Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KKUlTCV3FdVk0OnXGXoOBk2WRhk.roa
File: KKUlTCV3FdVk0OnXGXoOBk2WRhk.roa (raw, json)
Hash identifier: YbwJW7B+mNzvl8QNOasBCHxLT3AZmDXi+Bo2es0XevA=
Subject key identifier: 28:A5:25:4C:25:77:15:D5:64:D0:E9:D7:19:7A:0E:06:4D:96:46:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185BAB4610AAF9E58B8C39B298DE256721B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KKUlTCV3FdVk0OnXGXoOBk2WRhk.roa
Signing time: Mon 16 Jan 2023 13:11:01 +0000
ROA not before: Mon 16 Jan 2023 13:11:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:ba40:6692/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ba:b4:61:0a:af:9e:58:b8:c3:9b:29:8d:e2:56:72:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 16 13:11:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28a5254c257715d564d0e9d7197a0e064d964619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:06:65:1a:96:b1:7f:82:65:5f:2c:64:38:
06:d5:da:b5:0f:28:8c:65:d1:c3:19:7c:dc:37:5b:
31:1f:61:92:3f:1d:de:50:aa:d2:d1:64:34:02:5d:
8e:37:16:54:59:0b:f9:c0:cb:8c:b9:3e:0b:fc:97:
03:d0:a8:78:3d:58:69:66:56:d1:be:4a:35:cc:3e:
e4:09:bb:ca:5e:16:f9:c8:30:6c:d4:3b:ca:09:31:
84:57:38:27:5c:37:00:d2:03:a5:d6:d5:85:3d:eb:
f3:c9:88:fc:16:57:04:3d:8a:d3:fa:ac:69:9c:55:
9e:0b:20:41:e7:21:19:c3:c8:39:79:9f:82:2f:63:
08:d8:3b:93:bd:64:a2:7a:b8:a3:c3:f3:97:59:06:
5e:e8:1a:1c:83:6f:f0:3b:78:7e:89:59:92:d2:bd:
14:9c:2e:52:d7:f1:de:b2:cd:b3:d4:4d:8d:70:4c:
0e:f3:3f:35:1d:a3:63:8c:28:69:fb:96:ac:98:54:
85:d4:c7:96:d3:e8:b3:60:ab:41:01:1d:38:d6:a9:
f1:b4:be:4c:59:55:b8:9d:9b:2f:b2:63:5d:84:df:
83:7c:90:5a:a3:66:3b:3e:2b:0f:ab:cf:b3:ec:36:
9b:03:3d:d6:45:4e:d3:e5:90:fd:db:ae:ec:e2:7d:
13:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A5:25:4C:25:77:15:D5:64:D0:E9:D7:19:7A:0E:06:4D:96:46:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KKUlTCV3FdVk0OnXGXoOBk2WRhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:73:31:81:48:68:b7:1b:1b:5f:2a:82:0f:1d:8a:ad:64:ab:
0f:ac:b0:14:a6:7c:8a:7a:d3:09:f4:18:d1:1b:91:df:3b:46:
60:4b:39:80:c9:a2:68:e9:ce:cf:14:14:e9:27:6f:15:04:fd:
13:98:19:e7:82:45:cd:73:16:61:db:6d:9a:f1:d7:76:d3:10:
e5:8d:7f:90:a8:b7:39:95:eb:31:7a:81:de:81:42:33:d8:e1:
27:d8:1b:ea:19:7a:30:24:9b:ed:57:b7:c4:44:91:24:b4:9d:
e3:96:4f:b0:82:87:3b:0d:41:f0:4a:75:72:82:b4:a5:8b:8c:
34:19:2f:de:76:51:b1:13:82:62:a9:91:e8:55:69:ef:a1:cd:
31:13:43:eb:0a:09:cf:41:6d:5b:70:7d:2e:60:6e:36:3a:89:
f5:cc:30:b0:f0:c7:1f:1b:92:f2:0d:61:e4:57:87:80:46:ec:
78:08:6e:2f:3c:7c:82:46:74:73:48:44:26:1c:a8:8e:1e:3b:
f8:8d:54:f8:35:eb:32:77:31:bd:52:ad:69:58:08:3d:b5:71:
54:b7:15:a5:30:91:78:37:bf:32:b9:b4:ba:d5:e4:7e:90:8a:
13:26:8d:0b:67:f1:e1:c0:19:b4:b6:94:da:5c:67:48:94:9a:
07:cc:89:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:12:22 2025 by rpki-client