Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KBgzXRGyq92UjHteDOayabgaprE.roa
File: KBgzXRGyq92UjHteDOayabgaprE.roa (raw, json)
Hash identifier: J7xx6gd21+NdAysp4aorNw35Y2+NbHZ/4GE0nhiSN5o=
Subject key identifier: 28:18:33:5D:11:B2:AB:DD:94:8C:7B:5E:0C:E6:B2:69:B8:1A:A6:B1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018818AA894CC7F4706875272B1DA7090090
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KBgzXRGyq92UjHteDOayabgaprE.roa
Signing time: Sun 14 May 2023 05:10:09 +0000
ROA not before: Sun 14 May 2023 05:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:18:aa:89:4c:c7:f4:70:68:75:27:2b:1d:a7:09:00:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 14 05:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2818335d11b2abdd948c7b5e0ce6b269b81aa6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8a:9a:8e:8e:46:99:a4:c8:3e:68:ed:1d:46:
a7:e3:c3:3d:6e:31:35:b1:09:c1:a0:f7:06:39:0c:
96:c6:40:6f:0c:1c:dc:72:b9:86:89:8b:c5:59:82:
21:d5:37:45:95:b3:3f:c0:9a:8f:2f:1e:b5:c1:41:
86:d4:1f:6d:54:62:85:61:d5:bb:17:3a:d3:9e:a1:
e6:71:a6:12:8c:e3:fe:5a:cb:dd:37:e5:6b:9e:11:
e0:6b:cf:53:e2:5e:7c:75:dd:62:a0:c5:10:b3:69:
e6:5a:a2:c2:ef:5f:7f:eb:32:e9:b8:2f:88:48:72:
e6:26:00:6f:dd:b0:7f:f7:5a:30:0f:6c:d2:28:ab:
dd:07:9f:dc:77:a6:f5:b7:01:20:44:3c:1c:a8:a5:
dc:7c:82:dc:cd:78:7a:78:e3:39:ac:f8:17:ed:14:
d7:f9:d1:b5:e7:f1:34:95:1d:6f:9e:22:b6:f7:b9:
a9:07:f9:80:f3:bc:7f:ea:81:1f:fd:4f:e8:05:e8:
d8:b5:08:c0:f3:46:33:70:15:8a:b6:e6:1e:2c:9d:
d5:42:45:7a:9f:1c:b2:e3:54:51:c8:42:1c:77:ca:
e4:0d:94:85:d2:0e:80:c8:15:e8:60:6b:80:c6:04:
7b:53:1d:bd:ee:cd:85:7b:65:dc:2b:13:f3:0f:d3:
dc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:18:33:5D:11:B2:AB:DD:94:8C:7B:5E:0C:E6:B2:69:B8:1A:A6:B1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KBgzXRGyq92UjHteDOayabgaprE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:9c:e2:44:f9:4f:30:74:bd:13:7e:f4:99:30:75:2f:55:70:
c6:ef:25:53:9a:2d:5a:78:f9:bf:10:cd:4d:1e:b7:2b:88:e3:
d2:59:7c:cd:b8:09:e8:88:d4:92:17:ff:7b:be:76:f1:f8:38:
94:d2:d0:02:0f:3c:e2:6a:c7:e8:8e:14:75:d3:44:e8:71:63:
c1:b9:2a:c4:c7:c4:3c:e4:3c:d6:d5:04:5c:1c:fc:55:69:55:
2f:15:04:e0:e5:7d:59:d5:18:cc:df:88:df:d3:b5:79:35:b2:
16:94:9e:71:ca:1d:9e:74:ce:ca:ca:21:19:8e:74:9a:7b:05:
37:ff:8c:a7:ca:2e:d6:2f:bc:3d:de:99:8d:2c:99:87:32:9c:
1a:8a:a1:b8:16:90:03:1a:a2:b2:df:a5:85:db:51:f4:16:95:
58:5d:6b:6a:ce:61:ff:9e:b9:3c:94:b6:6f:1b:dc:03:8d:2f:
7e:cf:73:fa:7e:de:1a:31:00:19:7e:12:b5:15:64:7c:e8:78:
80:6b:36:b9:ab:4f:46:fd:82:39:3d:ff:c9:fd:e5:dd:df:65:
a9:05:28:ae:57:77:05:41:c1:43:d7:10:6d:1f:e8:a9:57:9f:
3e:28:80:5b:63:2b:9e:cf:5d:98:1d:7a:35:93:e7:52:9f:7f:
96:31:72:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:33 2025 by rpki-client