Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KcEFSPi5R8QPsSZuLmGXPd-xPHM.roa
File: KcEFSPi5R8QPsSZuLmGXPd-xPHM.roa (raw, json)
Hash identifier: YwPQOIycF9gH2bcL0aXaZqmxzaOa6Yh0O3OacFUslP4=
Subject key identifier: 29:C1:05:48:F8:B9:47:C4:0F:B1:26:6E:2E:61:97:3D:DF:B1:3C:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183CEEDD6651F675048D3964060FA410F93
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KcEFSPi5R8QPsSZuLmGXPd-xPHM.roa
Signing time: Thu 13 Oct 2022 01:20:36 +0000
ROA not before: Thu 13 Oct 2022 01:20:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ce:ed:d6:65:1f:67:50:48:d3:96:40:60:fa:41:0f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 13 01:20:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29c10548f8b947c40fb1266e2e61973ddfb13c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cb:58:59:c0:57:02:ca:5e:65:e0:83:61:e3:
10:1a:80:cd:52:48:7a:b3:5b:6c:d2:94:47:89:4c:
a6:eb:03:0c:8e:81:ef:cf:2e:a8:e1:57:d1:e3:8d:
e1:d0:92:a1:40:52:86:92:b5:a3:ef:97:52:e7:90:
d2:c0:2b:cc:37:1e:8a:fe:07:80:0c:d8:54:eb:3a:
a8:f6:8c:e5:2c:60:48:87:e7:d0:79:c0:a9:56:95:
e2:2b:18:1b:58:c6:cf:8b:d3:5c:f8:63:24:8d:ed:
d1:ff:27:eb:89:b1:3f:c1:2b:23:ec:ea:d9:fd:49:
98:6d:f6:e7:98:01:26:49:55:b9:c6:d7:bd:fa:b8:
09:20:50:fd:63:29:e9:93:2a:a8:ca:96:fa:64:c6:
eb:e6:b0:30:44:8b:3b:0f:62:fc:3e:97:b9:a1:fe:
ab:85:29:9f:3b:0f:9a:1c:ce:d2:f3:2e:c8:06:06:
cb:dd:14:7d:44:33:82:0c:ef:ff:f9:0c:1b:0f:31:
e2:c6:d0:b4:44:0b:b6:ac:c1:bc:6b:91:36:2c:66:
e2:2c:4d:52:21:98:c3:75:0b:73:61:d4:60:0c:75:
60:2c:a3:7e:29:6c:9d:74:a1:a0:ab:fa:c8:d1:82:
32:37:68:22:49:ec:ba:16:f1:48:5e:af:e0:7f:84:
e7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C1:05:48:F8:B9:47:C4:0F:B1:26:6E:2E:61:97:3D:DF:B1:3C:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KcEFSPi5R8QPsSZuLmGXPd-xPHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:96:95:ce:e3:f7:1e:a4:41:f5:f1:71:67:f3:34:cc:57:7f:
c1:fc:e9:25:4e:5b:fe:68:fd:ee:3b:a7:fa:9a:65:73:09:65:
9d:3f:a4:af:1e:90:ad:75:d9:b8:f9:69:71:09:12:ca:a3:b9:
e4:ac:df:6e:99:78:f7:01:2d:5d:cf:9c:ad:25:fe:0b:25:91:
fc:cc:c3:ed:11:57:40:be:03:3a:74:2b:93:64:66:e4:fc:b9:
a6:53:49:42:9b:ee:6f:32:05:c8:75:e0:da:29:ad:95:76:5f:
4b:38:6a:49:3e:85:95:f9:07:f3:9e:4d:ed:43:21:bb:69:ae:
51:27:59:8c:74:dd:dd:2d:12:3f:e4:a3:90:10:f5:91:14:d3:
22:aa:6a:9b:3b:13:8f:93:0a:3d:4b:2f:cf:d0:90:aa:0f:27:
45:88:a9:e8:d6:ba:a7:f1:9f:fd:46:e8:c6:41:07:83:ff:d9:
db:a4:d7:3f:c3:57:c1:0d:be:0c:be:32:79:e1:d9:71:be:36:
49:1e:c0:25:30:5d:d6:b7:cc:0d:a5:46:bf:35:f0:c3:65:d8:
71:20:9a:da:25:0f:70:13:93:3c:44:4e:43:15:e8:a5:84:60:
6a:0e:c6:9c:d7:70:73:b8:cb:46:09:ab:49:91:e7:18:a4:ef:
70:d6:a5:07
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYPO7dZlH2dQSNOWQGD6QQ+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDEzMDEyMDM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWMxMDU0OGY4Yjk0N2M0MGZiMTI2NmUyZTYxOTczZGRmYjEzYzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgctYWcBXAspeZeCDYeMQGoDNUkh6
s1ts0pRHiUym6wMMjoHvzy6o4VfR443h0JKhQFKGkrWj75dS55DSwCvMNx6K/geA
DNhU6zqo9ozlLGBIh+fQecCpVpXiKxgbWMbPi9Nc+GMkje3R/yfribE/wSsj7OrZ
/UmYbfbnmAEmSVW5xte9+rgJIFD9Yynpkyqoypb6ZMbr5rAwRIs7D2L8Ppe5of6r
hSmfOw+aHM7S8y7IBgbL3RR9RDOCDO//+QwbDzHixtC0RAu2rMG8a5E2LGbiLE1S
IZjDdQtzYdRgDHVgLKN+KWyddKGgq/rI0YIyN2giSey6FvFIXq/gf4Tn0QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCnBBUj4uUfED7Embi5hlz3fsTxzMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvS2NFRlNQaTVSOFFQc1NadUxtR1hQZC14UEhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACOWlc7j9x6kQfXxcWfz
NMxXf8H86SVOW/5o/e47p/qaZXMJZZ0/pK8ekK112bj5aXEJEsqjueSs326ZePcB
LV3PnK0l/gslkfzMw+0RV0C+Azp0K5NkZuT8uaZTSUKb7m8yBch14NoprZV2X0s4
akk+hZX5B/OeTe1DIbtprlEnWYx03d0tEj/ko5AQ9ZEU0yKqaps7E4+TCj1LL8/Q
kKoPJ0WIqejWuqfxn/1G6MZBB4P/2duk1z/DV8ENvgy+Mnnh2XG+NkkewCUwXda3
zA2lRr818MNl2HEgmtolD3ATkzxETkMV6KWEYGoOxpzXcHO4y0YJq0mR5xik73DW
pQc=
-----END CERTIFICATE-----
Generated at Tue Jun 10 10:05:36 2025 by rpki-client