Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KM2tXprdqKiYDy5cdQoiGKmXqP8.roa
File: KM2tXprdqKiYDy5cdQoiGKmXqP8.roa (raw, json)
Hash identifier: zS7flCfn6V4doyI8oaKl6I+iuaSMc9jmaOV+Rq+wBjQ=
Subject key identifier: 28:CD:AD:5E:9A:DD:A8:A8:98:0F:2E:5C:75:0A:22:18:A9:97:A8:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F72D4CCADE7FBAE92A5E86755A2542A7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KM2tXprdqKiYDy5cdQoiGKmXqP8.roa
Signing time: Tue 15 Aug 2023 03:11:28 +0000
ROA not before: Tue 15 Aug 2023 03:11:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f7:2d:4c:ca:de:7f:ba:e9:2a:5e:86:75:5a:25:42:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 03:11:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28cdad5e9adda8a8980f2e5c750a2218a997a8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:52:90:dd:2d:89:9d:50:59:f2:a0:1f:99:c4:
7c:7c:a6:f3:64:37:71:33:42:1a:62:77:35:6b:5a:
4d:4d:5f:71:a9:bb:35:6b:de:36:1c:22:78:a3:c4:
77:98:74:e0:41:92:ac:c3:cc:2f:7f:72:49:43:c1:
c7:8d:68:a9:47:1f:40:f7:38:ae:6d:8b:3a:70:82:
c2:d9:a7:3f:5a:0f:e0:a3:36:16:bc:24:40:eb:7a:
f1:80:f7:9c:15:55:b9:11:48:61:88:8a:b2:34:90:
70:7f:87:e1:73:cb:d7:e4:96:c9:22:0d:31:3d:43:
b4:5e:11:c4:f9:4f:e7:78:c1:e9:80:79:73:0a:8a:
29:21:88:73:1f:33:10:e0:7d:55:54:c0:8d:fc:00:
c8:e6:6e:76:67:34:c9:ba:e7:5e:63:a9:3d:c7:2b:
00:10:35:d4:72:1d:71:18:e1:b6:4b:bf:bf:02:12:
c3:52:a8:23:92:43:86:1c:40:ca:d7:c5:46:03:e5:
51:a2:51:9a:2d:a4:b6:0a:d0:56:74:d5:f2:0e:7f:
c2:25:70:3e:d6:ed:0e:e3:71:ad:52:71:83:7d:b2:
9f:ac:34:e4:59:38:26:69:b1:25:cd:04:8f:1f:72:
73:cf:6c:c7:2b:2d:5e:97:ff:19:31:0c:0b:9b:f1:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CD:AD:5E:9A:DD:A8:A8:98:0F:2E:5C:75:0A:22:18:A9:97:A8:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KM2tXprdqKiYDy5cdQoiGKmXqP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:df:22:94:46:de:4d:b5:e6:5d:aa:eb:73:62:1f:bf:a1:98:
18:3c:26:98:bb:af:6d:a6:58:a5:87:c3:92:86:71:30:7b:83:
d7:19:78:c3:d5:e6:dd:bc:a7:80:ef:15:f9:2e:54:09:ad:b9:
73:bd:2f:e0:46:e3:8b:2b:1d:72:5d:05:4b:a0:de:e7:0b:28:
4d:9c:c4:a0:d4:07:56:1b:b3:96:3e:60:05:8c:b7:01:37:89:
89:46:a0:04:78:41:28:95:70:6a:58:f7:a7:4b:c2:c5:fa:34:
a8:34:74:32:f1:16:48:b9:c2:54:1b:9d:79:72:21:a9:c0:d4:
01:46:9a:6e:4e:5e:ce:96:4b:6c:47:74:ad:14:4d:f6:54:22:
ce:eb:8e:47:3c:d5:50:b4:ff:47:42:bc:9a:b2:ef:fb:54:36:
2d:b3:ee:8f:b9:a2:9f:53:96:f8:88:1e:b5:f7:6e:34:82:59:
1d:c3:be:bd:7c:bb:30:c6:8f:19:5f:aa:78:3c:c1:fe:69:f1:
55:43:d6:07:d4:62:2c:30:fd:66:20:ab:ca:1f:39:6b:5f:67:
85:a4:4e:2a:60:4f:8c:f4:90:c5:58:82:f2:29:eb:9b:19:f2:
59:72:49:52:c8:e1:9b:98:65:e5:21:4f:a6:61:c4:47:20:af:
2f:89:2f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:09:34 2025 by rpki-client