Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-KbptSxph4e0JlhFncBZoz1sAYY.roa
File: 1-KbptSxph4e0JlhFncBZoz1sAYY.roa (raw, json)
Hash identifier: D1fDZ7Cey0OTCyiIyRCI7l+H9qn4FUKYfFyxIxJzc1g=
Subject key identifier: F8:A6:E9:B5:2C:69:87:87:B4:26:58:45:9D:C0:59:A3:3D:6C:01:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873FBEFF36BEC84B119616EFB90D42AA28
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-KbptSxph4e0JlhFncBZoz1sAYY.roa
Signing time: Sun 02 Apr 2023 02:14:54 +0000
ROA not before: Sun 02 Apr 2023 02:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3f:be:ff:36:be:c8:4b:11:96:16:ef:b9:0d:42:aa:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 02:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8a6e9b52c698787b42658459dc059a33d6c0186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:8a:e7:33:ef:d8:98:1c:9e:d7:6d:52:b7:
6c:00:62:43:52:65:0d:e3:43:3c:4b:5f:ac:ca:33:
e8:e6:0c:44:ec:99:b3:13:b7:ec:56:23:d8:f3:10:
4c:82:a9:ae:cc:a3:30:c1:c8:f8:0f:99:07:f1:38:
24:86:ae:86:e3:68:41:42:5e:3b:97:83:3e:84:89:
24:b2:11:8e:5b:f7:d8:21:51:c5:a7:8d:df:cf:47:
12:a0:75:69:b4:cc:7e:5f:fe:7f:9c:13:70:58:52:
a5:d7:2e:cc:34:ee:29:7f:6d:92:f7:91:03:27:ee:
46:22:20:dc:19:9a:59:38:cd:10:76:4d:df:00:a4:
93:e5:09:f1:c3:03:ae:2b:42:72:46:bf:10:64:0d:
65:c4:e1:85:c5:43:83:4a:4f:68:27:16:da:ed:2a:
76:c4:e0:b9:56:cb:ef:83:c7:92:b6:77:b2:14:9a:
36:ec:12:1b:c3:8b:26:a0:07:4d:51:6c:23:d5:d8:
1e:9b:e6:e9:6d:e9:a2:4d:3d:94:0f:88:44:df:90:
bf:cd:dc:37:5f:82:e0:eb:4c:e3:a0:3f:77:38:e9:
d9:b0:d8:0e:2b:12:fb:bd:8e:1d:6e:58:5e:a9:86:
4e:f3:f7:1d:c9:3a:c5:9c:6c:b1:7d:44:cd:67:7c:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A6:E9:B5:2C:69:87:87:B4:26:58:45:9D:C0:59:A3:3D:6C:01:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-KbptSxph4e0JlhFncBZoz1sAYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:75:56:6b:00:b3:f1:eb:20:56:4d:cb:6b:36:c8:f0:11:a2:
78:65:19:f6:70:29:88:90:b5:05:45:31:d9:68:21:46:43:24:
a7:7b:bb:f9:b5:e1:58:9b:39:c3:58:ea:91:21:8b:78:05:c8:
0f:d2:bd:5a:54:4e:10:cd:bc:53:1c:f4:b4:34:2a:59:70:dd:
27:6e:5b:d8:c1:23:e9:05:58:69:a2:ad:7e:ab:ec:2b:c0:fa:
fc:e4:0e:18:45:82:bb:b7:a8:7b:fa:c9:13:9c:45:00:8d:97:
ab:a1:3e:c0:20:95:e5:fc:2e:8f:80:3f:d0:79:a0:20:91:6f:
96:0a:15:6f:d3:9b:76:35:bc:ed:32:7d:5c:94:d0:ee:ab:4e:
87:ec:88:2f:59:39:03:8f:ed:07:d9:db:1e:cf:48:66:49:99:
79:ca:1a:7e:9a:ef:84:94:90:9b:58:57:d9:c1:95:93:1d:61:
1a:95:15:cc:c7:78:94:50:39:c4:82:10:72:4a:7a:40:7c:0b:
a7:fd:e1:31:97:64:7a:eb:be:be:ad:c7:3e:db:c5:ac:98:11:
ec:65:5d:0c:1b:e4:9d:46:65:1e:32:1e:81:17:ec:76:94:b0:
7d:85:7f:a3:d6:a6:e6:4b:94:fc:2b:ec:03:f4:ae:da:64:1b:
96:7a:e6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:33:06 2025 by rpki-client