Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KjrKUddunrREAQCaYwLEnPg_KzU.roa
File: KjrKUddunrREAQCaYwLEnPg_KzU.roa (raw, json)
Hash identifier: gen/BmU8e1Y9sLzzH8tYk8zUh+xftl/VMME1ScABN+U=
Subject key identifier: 2A:3A:CA:51:D7:6E:9E:B4:44:01:00:9A:63:02:C4:9C:F8:3F:2B:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185D43CE19DDEC42FF7197396288BD6A43E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KjrKUddunrREAQCaYwLEnPg_KzU.roa
Signing time: Sat 21 Jan 2023 12:10:37 +0000
ROA not before: Sat 21 Jan 2023 12:10:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d4:3c:e1:9d:de:c4:2f:f7:19:73:96:28:8b:d6:a4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 21 12:10:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a3aca51d76e9eb44401009a6302c49cf83f2b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:a0:56:cf:18:62:d6:b3:5e:5a:bb:0e:32:
e1:f4:93:9a:86:1e:e8:33:a0:53:ab:80:6b:03:dc:
3a:5a:4b:55:e4:21:c9:78:42:41:11:ad:bd:49:8c:
78:be:3d:c3:ba:6d:46:97:ff:15:86:cd:d9:ef:13:
3b:8c:a2:05:56:19:f7:2b:42:4b:e6:6b:b4:ff:a3:
d0:7e:cc:c0:e4:7f:ad:30:14:85:1d:28:a5:5e:7e:
dd:50:97:02:72:09:6e:15:9b:c3:25:27:4e:1b:0f:
cb:26:31:3d:d7:b3:86:99:1c:73:3a:b0:ba:7d:c9:
1c:91:fa:1d:be:cb:99:d0:8f:17:f0:7f:b0:f7:3f:
57:47:f2:1a:a8:a5:e7:db:14:3e:9a:38:7a:03:ac:
ed:13:90:45:e1:92:32:d7:82:c3:85:4c:38:7c:1a:
83:a0:41:14:36:b2:d2:4b:02:94:e3:bc:aa:c6:4f:
5e:b4:dd:78:b0:44:18:62:20:2a:c2:95:32:c2:3a:
1a:89:4e:88:bc:80:24:b4:d5:94:9e:a2:cf:ee:77:
1b:4b:c2:32:ca:23:66:35:d5:d5:22:8a:1f:7e:bb:
fc:0f:b6:12:f2:a6:eb:a7:e5:d5:71:2f:61:ef:b9:
77:15:81:cc:a1:67:46:96:6c:a6:3e:d7:28:91:77:
33:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3A:CA:51:D7:6E:9E:B4:44:01:00:9A:63:02:C4:9C:F8:3F:2B:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KjrKUddunrREAQCaYwLEnPg_KzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:a5:b5:7e:c5:de:92:0c:e3:10:c0:a4:38:53:81:6c:2a:31:
0d:95:2e:ba:7b:5d:b4:90:c9:8f:28:d7:21:dd:1b:cb:6c:48:
d4:aa:0e:50:67:cc:9a:c7:a6:0f:75:27:29:69:36:b7:04:e6:
b2:3e:0b:48:d4:8b:c1:a9:89:fe:5e:9d:05:31:28:33:b1:9b:
fa:bf:fa:8c:4f:98:82:c2:79:d3:da:8c:2b:65:9a:a6:83:cb:
fb:c6:40:cf:03:02:fa:16:22:d6:33:1a:34:64:cb:77:d2:29:
46:42:00:5c:fd:8f:52:80:09:1b:27:bf:e1:ba:c9:c7:f1:dd:
9d:85:bd:ee:71:34:38:15:dd:96:75:02:f2:9b:71:c1:f9:11:
43:7a:6a:0d:a1:c6:fb:ff:71:a1:47:cb:e5:1f:e0:3e:fa:e5:
cb:7a:a8:ec:d7:40:8a:78:d5:a6:36:b1:77:f3:6f:b3:88:6a:
8a:ad:60:7c:2a:9d:0f:9c:30:4e:12:d1:e0:0b:96:a4:6e:cd:
be:6f:42:f8:1f:b9:29:b1:5a:e6:73:73:a9:cb:5a:b8:da:50:
5f:7e:6a:98:44:7a:1b:bd:db:55:49:29:33:6d:17:f9:8a:5e:
13:a8:56:5a:05:5f:fb:83:b9:ee:a2:6a:26:8a:d6:cb:64:15:
aa:1c:45:f6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXUPOGd3sQv9xlzliiL1qQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTIxMTIxMDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTNhY2E1MWQ3NmU5ZWI0NDQwMTAwOWE2MzAyYzQ5Y2Y4M2YyYjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmugVs8YYtazXlq7DjLh9JOahh7o
M6BTq4BrA9w6WktV5CHJeEJBEa29SYx4vj3Dum1Gl/8Vhs3Z7xM7jKIFVhn3K0JL
5mu0/6PQfszA5H+tMBSFHSilXn7dUJcCcgluFZvDJSdOGw/LJjE917OGmRxzOrC6
fckckfodvsuZ0I8X8H+w9z9XR/IaqKXn2xQ+mjh6A6ztE5BF4ZIy14LDhUw4fBqD
oEEUNrLSSwKU47yqxk9etN14sEQYYiAqwpUywjoaiU6IvIAktNWUnqLP7ncbS8Iy
yiNmNdXVIooffrv8D7YS8qbrp+XVcS9h77l3FYHMoWdGlmymPtcokXczewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCo6ylHXbp60RAEAmmMCxJz4Pys1MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvS2pyS1VkZHVuclJFQVFDYVl3TEVuUGdfS3pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEiltX7F3pIM4xDApDhT
gWwqMQ2VLrp7XbSQyY8o1yHdG8tsSNSqDlBnzJrHpg91JylpNrcE5rI+C0jUi8Gp
if5enQUxKDOxm/q/+oxPmILCedPajCtlmqaDy/vGQM8DAvoWItYzGjRky3fSKUZC
AFz9j1KACRsnv+G6ycfx3Z2Fve5xNDgV3ZZ1AvKbccH5EUN6ag2hxvv/caFHy+Uf
4D765ct6qOzXQIp41aY2sXfzb7OIaoqtYHwqnQ+cME4S0eALlqRuzb5vQvgfuSmx
WuZzc6nLWrjaUF9+aphEehu921VJKTNtF/mKXhOoVloFX/uDue6iaiaK1stkFaoc
RfY=
-----END CERTIFICATE-----
Generated at Mon Jun 9 05:27:32 2025 by rpki-client