Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K4aMbRFTFDIwHK2TO8_MHtPhCog.roa
File: K4aMbRFTFDIwHK2TO8_MHtPhCog.roa (raw, json)
Hash identifier: N1uyrvP0huFpllfeE176OezqA6FGJNm+Xh7jfOMSqlM=
Subject key identifier: 2B:86:8C:6D:11:53:14:32:30:1C:AD:93:3B:CF:CC:1E:D3:E1:0A:88
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B6CA7D21B30A854BE044E5E5B0B49741
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K4aMbRFTFDIwHK2TO8_MHtPhCog.roa
Signing time: Tue 13 Jun 2023 22:05:03 +0000
ROA not before: Tue 13 Jun 2023 22:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:188:b6c9:c5f9/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b6:ca:7d:21:b3:0a:85:4b:e0:44:e5:e5:b0:b4:97:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 22:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b868c6d11531432301cad933bcfcc1ed3e10a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:d3:b0:a0:64:c8:63:1b:cb:bf:94:35:0e:
66:f9:b9:b6:4a:73:93:93:9d:23:1b:8e:b5:2c:36:
7f:38:36:34:11:49:a3:4e:d0:05:a8:03:3d:69:3e:
c8:c4:c1:1a:fb:af:05:b7:98:e3:8c:88:cd:ea:85:
cb:e2:0f:34:a4:45:c0:6d:12:82:ec:52:6b:f0:0f:
6c:2d:ca:28:64:4e:4f:0b:b5:12:04:c7:10:80:ca:
b5:ed:65:d2:eb:db:d6:11:af:05:16:a7:77:7e:07:
dc:a3:6c:27:1c:67:1e:f4:a0:d0:4c:95:b9:ff:ec:
5d:0e:61:cd:61:d2:e1:88:b7:e6:d1:b9:65:28:22:
9d:9d:d1:f7:da:70:75:c9:00:1b:67:02:71:62:bc:
e3:f2:9d:62:a8:0b:1a:5e:04:53:ed:a0:c5:87:3d:
a7:c7:f5:35:77:52:17:33:5f:4b:4e:c5:fe:90:ab:
e4:18:5f:4c:c9:b6:52:18:a9:34:e1:aa:55:d3:f6:
56:31:21:ad:73:a8:25:fb:76:fa:15:04:7e:29:33:
e1:c4:43:3e:e7:5f:c2:8c:f5:3b:8a:f5:c8:ac:ec:
be:7d:6f:22:15:9a:a3:91:90:9a:d7:cc:25:2b:8e:
90:ec:ca:d7:d5:5c:36:52:cf:91:b3:0e:97:3a:fb:
3f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:86:8C:6D:11:53:14:32:30:1C:AD:93:3B:CF:CC:1E:D3:E1:0A:88
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K4aMbRFTFDIwHK2TO8_MHtPhCog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:bd:36:f7:e8:d8:81:95:e1:b5:a8:5a:7f:22:38:9d:01:8c:
4e:78:8e:2e:2d:92:36:37:4b:cd:0b:78:e1:7a:05:1b:99:fd:
0d:29:7f:33:a4:f4:5c:b6:3d:52:44:c2:a4:2e:39:b7:c4:60:
a2:d2:a3:40:aa:b1:a7:a5:89:9b:5d:4b:a6:17:99:33:30:ac:
73:c4:c3:23:43:ca:25:96:48:be:59:1c:0f:c1:3a:14:64:32:
02:63:17:28:10:5a:77:07:8c:07:7b:24:3e:4a:31:1b:c9:14:
b5:64:bc:64:bb:89:c9:e6:83:a6:cf:99:01:fb:78:92:93:d6:
42:b5:e2:cf:3b:09:8f:88:ff:f1:b5:ce:c3:21:09:63:ab:c7:
00:77:de:58:dd:b7:9e:bf:84:3f:f6:9d:33:fe:99:09:2d:61:
78:b5:5d:b7:63:73:a5:ab:94:02:a4:8c:7d:3c:5d:8a:dc:c3:
39:34:83:bf:03:c3:9c:c8:ac:3a:c6:b6:c5:3e:df:c1:b1:a8:
3e:80:5d:e2:d8:ad:12:a1:74:f6:55:95:86:51:4f:8e:7f:1d:
ed:13:6f:49:2e:3f:b5:6e:f5:d7:e1:74:20:13:be:b3:f3:70:
32:c9:48:6a:76:0b:54:c6:f6:12:15:c6:f9:49:e9:e5:da:2c:
3b:b7:63:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:55 2025 by rpki-client