Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K-NKhiyB4Cu9i3ga40MjhdOy3Ps.roa
File: K-NKhiyB4Cu9i3ga40MjhdOy3Ps.roa (raw, json)
Hash identifier: x2S4lZVLHY89HC6gyggxtYZpp7IlMj4musb7uiMiBGA=
Subject key identifier: 2B:E3:4A:86:2C:81:E0:2B:BD:8B:78:1A:E3:43:23:85:D3:B2:DC:FB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018594B92D74C9555CA4A4B549AEFCE55BB2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K-NKhiyB4Cu9i3ga40MjhdOy3Ps.roa
Signing time: Mon 09 Jan 2023 04:10:41 +0000
ROA not before: Mon 09 Jan 2023 04:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:94:b9:2d:74:c9:55:5c:a4:a4:b5:49:ae:fc:e5:5b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 9 04:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2be34a862c81e02bbd8b781ae3432385d3b2dcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e6:69:78:20:81:9a:98:3a:b1:a3:7f:a1:10:
3f:d9:80:70:62:fb:bb:37:00:c8:f8:5f:b3:c4:41:
c3:20:24:3f:40:d1:1d:b7:a0:d2:2d:49:b9:19:18:
7c:ba:bb:9c:39:0b:43:30:1a:39:01:f0:1b:f1:63:
4f:d9:45:1c:d7:c3:df:ae:a1:a5:c8:21:0a:97:af:
65:62:ea:14:d6:25:9a:19:92:aa:00:64:3e:99:71:
73:2b:93:b5:61:21:98:fe:9a:7b:6f:2c:b1:f9:99:
56:59:ca:3c:46:b2:f7:8d:e2:d7:4b:fe:52:45:58:
fb:5a:28:0a:00:c9:35:46:d7:a9:0c:49:69:8a:03:
75:0f:93:13:be:19:87:cc:ed:74:6d:45:fa:6c:45:
79:20:07:5b:46:2a:b2:97:21:e4:d7:d8:6f:53:63:
69:fa:2e:1a:cf:98:d0:32:86:fa:00:cc:ed:29:9c:
db:4d:ca:90:dd:22:72:cb:e4:67:29:13:94:45:b2:
c9:e3:1c:cc:3a:67:90:5a:68:53:a5:0c:42:d0:d2:
81:64:2b:13:cd:cd:5a:7b:5d:17:fc:df:ad:0f:ab:
1d:63:50:b7:13:20:ce:94:e5:43:24:47:7a:a5:00:
c0:02:15:29:4b:94:9e:e0:49:58:05:4b:32:76:6c:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E3:4A:86:2C:81:E0:2B:BD:8B:78:1A:E3:43:23:85:D3:B2:DC:FB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K-NKhiyB4Cu9i3ga40MjhdOy3Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:d9:82:f7:f7:73:9d:7d:28:e7:f4:52:72:f9:70:c9:97:50:
ae:55:d7:63:ff:60:c6:76:4e:3b:5c:3e:cf:f9:8b:54:17:8f:
c6:94:ba:01:cf:84:f3:46:6d:f8:cb:ff:38:4f:23:0c:2c:11:
4e:4b:19:fb:99:24:4e:17:70:68:f8:1a:b1:7b:ea:ec:10:1b:
38:a0:aa:69:76:e4:11:ee:21:60:40:01:d4:f9:61:b3:91:bd:
02:fe:98:7a:19:15:04:86:dd:33:f0:ab:0a:c5:b8:36:33:c2:
3e:cc:db:8e:56:75:b2:43:11:58:15:c7:f4:f6:d2:19:e7:7c:
c9:3b:8b:bb:b0:4f:1b:c2:d9:0e:0a:ad:9f:7b:fb:b0:1b:ba:
8a:01:bf:6c:ac:37:94:92:4a:2f:71:76:d2:d5:0b:3f:3a:8c:
12:4f:fa:ec:aa:56:43:1b:df:86:2f:68:ad:73:36:02:a2:d8:
96:0e:76:dd:1d:d5:71:24:79:19:54:e3:e3:3b:23:ba:e0:75:
b2:90:9f:b0:f4:bb:e3:10:88:f6:14:03:f4:91:33:3d:7a:9c:
25:cf:f0:a2:aa:1f:8d:d9:b5:77:ae:98:64:10:3c:58:19:e2:
43:11:91:02:90:78:6d:07:82:13:b1:24:48:9a:ba:b0:1d:21:
5b:df:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:08:02 2025 by rpki-client