Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KFdv06ZFsQmk8NRr0FNTxHtrnu0.roa
File: KFdv06ZFsQmk8NRr0FNTxHtrnu0.roa (raw, json)
Hash identifier: kwcWNgk67ucQL4aHEbMoiywD+A2UEeojdkVWdk+cPnM=
Subject key identifier: 28:57:6F:D3:A6:45:B1:09:A4:F0:D4:6B:D0:53:53:C4:7B:6B:9E:ED
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897CDF6EA20232933BFF6422947538FEE7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KFdv06ZFsQmk8NRr0FNTxHtrnu0.roa
Signing time: Sat 22 Jul 2023 09:12:44 +0000
ROA not before: Sat 22 Jul 2023 09:12:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7c:df:6e:a2:02:32:93:3b:ff:64:22:94:75:38:fe:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 09:12:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28576fd3a645b109a4f0d46bd05353c47b6b9eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:28:a1:e9:55:47:2f:13:b2:7c:82:29:90:26:
f5:4c:2d:fb:ec:b7:5f:29:65:71:f3:7f:7e:e0:fd:
70:cd:6b:79:b6:5c:b4:85:c1:4f:97:7b:1f:92:6d:
73:f5:76:a4:01:c2:27:5d:f0:4c:cb:b1:30:53:e5:
af:63:49:f3:3b:85:4d:47:45:d9:95:43:1c:bc:8a:
d7:9e:02:27:1c:43:96:f8:33:72:14:e8:85:53:3d:
c1:b8:3d:e3:50:f1:ae:ff:7e:e8:12:5f:c2:7d:65:
59:1b:10:1d:d8:f3:fd:9c:9b:3e:4a:ee:18:8c:43:
8d:83:92:c3:52:d3:fa:c6:d2:b9:48:de:4a:01:ac:
b0:d5:c3:5f:3e:62:b1:4b:9e:82:ad:df:d2:ea:89:
ec:8b:14:8d:d7:db:af:49:f6:5b:57:af:d3:05:24:
a7:b8:09:a6:5f:ff:c6:db:68:6b:f5:44:50:4f:33:
e8:cd:95:19:04:f3:dc:b8:b9:fe:e2:c6:74:80:52:
88:58:6b:ce:63:9f:55:60:75:66:fc:ba:e9:c6:67:
74:21:25:2d:93:7d:84:c3:72:2b:e0:1d:ef:06:ea:
10:f3:b8:c7:10:24:f7:e5:dd:22:f0:bb:a7:26:e7:
2f:73:55:dc:49:7c:01:18:ba:1a:8a:7d:df:8d:47:
fd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:57:6F:D3:A6:45:B1:09:A4:F0:D4:6B:D0:53:53:C4:7B:6B:9E:ED
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KFdv06ZFsQmk8NRr0FNTxHtrnu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:62:9a:c2:1c:bd:0d:19:86:8e:22:f8:eb:53:00:96:37:0e:
1a:da:63:71:38:07:59:91:7d:0d:7f:97:4b:00:ee:da:0c:8e:
30:89:3a:d4:bb:98:59:b3:6e:bb:ae:d6:80:87:65:56:7c:ac:
33:5c:93:de:2b:e3:27:0c:64:b8:60:7f:3a:d7:34:63:8b:43:
a0:72:1b:b1:ac:c0:d3:4e:f3:53:47:8a:3b:6d:38:9a:78:94:
45:ed:78:4e:f9:e2:19:87:03:22:9a:20:3a:0c:6f:3a:3f:e1:
c8:19:d5:85:33:96:77:99:3b:1d:79:dd:49:c9:49:98:0b:ff:
79:49:6a:ae:75:10:85:46:54:09:50:71:58:70:5b:38:66:dc:
16:07:7e:09:5a:e4:8c:ec:e5:5a:e4:7a:19:4e:9b:df:ff:79:
1d:8f:0f:e6:9c:18:48:32:66:e1:fc:25:18:9e:ef:60:e9:9d:
4c:9d:c9:de:66:a0:0a:ef:aa:32:6f:f0:75:74:76:65:b9:89:
d2:c9:8f:85:9e:b2:69:d3:cf:b1:bc:54:a1:43:6c:af:05:f0:
f0:66:7d:99:39:73:ee:33:df:da:ce:18:a3:7f:8c:91:d2:43:
82:3b:24:16:a1:7d:6f:ce:6c:f0:ce:17:34:10:8b:3e:ae:08:
2b:c0:e0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:39:56 2025 by rpki-client