Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kopQ7wlPBjs4CXCuomFnU1wO_ZY.roa
File: kopQ7wlPBjs4CXCuomFnU1wO_ZY.roa (raw, json)
Hash identifier: WVe0j4wAznLnvaCMaj39Jgyo9nhfbbP+OfA4cIxO+pY=
Subject key identifier: 92:8A:50:EF:09:4F:06:3B:38:09:70:AE:A2:61:67:53:5C:0E:FD:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187DF97D9313F0D55B103A28C3FD352E8E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kopQ7wlPBjs4CXCuomFnU1wO_ZY.roa
Signing time: Wed 03 May 2023 03:11:23 +0000
ROA not before: Wed 03 May 2023 03:11:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:df:97:d9:31:3f:0d:55:b1:03:a2:8c:3f:d3:52:e8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 03:11:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=928a50ef094f063b380970aea26167535c0efd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:9b:fa:47:62:c3:68:83:d2:54:1c:a0:e5:
a7:cc:e8:35:67:5a:76:1e:5e:73:00:e9:e3:ec:af:
35:3d:07:2a:5a:2d:36:6a:25:2a:59:d5:94:6d:f7:
06:80:9e:2e:33:76:b4:fb:2f:11:de:bf:86:6a:c0:
6f:b3:0a:e3:12:19:26:d8:9d:f7:18:fe:dd:6d:08:
d1:4a:ca:5e:80:cd:30:ff:d8:8f:13:e0:41:e8:5f:
86:9d:14:1b:86:48:67:b6:24:aa:07:41:bf:6c:f5:
d1:88:07:91:79:cf:e0:73:da:91:55:43:94:41:32:
74:53:ba:8f:8d:19:cb:6f:57:f2:5a:ce:42:22:29:
e1:b9:4d:c4:57:3c:e2:c8:a0:5e:9f:14:bd:c0:fd:
b3:dc:b2:e4:d7:b5:c6:ce:3e:f0:ef:1d:49:25:f6:
10:ca:f3:49:66:b1:34:5d:e5:12:77:17:00:c1:ec:
7d:54:15:6c:a8:f8:98:f6:1c:a2:91:68:f5:a5:3f:
a8:32:23:11:16:cb:15:7f:e7:10:75:75:9f:7a:ad:
94:16:c9:43:51:92:26:95:a2:73:3d:97:e4:3b:14:
93:63:dd:a0:50:b8:1c:37:e4:c1:c6:1f:16:50:af:
af:88:25:57:32:7a:0e:12:af:04:09:73:6f:fa:c5:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8A:50:EF:09:4F:06:3B:38:09:70:AE:A2:61:67:53:5C:0E:FD:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kopQ7wlPBjs4CXCuomFnU1wO_ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:bc:39:c0:27:03:58:9b:08:ca:52:30:2c:ae:35:bc:98:d7:
55:db:b2:56:48:a3:32:56:31:80:f1:db:89:c9:d8:5a:4e:43:
08:d5:f1:9a:8f:fa:ac:32:2f:ce:65:c4:f1:0a:4b:31:24:eb:
82:af:28:23:6b:7e:4a:c7:2c:48:cd:97:cd:f3:e4:a6:d5:d0:
ab:44:cd:f7:aa:63:2e:04:ef:ff:a3:8e:11:86:65:eb:ec:4c:
f2:21:6b:a9:31:c8:fb:95:3c:22:55:8e:59:a6:76:46:f2:92:
8c:f7:5c:87:0e:40:db:65:32:29:93:35:c6:c1:04:b3:a7:e2:
e3:a1:fa:a8:59:6a:05:99:6b:d7:bf:2b:7b:72:6d:3d:c3:00:
90:24:6f:9a:d0:b4:96:79:b6:4e:2f:03:1a:f4:87:50:c4:de:
f2:b1:b2:58:3d:ec:42:81:6a:84:64:4b:f2:1b:59:38:39:86:
78:a4:d6:12:ac:0d:d7:29:fd:4f:b0:41:60:61:98:af:c5:e6:
94:74:c5:6d:3c:ae:72:d2:09:84:46:3c:43:c4:ac:2c:19:1a:
ee:e5:83:e9:98:84:ca:a4:2a:dd:6c:67:31:6d:25:f6:fc:2f:
7c:81:dc:63:57:e3:89:8d:06:ed:61:9f:5d:d4:3e:a9:30:52:
35:ea:57:14
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYffl9kxPw1VsQOijD/TUujkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTAzMDMxMTIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjhhNTBlZjA5NGYwNjNiMzgwOTcwYWVhMjYxNjc1MzVjMGVmZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRyb+kdiw2iD0lQcoOWnzOg1Z1p2
Hl5zAOnj7K81PQcqWi02aiUqWdWUbfcGgJ4uM3a0+y8R3r+GasBvswrjEhkm2J33
GP7dbQjRSspegM0w/9iPE+BB6F+GnRQbhkhntiSqB0G/bPXRiAeRec/gc9qRVUOU
QTJ0U7qPjRnLb1fyWs5CIinhuU3EVzziyKBenxS9wP2z3LLk17XGzj7w7x1JJfYQ
yvNJZrE0XeUSdxcAwex9VBVsqPiY9hyikWj1pT+oMiMRFssVf+cQdXWfeq2UFslD
UZImlaJzPZfkOxSTY92gULgcN+TBxh8WUK+viCVXMnoOEq8ECXNv+sXgtwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJKKUO8JTwY7OAlwrqJhZ1NcDv2WMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEva29wUTd3bFBCanM0Q1hDdW9tRm5VMXdPX1pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKK8OcAnA1ibCMpSMCyu
NbyY11XbslZIozJWMYDx24nJ2FpOQwjV8ZqP+qwyL85lxPEKSzEk64KvKCNrfkrH
LEjNl83z5KbV0KtEzfeqYy4E7/+jjhGGZevsTPIha6kxyPuVPCJVjlmmdkbykoz3
XIcOQNtlMimTNcbBBLOn4uOh+qhZagWZa9e/K3tybT3DAJAkb5rQtJZ5tk4vAxr0
h1DE3vKxslg97EKBaoRkS/IbWTg5hnik1hKsDdcp/U+wQWBhmK/F5pR0xW08rnLS
CYRGPEPErCwZGu7lg+mYhMqkKt1sZzFtJfb8L3yB3GNX44mNBu1hn13UPqkwUjXq
VxQ=
-----END CERTIFICATE-----
Generated at Tue Jun 10 10:06:42 2025 by rpki-client