Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K91q2qGG4WfIyWdgq9Zh8AsRIT0.roa
File: K91q2qGG4WfIyWdgq9Zh8AsRIT0.roa (raw, json)
Hash identifier: pVRSay2EUV4rOliZPs9aqrerPEvEYxOX+kC8BLCEN9Y=
Subject key identifier: 2B:DD:6A:DA:A1:86:E1:67:C8:C9:67:60:AB:D6:61:F0:0B:11:21:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018680FD1F2992088D64D2FCFA24D39D462C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K91q2qGG4WfIyWdgq9Zh8AsRIT0.roa
Signing time: Fri 24 Feb 2023 01:15:17 +0000
ROA not before: Fri 24 Feb 2023 01:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:80:fd:1f:29:92:08:8d:64:d2:fc:fa:24:d3:9d:46:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 01:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bdd6adaa186e167c8c96760abd661f00b11213d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b6:19:a5:08:3d:47:a3:07:ad:b5:ea:e9:61:
1c:16:88:64:71:a1:72:69:ff:a5:cf:3e:1c:ef:68:
f1:07:d1:dd:63:91:b6:31:9e:2e:b7:fc:47:cd:d1:
c2:9c:f0:5e:17:60:24:8b:86:ca:a5:5d:47:e5:76:
d1:ee:87:31:31:c5:1e:4b:1a:cb:b8:f4:ed:6e:74:
12:fc:cb:6e:f0:bf:40:b5:73:20:da:0e:60:d2:d3:
5a:6a:52:4b:ce:ec:cb:bb:23:0e:52:3f:1a:cd:c7:
37:7d:9a:bf:c3:34:ff:5d:ad:1f:e6:76:d6:1a:7e:
6e:8e:dc:a8:5d:32:b5:fc:2b:34:d7:c4:92:ac:f7:
06:d5:6c:93:f6:00:32:b0:b8:2b:8a:ae:dc:5c:6f:
05:fd:79:bf:6d:5d:a0:00:1d:81:bb:3c:ff:3f:58:
ed:96:14:f4:60:dd:20:f5:ad:9a:a5:f8:d8:98:a3:
c9:5b:35:d5:89:89:82:e7:06:f0:57:f4:24:e4:ae:
10:d8:f2:46:5d:67:1a:05:79:1a:4c:84:35:c1:7e:
9a:0b:b1:35:38:76:25:4f:9f:2b:bb:45:d2:47:f6:
5e:89:17:e5:78:ac:d0:00:c2:a0:8f:e1:2c:1d:19:
46:e6:ed:cf:29:35:03:96:bf:41:e5:ae:fa:5f:df:
0e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DD:6A:DA:A1:86:E1:67:C8:C9:67:60:AB:D6:61:F0:0B:11:21:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K91q2qGG4WfIyWdgq9Zh8AsRIT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:1b:36:fb:2e:bf:1c:6d:9f:9f:92:6e:9d:06:37:bf:9a:c7:
22:3e:a1:50:2a:87:33:24:31:02:99:dc:e9:de:3d:a0:e7:a5:
34:4c:ba:07:5e:56:91:d8:7b:98:dc:02:f9:f8:a6:c4:c7:5a:
46:bb:48:fe:26:5d:51:f3:4e:92:61:df:d9:ca:3b:86:5c:3f:
be:06:93:ea:69:a0:ff:d2:29:0b:2a:47:f3:80:d6:24:58:84:
57:c0:5d:a6:e1:33:0f:6a:1e:bb:9f:34:e6:f0:bb:0a:f7:71:
39:0c:e8:08:80:c7:fa:da:86:e9:1e:2b:7f:0a:f2:1b:6e:d0:
71:34:4c:51:30:29:b2:64:73:4f:ad:c3:56:50:d2:e9:77:f1:
6c:81:5b:86:fe:77:cc:39:37:1e:0e:a4:96:7d:af:5e:cb:79:
c3:f2:a6:8f:cf:6d:74:54:c8:72:a8:7c:c0:37:37:60:70:67:
81:a7:09:04:6d:2c:1d:64:3e:2e:aa:23:b9:1e:5d:23:1f:15:
b1:7e:d5:c9:c0:26:f2:d1:ba:97:08:80:5c:1b:18:8a:06:25:
dd:d3:75:e4:61:6e:dc:cd:19:80:95:33:68:3b:f1:21:9b:ee:
31:c1:11:a1:7a:ad:ae:cf:20:ee:a3:e8:45:79:24:63:34:cb:
5d:a5:e8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:50:53 2025 by rpki-client