Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KMv2qD4oQ1QHIEfigwWe5FZjtkU.roa
File: KMv2qD4oQ1QHIEfigwWe5FZjtkU.roa (raw, json)
Hash identifier: DFJXj8qZQr3P6Wl1over6FYuejaGdyNBUyOmQvQMYIY=
Subject key identifier: 28:CB:F6:A8:3E:28:43:54:07:20:47:E2:83:05:9E:E4:56:63:B6:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7AB5D29C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KMv2qD4oQ1QHIEfigwWe5FZjtkU.roa
Signing time: Tue 12 Apr 2022 15:10:18 +0000
ROA not before: Tue 12 Apr 2022 15:10:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058736284 (0x7ab5d29c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 12 15:10:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28cbf6a83e284354072047e283059ee45663b645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2a:70:0a:f5:26:6c:92:2c:1e:17:e8:f1:f9:
30:60:63:a6:09:96:0f:99:21:70:67:c7:9f:4c:ca:
78:d8:77:4d:12:9d:33:c5:ed:18:6a:c9:17:8d:30:
ce:63:ab:4b:c9:f7:5a:09:a0:b9:a3:4e:27:69:ce:
cd:b1:c2:00:78:00:f1:ac:1f:17:c9:c9:43:37:09:
5b:d7:92:62:51:d3:cf:f5:4c:8b:a6:2d:37:8a:21:
c2:89:09:18:9b:83:7f:88:ba:0e:49:df:b3:78:cf:
c5:9e:d3:04:37:93:89:4a:be:82:52:2b:e7:19:57:
2a:95:fe:f6:3e:e7:9b:80:2e:da:9d:f6:8a:fb:6c:
2c:1d:91:d4:f9:ec:68:00:5f:50:c4:7d:8d:2a:73:
58:8f:ab:9a:83:30:67:88:3a:24:7d:fa:29:99:4d:
aa:88:40:48:87:89:3d:61:8e:f5:ca:0b:5f:b7:ac:
e8:06:d6:67:c5:b7:5a:0c:f4:7c:2f:37:36:cd:f5:
d7:ed:fc:91:10:85:06:24:e7:07:ab:ea:74:0e:a4:
3e:25:d0:15:b2:37:87:01:36:1e:38:60:ed:a8:cb:
19:12:1a:b3:35:1b:e5:ef:da:2c:af:d2:ef:82:dd:
3e:c1:eb:4e:e2:7c:17:51:35:d2:6f:e9:ee:c1:61:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CB:F6:A8:3E:28:43:54:07:20:47:E2:83:05:9E:E4:56:63:B6:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KMv2qD4oQ1QHIEfigwWe5FZjtkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:bc:c4:e3:be:c1:56:76:ca:cc:b5:cf:d2:ec:ac:d4:ea:35:
35:4d:21:e3:75:45:58:d0:dc:ec:14:d8:70:0e:39:19:4a:9a:
cc:05:7b:b0:d4:42:e6:22:36:7e:ad:85:ef:70:55:52:c2:5b:
b7:52:ef:44:36:f7:85:03:9c:b2:62:73:c7:03:99:af:56:47:
9c:c3:39:ab:a7:1e:ff:63:57:2c:ff:0f:fb:99:0f:83:2b:66:
24:00:b0:8d:a8:b6:f5:86:47:c9:50:e9:51:40:4c:d8:43:e6:
3a:c3:bf:54:4d:99:41:09:9c:1e:90:56:90:9a:41:2a:34:b0:
82:0b:ae:25:32:ca:1b:0c:90:a9:fb:a2:eb:e4:f4:36:37:9f:
7a:f9:47:1f:40:71:17:83:1f:14:8b:3e:2f:a7:26:a9:fc:94:
83:f3:14:7e:ce:77:4e:3e:5f:05:66:db:82:c3:d7:28:2c:17:
b0:7c:6a:6a:29:a6:21:ef:42:4b:f3:75:53:d4:2b:38:2f:6f:
a6:e7:6e:3f:f9:db:84:c1:94:02:15:87:73:b9:23:f0:b8:63:
c2:eb:5e:e0:bf:e9:cd:5a:35:4c:c8:a5:0e:bd:7f:94:5f:45:
97:0f:6f:cf:99:1d:bb:62:0f:ec:94:c0:66:a9:25:08:4e:c0:
19:51:fb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:44 2025 by rpki-client