:5a:2b:2f:51:a3:88:
c2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:72:8A:36:C4:B6:39:71:27:FC:99:70:09:89:D7:9D:06:EA:FC:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pXKKNsS2OXEn_JlwCYnXnQbq_KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:3e:f4:93:b5:4a:64:69:7d:dc:70:c2:50:6a:73:64:9b:27:
fe:46:8e:25:de:1c:9b:df:37:5c:f8:1f:5d:e1:e9:14:80:ab:
3a:79:3c:79:d0:40:75:8a:ee:79:3e:b0:39:66:8b:d1:f9:58:
88:be:31:c0:31:2e:e7:85:b9:67:d4:60:08:13:57:35:35:65:
85:75:48:cb:61:f2:77:1b:ab:09:22:cd:e3:68:b5:c0:3e:83:
17:d7:55:6d:c3:3f:cd:ef:fe:7a:08:8f:b4:ed:c7:3b:00:eb:
8f:bb:94:1b:1d:13:61:42:46:27:13:19:d6:a3:4b:20:ba:5c:
22:b3:da:57:10:11:aa:a0:a7:d6:3c:62:e0:18:4e:ca:00:e6:
1c:fd:df:c6:98:bd:69:85:cb:7f:0c:0f:81:b5:a5:4e:2c:dc:
0e:8d:79:d3:45:b5:fa:93:51:5f:c0:26:2c:a7:78:c1:48:49:
0e:9e:55:9b:38:32:2b:f6:25:f4:df:e4:e6:78:7e:d1:b7:d2:
8c:90:c7:0b:ec:58:49:37:b8:f4:95:33:f8:f8:ba:17:2c:82:
b8:de:b0:d0:bd:5c:67:c9:51:9b:6b:4c:ee:26:7b:96:29:59:
0c:44:b8:37:46:59:3f:b1:b7:6a:1e:ce:91:fc:3c:f9:d5:c2:
23:0c:42:71
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXz/gBRRS7Oqk/u120SpfN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTI3MTYwOTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTcyOGEzNmM0YjYzOTcxMjdmYzk5NzAwOTg5ZDc5ZDA2ZWFmY2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aWzNUcyXeuGk+gwTlf+TQZCCOGT
9J3azDWv1SZKj7141FM8KgZ3jsx7FvwyXt8Aqkcxctz6oE/L8pl0oA/nIsQ4gEUg
REslhKXejpYqeJia4Q2HpM9sPNYAa2jRzrJD3fh8rmk6vfhL22CHgwrorLPvFOER
yC4byc3WBb9DLMYsX+JXiTFjSKvfw3aEvX7clxNLx3/ogb8ii+yeDfmjpcc0oBuh
lzIXb7ne/II6RfbYNUsZ4ry8VVPkerkS9rIbQ02ggP+Lz0vKo+d5WUxiIeIU5z5r
WJq0DCK5aJGdBDukGlXT4sSCQf2nYE20/yUamwGtX8k3JV1aKy9Ro4jCNQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKVyijbEtjlxJ/yZcAmJ150G6vylMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcFhLS05zUzJPWEVuX0psd0NZblhuUWJxX0tVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKA+9JO1SmRpfdxwwlBq
c2SbJ/5GjiXeHJvfN1z4H13h6RSAqzp5PHnQQHWK7nk+sDlmi9H5WIi+McAxLueF
uWfUYAgTVzU1ZYV1SMth8ncbqwkizeNotcA+gxfXVW3DP83v/noIj7TtxzsA64+7
lBsdE2FCRicTGdajSyC6XCKz2lcQEaqgp9Y8YuAYTsoA5hz938aYvWmFy38MD4G1
pU4s3A6NedNFtfqTUV/AJiyneMFISQ6eVZs4Miv2JfTf5OZ4ftG30oyQxwvsWEk3
uPSVM/j4uhcsgrjesNC9XGfJUZtrTO4me5YpWQxEuDdGWT+xt2oezpH8PPnVwiMM
QnE=
-----END CERTIFICATE-----
Generated at Sat May 3 13:24:31 2025 by rpki-client