Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k0-BuaMiM94YHu4RjuJbcgHh9K4.roa
File: k0-BuaMiM94YHu4RjuJbcgHh9K4.roa (raw, json)
Hash identifier: IPzxbDf6wLRoMqWgFFDDiGqHgTGhOItIb2a2KBQJeLM=
Subject key identifier: 93:4F:81:B9:A3:22:33:DE:18:1E:EE:11:8E:E2:5B:72:01:E1:F4:AE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187150B7C3C0C096CEAD7858F4158203E51
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k0-BuaMiM94YHu4RjuJbcgHh9K4.roa
Signing time: Fri 24 Mar 2023 19:14:46 +0000
ROA not before: Fri 24 Mar 2023 19:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:15:0b:7c:3c:0c:09:6c:ea:d7:85:8f:41:58:20:3e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 19:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=934f81b9a32233de181eee118ee25b7201e1f4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:53:08:7e:38:68:c0:a6:2c:99:2e:83:03:
55:98:c3:8e:c2:4b:3b:cc:2f:c5:e7:32:75:74:9b:
9b:a3:05:83:ad:9b:78:79:08:59:71:71:2d:7d:c3:
cf:8d:65:8a:0d:28:46:3c:49:15:83:3d:c2:3b:87:
a5:5a:d1:ef:47:55:ba:25:2b:51:b4:92:c1:09:44:
81:bc:24:aa:21:98:c9:6a:0f:a8:0d:8f:58:b6:b8:
ce:af:6a:44:e9:27:4d:22:5e:88:92:2d:69:8c:b7:
46:94:62:7c:d4:4f:b1:83:e9:9e:54:eb:d3:34:16:
bc:b6:bd:d0:f3:dc:0c:67:b2:87:56:2f:ab:b7:59:
90:ec:96:5f:ba:7c:da:db:d6:b0:6c:dd:f6:8c:67:
cf:7e:f2:55:86:a0:5d:cb:b0:55:c7:36:55:8b:f5:
d1:18:7f:e5:17:be:6d:6f:88:3a:16:a2:88:ed:35:
1d:b0:c4:6b:72:31:67:41:33:de:ed:db:34:1b:c5:
f1:15:26:b0:c1:2a:bf:d4:63:52:8e:2b:73:e3:8c:
2e:81:4b:61:02:b5:52:c0:3c:8d:8b:76:40:73:27:
65:1a:3c:21:4a:ca:cf:6b:82:37:a8:bd:65:49:8e:
54:c0:68:e5:9b:2a:e4:46:32:67:71:75:da:32:bf:
5c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4F:81:B9:A3:22:33:DE:18:1E:EE:11:8E:E2:5B:72:01:E1:F4:AE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k0-BuaMiM94YHu4RjuJbcgHh9K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:c0:d6:9c:40:05:36:33:d3:2b:a7:00:ca:d1:64:2d:c3:2d:
de:9c:1d:26:18:d1:7b:57:f4:02:05:84:8e:09:d5:b7:bf:5f:
a1:39:6e:7d:7c:e1:18:7d:ec:27:06:6c:21:bc:54:41:93:6e:
f2:89:e2:e0:38:9c:55:a2:4f:f8:4b:d3:e8:a2:32:37:96:50:
2d:4b:c0:f9:03:f5:02:90:bd:8f:97:cf:66:b4:3c:55:d2:ac:
b3:69:ab:21:d7:71:c4:69:94:c5:6b:ee:d7:58:e6:62:cd:a2:
43:56:b5:3e:04:84:58:7e:98:60:8a:e0:04:d8:f8:bf:67:0f:
fa:65:ef:27:0e:2b:42:6f:34:aa:c6:ed:82:2d:d9:3e:2a:87:
22:88:31:46:98:50:93:1e:de:32:1d:66:98:99:6e:02:ad:fe:
d0:1b:73:51:3e:bc:b8:e2:d4:e0:ff:55:82:b6:19:2e:ae:81:
c6:cd:93:4a:ed:01:c0:ec:c1:3a:be:71:ad:5b:24:f0:97:47:
f0:59:30:a8:70:95:a2:47:75:7b:10:61:cf:fd:91:6e:97:eb:
a5:b7:66:17:fd:8b:f7:d9:75:1b:8b:13:24:da:70:f9:72:b0:
fa:4f:a8:7e:ae:3e:a4:85:09:3d:fa:2e:05:e4:8a:22:ab:3f:
63:c4:36:53
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcVC3w8DAls6teFj0FYID5RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzI0MTkxNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzRmODFiOWEzMjIzM2RlMTgxZWVlMTE4ZWUyNWI3MjAxZTFmNGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHJTCH44aMCmLJkugwNVmMOOwks7
zC/F5zJ1dJubowWDrZt4eQhZcXEtfcPPjWWKDShGPEkVgz3CO4elWtHvR1W6JStR
tJLBCUSBvCSqIZjJag+oDY9YtrjOr2pE6SdNIl6Iki1pjLdGlGJ81E+xg+meVOvT
NBa8tr3Q89wMZ7KHVi+rt1mQ7JZfunza29awbN32jGfPfvJVhqBdy7BVxzZVi/XR
GH/lF75tb4g6FqKI7TUdsMRrcjFnQTPe7ds0G8XxFSawwSq/1GNSjitz44wugUth
ArVSwDyNi3ZAcydlGjwhSsrPa4I3qL1lSY5UwGjlmyrkRjJncXXaMr9cwwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJNPgbmjIjPeGB7uEY7iW3IB4fSuMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvazAtQnVhTWlNOTRZSHU0Ump1SmJjZ0hoOUs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADLA1pxABTYz0yunAMrR
ZC3DLd6cHSYY0XtX9AIFhI4J1be/X6E5bn184Rh97CcGbCG8VEGTbvKJ4uA4nFWi
T/hL0+iiMjeWUC1LwPkD9QKQvY+Xz2a0PFXSrLNpqyHXccRplMVr7tdY5mLNokNW
tT4EhFh+mGCK4ATY+L9nD/pl7ycOK0JvNKrG7YIt2T4qhyKIMUaYUJMe3jIdZpiZ
bgKt/tAbc1E+vLji1OD/VYK2GS6ugcbNk0rtAcDswTq+ca1bJPCXR/BZMKhwlaJH
dXsQYc/9kW6X66W3Zhf9i/fZdRuLEyTacPlysPpPqH6uPqSFCT36LgXkiiKrP2PE
NlM=
-----END CERTIFICATE-----
Generated at Mon Jun 9 17:37:51 2025 by rpki-client