Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KBSYHNAAe9nmsubuUl1OosPoXJQ.roa
File: KBSYHNAAe9nmsubuUl1OosPoXJQ.roa (raw, json)
Hash identifier: NLehAnj1Jc9f+8fxdkkTGi9vuWZ9/V3J/S2QXH4vG/k=
Subject key identifier: 28:14:98:1C:D0:00:7B:D9:E6:B2:E6:EE:52:5D:4E:A2:C3:E8:5C:94
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A14558BC4B36DBF439B09C141FCB87C63
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KBSYHNAAe9nmsubuUl1OosPoXJQ.roa
Signing time: Sun 20 Aug 2023 19:04:25 +0000
ROA not before: Sun 20 Aug 2023 19:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:18a:1455:5eb9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:14:55:8b:c4:b3:6d:bf:43:9b:09:c1:41:fc:b8:7c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 19:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2814981cd0007bd9e6b2e6ee525d4ea2c3e85c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a4:24:83:85:1e:87:02:ac:3e:b6:70:e4:7d:
45:8c:49:6f:d7:6a:eb:d0:9e:10:c9:6f:e4:fd:a2:
1a:77:fb:cb:c3:76:52:28:9e:3c:11:fa:a6:ab:94:
24:8c:d8:b3:ea:a8:c0:8c:ff:d9:c0:16:d4:11:59:
47:b9:b6:74:b0:d7:88:41:7a:85:7e:e5:58:a0:34:
f4:cc:02:e2:9a:0d:45:84:75:3e:6a:b9:dd:01:ba:
ad:6b:4d:3f:d4:c9:d2:48:2a:f6:30:0d:c2:e3:e6:
7f:84:d4:40:f4:96:a2:71:10:3e:fe:d7:4b:42:b5:
7e:47:97:f6:d3:67:0e:ed:24:bb:a4:55:40:be:e5:
db:98:cc:87:1d:ba:04:aa:f5:56:4c:7d:b9:55:c2:
6b:e9:cf:0a:03:2e:71:24:fe:08:b1:c4:af:3b:07:
61:dc:26:77:66:f9:aa:9e:8d:4a:22:53:79:fc:f7:
48:2d:5c:60:a2:d2:c1:6f:f9:2c:27:8f:0c:b6:22:
36:fc:ae:45:8a:40:3d:73:27:2a:38:5c:c9:71:bf:
13:1a:cf:b2:44:ce:7d:2f:a6:3b:f2:e3:5d:31:d5:
e0:18:b1:e0:31:e4:f5:94:61:45:a9:8f:73:9e:86:
37:3d:c0:92:31:38:c4:01:50:fd:64:0b:67:5e:7b:
9d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:14:98:1C:D0:00:7B:D9:E6:B2:E6:EE:52:5D:4E:A2:C3:E8:5C:94
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KBSYHNAAe9nmsubuUl1OosPoXJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:73:8d:28:61:fc:81:5e:cd:28:d9:62:4d:a3:7c:2e:bf:e8:
23:43:39:64:69:a3:70:ab:ea:94:ab:3d:87:1f:3b:67:82:0a:
91:45:b4:f1:21:1c:64:c9:3a:07:0f:91:2e:8a:e3:d0:b3:68:
4d:a2:2d:44:ae:44:b1:15:4b:5f:02:45:4b:b4:b6:0f:9f:d0:
73:f6:a3:11:29:11:5e:72:50:09:1d:27:93:b2:a6:39:ca:ff:
b5:2e:ea:cc:d6:14:7e:59:5e:f9:eb:8b:02:ef:bc:4b:a3:fa:
60:8c:74:8a:fd:a7:48:5e:51:0d:d1:ef:90:7d:d2:6e:77:17:
bd:e7:6e:c8:51:4e:3b:6c:c3:08:92:19:b5:26:c6:d4:42:fd:
dc:22:fc:01:94:6e:68:b9:ad:f7:22:3e:59:be:3f:00:53:1c:
75:f1:ed:d2:49:86:74:53:a2:43:b6:ed:b1:7a:d7:ea:e1:76:
20:80:ce:3c:b3:73:c7:12:b5:18:38:5d:68:53:78:07:0c:77:
76:2d:d3:65:e4:b2:dd:cd:df:49:83:db:4f:c2:9b:ee:95:78:
6d:15:c8:8a:e5:d4:95:c9:ef:0e:3f:36:13:fa:e3:a4:85:e5:
de:39:07:7f:10:3a:3f:e9:d1:d8:ee:89:4a:73:20:90:52:6e:
62:93:5c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:40:18 2025 by rpki-client