Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K7SPiKCZOb__yXSdlO-A7KAt_fA.roa
File: K7SPiKCZOb__yXSdlO-A7KAt_fA.roa (raw, json)
Hash identifier: nECx1rZxdlQhUBa8L3JKfkB4yVgV4/g+HL9cIxODyhY=
Subject key identifier: 2B:B4:8F:88:A0:99:39:BF:FF:C9:74:9D:94:EF:80:EC:A0:2D:FD:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AA939AFE8A2447397836C626DA6296C9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K7SPiKCZOb__yXSdlO-A7KAt_fA.roa
Signing time: Mon 31 Jul 2023 06:12:27 +0000
ROA not before: Mon 31 Jul 2023 06:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:aa:93:9a:fe:8a:24:47:39:78:36:c6:26:da:62:96:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 06:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bb48f88a09939bfffc9749d94ef80eca02dfdf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:e6:57:7c:a8:ae:ba:e2:4c:74:58:b7:08:
9c:1a:64:26:20:f2:00:76:7c:b5:3e:9b:56:b2:5c:
8e:9f:58:22:e9:61:5a:71:d5:48:81:4c:8e:60:61:
de:f6:74:34:59:05:7d:15:46:bd:65:48:c3:94:3b:
c0:5b:35:f1:d7:db:87:f8:0d:66:1d:19:0d:7f:46:
4f:e7:68:48:ae:0a:3c:13:70:51:68:59:dd:15:8c:
8d:a2:49:69:ea:75:a8:3e:a1:21:b0:93:94:c1:8c:
bf:33:f8:eb:8b:03:92:65:38:88:95:13:0a:c3:e5:
3f:ac:19:c6:d3:d5:4a:e4:1c:95:9f:92:68:9d:22:
66:cd:9f:ae:18:2a:34:41:71:4c:33:94:91:8a:50:
ab:dc:fe:7b:1b:e9:50:36:2d:f8:ca:40:7a:89:fa:
fd:a1:42:1f:c8:2a:8e:d9:6e:26:9b:bf:8c:6a:10:
84:f0:48:20:c3:eb:fe:60:cd:80:0f:a4:7d:e0:c6:
e7:08:c0:09:a4:7e:76:24:25:dd:e0:88:2b:32:54:
71:b1:9c:af:da:b7:06:1b:f1:f2:4b:d1:d5:ba:6f:
70:6a:2d:68:87:0b:4d:a6:0e:3b:24:da:99:fc:b6:
79:fa:1e:68:31:95:ee:a4:e4:85:64:99:fe:80:a7:
3b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B4:8F:88:A0:99:39:BF:FF:C9:74:9D:94:EF:80:EC:A0:2D:FD:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K7SPiKCZOb__yXSdlO-A7KAt_fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:11:48:ec:11:3b:28:8f:14:03:b5:d1:f7:29:f8:eb:fb:c7:
b1:7e:85:c7:db:dc:c9:f3:3e:06:5e:9e:1d:bd:08:b2:a7:2f:
a7:bb:5e:e7:8a:dc:9b:68:1f:41:26:6c:07:6e:6f:06:e4:8f:
cf:7b:bc:89:c1:b8:65:5a:c0:bc:03:1f:b7:07:40:82:0a:55:
3d:a2:ca:86:0e:ff:9c:2b:2b:4c:6d:a2:1d:4a:66:49:8a:d6:
07:d4:19:75:0f:ae:7f:e0:3e:ea:09:de:69:2c:d9:86:ac:c1:
bc:b4:70:68:9d:75:9b:31:da:d8:ef:b1:92:20:f9:f3:ab:e2:
f0:47:15:ba:58:eb:d1:94:57:d2:23:bb:12:69:94:b6:24:4a:
98:7a:7b:df:92:b8:94:7c:3b:9e:f7:70:02:0a:23:08:9a:ac:
9b:5d:7d:ca:b7:16:ba:64:8a:d8:63:e2:d0:67:b4:6f:83:f5:
89:b2:b6:77:b8:e7:b6:a2:25:d5:86:72:2c:6b:d9:f1:60:c5:
6a:87:46:60:9d:25:1d:0b:ed:97:df:98:47:bb:f8:6f:30:3a:
0d:af:09:26:58:92:09:93:b3:69:3e:f9:09:f9:a8:97:5a:87:
3d:92:d5:30:c9:1d:36:68:f8:ba:95:bb:e0:80:ee:29:62:9d:
39:05:fc:f9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmqk5r+iiRHOXg2xibaYpbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzMxMDYxMjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmI0OGY4OGEwOTkzOWJmZmZjOTc0OWQ5NGVmODBlY2EwMmRmZGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1obmV3yorrriTHRYtwicGmQmIPIA
dny1PptWslyOn1gi6WFacdVIgUyOYGHe9nQ0WQV9FUa9ZUjDlDvAWzXx19uH+A1m
HRkNf0ZP52hIrgo8E3BRaFndFYyNoklp6nWoPqEhsJOUwYy/M/jriwOSZTiIlRMK
w+U/rBnG09VK5ByVn5JonSJmzZ+uGCo0QXFMM5SRilCr3P57G+lQNi34ykB6ifr9
oUIfyCqO2W4mm7+MahCE8Eggw+v+YM2AD6R94MbnCMAJpH52JCXd4IgrMlRxsZyv
2rcGG/HyS9HVum9wai1ohwtNpg47JNqZ/LZ5+h5oMZXupOSFZJn+gKc76QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCu0j4igmTm//8l0nZTvgOygLf3wMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSzdTUGlLQ1pPYl9feVhTZGxPLUE3S0F0X2ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAQRSOwROyiPFAO10fcp
+Ov7x7F+hcfb3MnzPgZenh29CLKnL6e7XueK3JtoH0EmbAdubwbkj897vInBuGVa
wLwDH7cHQIIKVT2iyoYO/5wrK0xtoh1KZkmK1gfUGXUPrn/gPuoJ3mks2Yaswby0
cGiddZsx2tjvsZIg+fOr4vBHFbpY69GUV9IjuxJplLYkSph6e9+SuJR8O573cAIK
IwiarJtdfcq3Frpkithj4tBntG+D9Ymytne457aiJdWGcixr2fFgxWqHRmCdJR0L
7ZffmEe7+G8wOg2vCSZYkgmTs2k++Qn5qJdahz2S1TDJHTZo+LqVu+CA7ilinTkF
/Pk=
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:42 2025 by rpki-client