Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KQgkk2IlC32E7OURlq_-ck7j3GU.roa
File: KQgkk2IlC32E7OURlq_-ck7j3GU.roa (raw, json)
Hash identifier: +BchT1rf3qfGioBQUUjeGwYuaFZvNGV02rWeN+zQ3J4=
Subject key identifier: 29:08:24:93:62:25:0B:7D:84:EC:E5:11:96:AF:FE:72:4E:E3:DC:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865E3686E02DE08B423CF196A82485DFB2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KQgkk2IlC32E7OURlq_-ck7j3GU.roa
Signing time: Fri 17 Feb 2023 07:11:17 +0000
ROA not before: Fri 17 Feb 2023 07:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:36:86:e0:2d:e0:8b:42:3c:f1:96:a8:24:85:df:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 07:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2908249362250b7d84ece51196affe724ee3dc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3c:c5:c2:05:45:f0:f1:93:d7:d5:3b:2b:08:
29:06:6f:10:ba:78:5d:e7:2a:13:2b:de:2a:d6:d2:
7f:cc:ef:dd:41:32:a1:d7:11:0c:08:dc:b0:fa:6d:
7c:be:75:4e:7b:df:02:12:b7:b7:f9:67:b7:16:5a:
02:21:b7:fa:6d:86:4b:46:48:c5:00:68:11:83:2b:
52:f1:d2:8c:6c:3c:e6:9a:d5:f0:aa:d9:34:74:48:
b9:e5:0d:73:78:db:fa:3b:61:34:e0:a1:08:9f:40:
d1:f6:f3:ec:81:b0:bc:b1:cb:34:d6:74:93:e1:17:
7e:2f:14:6c:ac:50:04:63:0d:af:a5:90:b4:96:69:
54:07:3e:37:12:ed:a2:8a:0e:8a:68:36:59:95:99:
83:76:39:7d:49:6f:9e:44:f2:7b:7c:17:fb:bf:da:
dd:2f:58:d0:2e:b8:88:ce:b4:87:22:0b:c4:98:7f:
89:94:7c:36:dd:44:b6:db:78:da:34:06:83:42:6c:
f1:dd:cd:6e:c1:81:de:ec:be:c7:c3:ba:c3:77:03:
33:ec:78:fc:74:c6:22:1f:6e:88:7b:8b:ff:6b:c5:
ea:64:80:19:3c:7c:83:a9:b0:a3:64:7f:4f:49:23:
1b:7a:e3:69:92:1f:d8:7e:a6:13:52:5c:8b:36:20:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:08:24:93:62:25:0B:7D:84:EC:E5:11:96:AF:FE:72:4E:E3:DC:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KQgkk2IlC32E7OURlq_-ck7j3GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:73:61:3c:f2:24:15:13:db:7b:b6:f9:06:b3:a5:59:6f:0b:
3c:8a:ab:dc:bc:7f:a7:e9:3a:b1:da:34:2c:b7:0b:3b:a9:b4:
87:93:df:07:7a:a3:76:20:de:9a:8f:33:63:76:cb:bc:d0:3d:
44:ac:a5:b3:fd:dc:dc:cf:c9:96:9e:3e:3d:c6:ab:81:84:50:
d9:6d:41:db:9f:82:26:2b:90:3d:69:64:3e:78:15:83:5c:bb:
a1:7d:5b:3b:34:4d:13:a2:66:93:24:05:17:0b:11:32:1d:f8:
5e:33:5f:7a:9b:35:f4:c9:30:6a:b4:94:06:99:c7:fe:06:5b:
ce:9e:a3:dd:87:56:5a:49:32:c3:af:d7:b2:c3:45:ec:e1:13:
94:ef:08:fe:19:39:ba:17:46:65:96:3f:cb:9d:16:7e:bd:6e:
e3:40:0b:1b:ca:c1:c8:57:c7:a7:ba:f8:64:32:eb:69:15:fa:
37:0f:cf:30:bd:6c:12:8e:7c:94:2c:18:a0:da:17:50:4a:76:
82:d9:63:49:89:5a:eb:12:a6:3e:44:a8:48:83:1b:8c:7c:98:
c0:04:94:db:9f:9b:90:17:e9:0f:43:d9:b5:42:4e:95:c5:77:
8c:7e:53:92:d3:68:fb:82:65:48:c7:ae:34:83:72:d4:79:6c:
49:38:4e:69
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZeNobgLeCLQjzxlqgkhd+yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE3MDcxMTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTA4MjQ5MzYyMjUwYjdkODRlY2U1MTE5NmFmZmU3MjRlZTNkYzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDzFwgVF8PGT19U7KwgpBm8Qunhd
5yoTK94q1tJ/zO/dQTKh1xEMCNyw+m18vnVOe98CEre3+We3FloCIbf6bYZLRkjF
AGgRgytS8dKMbDzmmtXwqtk0dEi55Q1zeNv6O2E04KEIn0DR9vPsgbC8scs01nST
4Rd+LxRsrFAEYw2vpZC0lmlUBz43Eu2iig6KaDZZlZmDdjl9SW+eRPJ7fBf7v9rd
L1jQLriIzrSHIgvEmH+JlHw23US223jaNAaDQmzx3c1uwYHe7L7Hw7rDdwMz7Hj8
dMYiH26Ie4v/a8XqZIAZPHyDqbCjZH9PSSMbeuNpkh/YfqYTUlyLNiAdTQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCkIJJNiJQt9hOzlEZav/nJO49xlMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvS1Fna2sySWxDMzJFN09VUmxxXy1jazdqM0dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIBzYTzyJBUT23u2+Qaz
pVlvCzyKq9y8f6fpOrHaNCy3CzuptIeT3wd6o3Yg3pqPM2N2y7zQPUSspbP93NzP
yZaePj3Gq4GEUNltQdufgiYrkD1pZD54FYNcu6F9Wzs0TROiZpMkBRcLETId+F4z
X3qbNfTJMGq0lAaZx/4GW86eo92HVlpJMsOv17LDRezhE5TvCP4ZOboXRmWWP8ud
Fn69buNACxvKwchXx6e6+GQy62kV+jcPzzC9bBKOfJQsGKDaF1BKdoLZY0mJWusS
pj5EqEiDG4x8mMAElNufm5AX6Q9D2bVCTpXFd4x+U5LTaPuCZUjHrjSDctR5bEk4
Tmk=
-----END CERTIFICATE-----
Generated at Thu Jun 12 10:28:26 2025 by rpki-client