Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KBMOIanGc3lWILfRiNJktjrKe5s.roa
File: KBMOIanGc3lWILfRiNJktjrKe5s.roa (raw, json)
Hash identifier: YXTuUt6HqZhjpn+fjDG1yDCBq+9AHj6qhS49ojs91lM=
Subject key identifier: 28:13:0E:21:A9:C6:73:79:56:20:B7:D1:88:D2:64:B6:3A:CA:7B:9B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7032BEBE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KBMOIanGc3lWILfRiNJktjrKe5s.roa
Signing time: Sun 06 Mar 2022 12:10:03 +0000
ROA not before: Sun 06 Mar 2022 12:10:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1882373822 (0x7032bebe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 12:10:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28130e21a9c673795620b7d188d264b63aca7b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:91:00:0d:0d:5d:5f:5c:9e:84:d7:da:88:
9c:2f:b9:70:c7:15:5b:20:d2:21:45:36:27:e1:91:
eb:3a:aa:37:70:eb:1a:ce:d0:5d:38:48:e9:d0:aa:
b2:b4:04:f9:b6:72:01:79:dd:0a:14:b7:6f:29:5d:
36:c1:da:44:08:0b:4a:98:c6:ad:16:60:f8:86:4b:
78:e2:c2:46:a1:d4:fb:56:98:ab:08:63:cf:c3:7d:
c6:0b:b2:8b:f0:dd:9a:d8:a1:04:e0:75:47:3f:4f:
88:84:32:77:b3:44:1d:9a:c2:02:5e:a9:cd:98:98:
ed:0a:9e:fd:21:7a:36:a9:64:ab:8c:87:3b:ed:bf:
c1:38:b6:45:2a:ff:3e:26:78:92:d0:84:a8:23:a0:
b3:33:38:dc:58:63:21:23:2d:a8:6f:57:d1:9c:38:
53:aa:e0:a4:da:e7:84:45:21:f8:77:93:84:e3:5d:
5f:07:e3:87:aa:8c:05:d7:c3:2b:20:b7:40:9d:40:
7f:c1:12:51:9d:ab:af:b8:38:5c:8c:e0:25:e3:8d:
af:0e:f8:54:d7:18:db:c0:27:34:56:bf:a5:2f:c9:
b7:8c:24:a4:78:d7:bd:ee:88:b3:44:66:2f:fb:e3:
32:46:e7:40:92:46:37:42:7d:7a:33:92:0f:30:eb:
35:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:13:0E:21:A9:C6:73:79:56:20:B7:D1:88:D2:64:B6:3A:CA:7B:9B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KBMOIanGc3lWILfRiNJktjrKe5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:56:24:fd:ab:a4:53:ad:06:13:5d:45:0f:0b:72:49:00:c5:
df:d3:2f:03:68:86:5c:00:1d:48:ad:8c:4b:fd:8c:9b:ad:13:
70:d4:1e:a8:8b:83:5c:d5:92:bc:da:a4:c9:0c:19:fd:e2:18:
7c:b3:16:0d:03:ff:1e:c9:a7:54:c7:d9:94:95:2b:5b:e1:74:
ab:2b:70:ae:af:12:3e:96:42:75:80:84:d0:99:6d:16:80:79:
9d:be:ee:e7:1a:f6:65:4c:1f:90:2d:55:99:29:52:a0:55:84:
be:72:ea:5e:b3:f5:af:e2:58:b6:2a:65:2f:e2:e0:70:13:e1:
76:38:d3:94:4d:92:de:2d:cc:43:d5:52:ef:15:f1:87:a4:93:
ab:89:72:c4:f0:c5:27:de:43:29:d1:b4:fd:b7:71:42:32:ee:
47:89:ad:8a:c7:a4:c6:3b:c3:17:2e:6e:e3:44:ac:b6:56:1a:
76:88:50:a9:5d:bb:c4:fc:ca:c0:a2:5d:9d:db:ba:9f:53:d2:
79:e5:e0:a1:a6:07:92:bb:c7:22:15:5a:d2:22:62:d6:c7:cb:
3b:f1:f3:12:c1:98:87:2d:17:a2:76:29:e1:c2:cf:06:64:ae:
39:39:7f:c3:1d:eb:de:ab:b1:78:61:17:de:60:f0:1e:ad:e2:
63:02:f8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:27:57 2025 by rpki-client