Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KDDRhjxqil9aRPoHgNdMVd9zxXo.roa
File: KDDRhjxqil9aRPoHgNdMVd9zxXo.roa (raw, json)
Hash identifier: tyBlwKJ+n+foqamtIJwn0R9u64AoCqmsx2my464qPLM=
Subject key identifier: 28:30:D1:86:3C:6A:8A:5F:5A:44:FA:07:80:D7:4C:55:DF:73:C5:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A9BA746C38727033176836521C5CE945
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KDDRhjxqil9aRPoHgNdMVd9zxXo.roa
Signing time: Sat 22 Apr 2023 16:09:41 +0000
ROA not before: Sat 22 Apr 2023 16:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a9:ba:74:6c:38:72:70:33:17:68:36:52:1c:5c:e9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 22 16:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2830d1863c6a8a5f5a44fa0780d74c55df73c57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:86:4e:bb:98:e9:6b:f3:40:05:82:6c:e1:27:
1a:9f:99:78:91:ee:77:8d:b6:f1:81:28:d3:9c:36:
50:d0:77:56:89:d5:80:af:a1:ea:23:83:ed:56:bc:
8b:83:92:ac:14:43:6d:d2:f9:68:93:df:b5:71:10:
b7:c5:55:34:3b:ba:2e:64:b1:93:80:3c:b9:6f:6a:
69:02:4a:72:54:3d:85:d0:31:d6:8f:59:03:5e:5f:
ca:88:44:95:46:1f:e3:b3:d8:1c:12:7d:20:ae:1f:
e4:bb:01:2e:33:f1:72:f6:7f:97:a2:1b:da:7a:21:
8a:8e:c1:99:18:9a:76:0e:3a:f5:ff:20:24:0b:de:
fd:2d:f3:2d:51:f1:ef:cc:44:91:83:ef:49:a3:c1:
13:e6:cb:3e:b9:b8:84:52:8b:76:06:00:fb:a1:9f:
b8:00:c7:6b:b1:5b:36:01:9c:31:46:7f:ee:3b:a3:
e8:48:bf:54:45:4f:99:df:c0:78:58:89:15:ba:4d:
43:75:3f:3e:d6:d2:4c:30:48:a3:9a:13:66:98:08:
5e:e9:88:15:2f:40:8c:01:12:39:1e:9b:cb:5a:2a:
c3:4c:f7:7e:67:a4:cc:c5:9c:33:8e:93:9d:50:77:
8d:bd:b9:b9:91:13:73:2d:b7:c4:45:6b:f1:1a:0b:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:30:D1:86:3C:6A:8A:5F:5A:44:FA:07:80:D7:4C:55:DF:73:C5:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KDDRhjxqil9aRPoHgNdMVd9zxXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:98:12:11:58:ef:bc:7c:df:f2:e3:7f:a0:d4:c3:53:cd:d9:
e7:2e:20:26:44:ec:c2:d8:99:9e:58:c3:3a:a5:d1:88:35:72:
72:53:bf:cc:1b:e2:2f:f7:f8:56:73:0b:1b:30:30:e9:7c:e8:
0b:3a:7d:8c:e9:1d:d0:3e:4d:39:28:00:de:cc:d3:bc:25:04:
f5:ca:fc:5b:51:2c:ae:3b:8b:d1:5a:ab:76:bd:36:5a:ac:79:
f0:ca:17:6d:b0:72:ab:b9:c0:71:ed:0b:4d:ce:d8:d5:68:a6:
1c:7f:32:24:d5:c7:e4:75:c3:b7:53:ee:d4:69:1b:eb:df:f7:
eb:1a:a5:37:89:86:b7:05:99:84:a9:1c:67:b2:8a:77:7a:8a:
0d:da:0a:6a:4a:3a:94:1a:17:39:ef:27:f0:10:a0:be:cc:91:
a7:4d:2a:78:81:8d:64:91:36:62:89:13:f1:4a:a3:0c:66:e6:
7e:4f:43:54:2d:e2:22:20:e3:a7:9b:30:63:bf:53:80:1f:c3:
69:b9:a4:64:9e:a0:31:d6:71:d5:a5:91:6c:b7:ce:25:37:8e:
e1:eb:ce:62:a8:f3:b9:13:ae:7b:18:e4:fb:b7:04:d0:df:25:
9d:67:71:19:0c:05:fd:2c:b4:c6:9e:64:3f:06:09:e7:b6:bb:
c6:ac:59:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:37:36 2025 by rpki-client