Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K0HrH_T_a6HXB7gKZYz2SnZfcYU.roa
File: K0HrH_T_a6HXB7gKZYz2SnZfcYU.roa (raw, json)
Hash identifier: 3e6IeoNwUvVfFX3lijy0SWFGOM+EQ+LPCogQBhm4A6Q=
Subject key identifier: 2B:41:EB:1F:F4:FF:6B:A1:D7:07:B8:0A:65:8C:F6:4A:76:5F:71:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018571BD7E1032D60FEFFC090F55A53770AF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K0HrH_T_a6HXB7gKZYz2SnZfcYU.roa
Signing time: Mon 02 Jan 2023 09:08:42 +0000
ROA not before: Mon 02 Jan 2023 09:08:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:bd:7e:10:32:d6:0f:ef:fc:09:0f:55:a5:37:70:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 2 09:08:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b41eb1ff4ff6ba1d707b80a658cf64a765f7185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:42:9f:a6:1f:41:ef:36:e9:a2:32:8e:12:10:
bf:11:49:d9:9e:96:3f:52:61:c0:15:a3:a7:0f:cf:
ec:8e:95:3a:92:b5:b5:ac:ed:97:a1:8c:5f:da:f9:
ab:a2:c5:16:ff:f4:96:de:b5:d5:ce:1d:98:7f:ce:
0b:c0:ab:c7:5b:2f:b5:c8:2b:6a:b1:de:9f:08:f2:
e4:3c:46:ed:00:77:45:41:38:a8:42:75:1b:fd:5a:
1c:ef:8c:8f:8d:6e:89:78:c7:db:65:58:35:b5:5a:
14:58:55:a8:af:4d:b8:3d:8d:00:f7:cf:12:94:86:
b9:c3:cd:5a:60:40:3f:8b:e3:14:8e:ab:bb:e6:62:
4e:69:f1:91:19:30:1f:31:3b:5d:dd:67:3b:27:ad:
01:a1:45:e5:79:f1:dc:3d:7d:9c:7c:f9:f7:41:e7:
55:95:3b:50:86:44:f5:f8:4b:0a:25:3f:f6:d5:6c:
d0:a6:f2:8f:87:14:ea:2f:d4:4d:90:49:dd:dd:9a:
4f:20:de:85:52:30:39:59:e7:bb:be:a0:1a:ba:a2:
21:09:f1:aa:81:e8:c3:00:96:a2:1d:e8:6c:0d:35:
ca:61:a5:36:f4:88:73:20:ac:b1:62:9f:98:de:2b:
db:a9:d4:49:9a:31:c5:e8:81:f3:4c:3b:75:7e:e6:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:41:EB:1F:F4:FF:6B:A1:D7:07:B8:0A:65:8C:F6:4A:76:5F:71:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K0HrH_T_a6HXB7gKZYz2SnZfcYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:e6:ec:b9:41:f9:3f:7e:74:e4:ee:29:bb:9f:f2:14:ce:dc:
49:75:2b:2b:d9:68:f6:7f:34:e5:96:f7:55:8e:50:fb:b1:18:
6c:f0:67:d9:cb:88:df:78:38:77:8b:12:e5:59:ad:d8:40:37:
88:a6:e7:0c:8b:83:38:6b:3d:b2:33:d0:c8:88:b7:7a:5e:a0:
21:bd:84:73:ef:b7:a8:69:7a:91:b3:19:c9:33:56:32:97:48:
30:f0:25:65:8f:50:ec:05:74:2d:f3:83:da:c9:ea:bf:2f:7a:
1f:fd:1d:34:fe:ac:af:1e:80:a0:5f:49:a2:0f:d1:25:b6:59:
5a:0f:10:9d:2e:2e:96:18:35:ec:98:e7:85:31:c7:e0:1e:d5:
06:3a:e0:fd:29:bd:1f:67:ff:3b:97:59:e6:ef:48:bf:f4:44:
6d:32:23:bb:37:cf:06:78:25:c4:71:df:13:b0:16:06:ac:31:
d3:7b:05:29:0e:b0:b5:0d:6c:9c:b6:23:d3:a2:26:ba:ff:fa:
11:00:5a:8c:f2:e8:3c:d1:4d:13:bd:d5:e5:74:e3:15:38:d3:
5d:1f:df:9b:46:1c:32:ee:4a:c7:e0:61:a1:d7:fa:55:bb:07:
c8:ab:19:d2:55:82:20:fd:b0:04:af:76:61:7a:1d:d9:0d:68:
ce:da:af:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:16:49 2025 by rpki-client