Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kMostVyMPI0KU0WzZFPplyzvSWA.roa
File: kMostVyMPI0KU0WzZFPplyzvSWA.roa (raw, json)
Hash identifier: Qx4LSGKIyyNofuoQjoWKzHRqjJ/JT6rPT1G6L0SHWmg=
Subject key identifier: 90:CA:2C:B5:5C:8C:3C:8D:0A:53:45:B3:64:53:E9:97:2C:EF:49:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018462808E1AA5362853DD710B246EB248ED
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kMostVyMPI0KU0WzZFPplyzvSWA.roa
Signing time: Thu 10 Nov 2022 17:05:02 +0000
ROA not before: Thu 10 Nov 2022 17:05:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:6280:84b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:62:80:8e:1a:a5:36:28:53:dd:71:0b:24:6e:b2:48:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 10 17:05:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90ca2cb55c8c3c8d0a5345b36453e9972cef4960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:15:ab:e9:ee:80:b5:aa:2c:54:30:ba:19:
d8:1c:59:4b:99:e6:78:c9:a5:9f:3b:ee:56:68:f3:
2a:ae:e7:6a:1e:30:6a:b6:7e:27:1d:f2:ba:2c:b0:
72:8e:c1:1e:a6:d0:a5:b1:20:d5:9f:b3:44:f2:0f:
37:0c:97:6f:a5:62:ae:14:eb:65:67:f8:4a:8a:d6:
68:f7:5b:27:a7:40:1b:75:64:9a:b3:d6:79:74:db:
d4:04:a4:47:cc:cd:65:f5:a5:f1:1c:13:7f:13:0a:
ae:94:d6:26:cd:81:f5:a0:af:d1:ce:5a:a4:bf:98:
d7:35:6f:93:f3:6d:51:b7:d8:ac:38:2d:9a:4d:ca:
36:b6:3e:bc:ae:90:ba:18:ef:84:75:58:40:5a:bc:
5f:ac:59:2a:23:25:be:d6:19:15:0c:d7:8a:3e:0d:
47:14:b6:6b:7d:b6:5f:d2:21:aa:6d:1b:54:7e:0d:
27:8b:e4:38:f6:c8:bc:77:5a:36:24:26:49:ba:f5:
50:1b:38:98:43:cf:d8:21:1c:10:a0:d7:88:a1:82:
6a:a1:01:14:5f:82:4d:9f:66:88:78:1b:d6:81:5c:
83:87:19:b3:6f:b0:9e:b9:9a:ff:ba:2b:d5:4f:a6:
06:b1:78:ee:56:c1:b8:1d:6c:1e:9b:4b:f8:77:12:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CA:2C:B5:5C:8C:3C:8D:0A:53:45:B3:64:53:E9:97:2C:EF:49:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kMostVyMPI0KU0WzZFPplyzvSWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:a6:c4:68:4d:a8:5d:78:3b:04:fd:28:c7:20:04:81:4a:ea:
04:56:9c:4a:41:f3:29:6c:63:1e:14:6b:ad:e9:dc:36:a7:71:
0a:e4:f6:7c:c5:f4:d4:a9:7d:b8:e6:05:e4:4b:23:29:a3:09:
f8:cf:63:af:a2:5c:e0:04:69:e9:a8:cf:b1:07:de:73:16:3f:
da:32:c9:16:7a:77:5f:0e:e4:d7:08:af:9e:d0:61:9a:37:3b:
66:76:ce:e8:57:10:31:10:d3:8c:b6:6c:1d:a2:9e:ae:89:1d:
14:9b:60:d7:68:d9:10:ad:55:e7:81:4d:15:95:a3:d6:33:3f:
27:6d:9f:a3:70:fd:67:a0:57:66:09:02:cf:75:ff:80:58:37:
f1:af:45:0e:24:c7:f9:c0:c3:f1:ae:f0:e2:a6:14:43:98:e5:
0e:ab:4a:3d:19:cb:ab:a4:8b:7c:28:2f:1b:dd:1d:2f:ed:c8:
55:5a:14:db:c8:e5:e2:2f:e1:5f:40:66:d4:88:40:89:7d:8e:
0c:f5:df:6f:8a:31:f7:9a:2d:6e:d7:13:aa:91:b0:0a:cc:69:
bc:ad:b5:01:c3:5d:e3:60:d5:81:37:99:8c:6d:ef:a3:5f:1e:
bb:26:5e:9b:9c:d1:66:28:46:74:18:65:45:06:6b:f1:b2:e0:
69:59:bc:66
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYRigI4apTYoU91xCyRuskjtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTEwMTcwNTAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGNhMmNiNTVjOGMzYzhkMGE1MzQ1YjM2NDUzZTk5NzJjZWY0OTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApigVq+nugLWqLFQwuhnYHFlLmeZ4
yaWfO+5WaPMqrudqHjBqtn4nHfK6LLByjsEeptClsSDVn7NE8g83DJdvpWKuFOtl
Z/hKitZo91snp0AbdWSas9Z5dNvUBKRHzM1l9aXxHBN/EwqulNYmzYH1oK/Rzlqk
v5jXNW+T821Rt9isOC2aTco2tj68rpC6GO+EdVhAWrxfrFkqIyW+1hkVDNeKPg1H
FLZrfbZf0iGqbRtUfg0ni+Q49si8d1o2JCZJuvVQGziYQ8/YIRwQoNeIoYJqoQEU
X4JNn2aIeBvWgVyDhxmzb7CeuZr/uivVT6YGsXjuVsG4HWwem0v4dxJIqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJDKLLVcjDyNClNFs2RT6Zcs70lgMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEva01vc3RWeU1QSTBLVTBXelpGUHBseXp2U1dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI+mxGhNqF14OwT9KMcg
BIFK6gRWnEpB8ylsYx4Ua63p3DancQrk9nzF9NSpfbjmBeRLIymjCfjPY6+iXOAE
aemoz7EH3nMWP9oyyRZ6d18O5NcIr57QYZo3O2Z2zuhXEDEQ04y2bB2inq6JHRSb
YNdo2RCtVeeBTRWVo9YzPydtn6Nw/WegV2YJAs91/4BYN/GvRQ4kx/nAw/Gu8OKm
FEOY5Q6rSj0Zy6uki3woLxvdHS/tyFVaFNvI5eIv4V9AZtSIQIl9jgz132+KMfea
LW7XE6qRsArMabyttQHDXeNg1YE3mYxt76NfHrsmXpuc0WYoRnQYZUUGa/Gy4GlZ
vGY=
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:55:50 2025 by rpki-client