Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KN7uqjU4ER_5QOok7IkkKoLB7hc.roa
File: KN7uqjU4ER_5QOok7IkkKoLB7hc.roa (raw, json)
Hash identifier: X3QwT4ihArXqgNd6t7Zz36cnDKCvhbPI5LlaZeRlysg=
Subject key identifier: 28:DE:EE:AA:35:38:11:1F:F9:40:EA:24:EC:89:24:2A:82:C1:EE:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188556297CF34C5BBE470142C524D1CD9A0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KN7uqjU4ER_5QOok7IkkKoLB7hc.roa
Signing time: Fri 26 May 2023 00:08:24 +0000
ROA not before: Fri 26 May 2023 00:08:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:55:62:97:cf:34:c5:bb:e4:70:14:2c:52:4d:1c:d9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 00:08:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28deeeaa3538111ff940ea24ec89242a82c1ee17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:31:95:45:70:4f:e9:d4:33:7e:1f:a8:e8:
46:4d:64:35:f9:85:a8:93:35:39:9f:4e:f2:03:db:
8b:15:5b:75:be:a1:cc:d3:fe:8e:9b:e1:ae:f6:73:
7a:a7:5f:b1:87:69:f6:85:27:29:a2:5a:3a:ac:ee:
54:bc:5f:5b:1c:8c:d6:59:c6:12:0c:6d:b6:f5:d4:
32:e9:fb:45:c3:f7:17:47:f5:47:cf:68:f1:3c:5f:
6b:b5:d2:c1:9b:36:a3:1d:48:4d:24:63:03:15:32:
4d:e9:dd:ef:9f:56:99:64:08:a0:e0:ab:d1:b5:c7:
21:fe:ea:44:f2:85:85:08:15:2e:23:79:40:62:42:
b5:b7:93:8e:3d:ea:b2:25:27:a0:b6:2f:58:ab:f6:
db:c5:1c:4e:95:ab:47:ce:a6:a5:ca:4e:3b:73:b1:
a3:e4:b1:90:a7:2d:ba:f3:50:b4:a8:04:d9:86:98:
76:60:0f:1a:5c:7f:5d:73:f9:33:6e:f6:0e:e2:76:
c3:8b:2d:b8:aa:88:31:81:49:9d:df:fb:1d:2a:f4:
ca:37:ff:e8:9b:c0:4f:37:ee:30:22:2b:e9:85:b9:
e0:6b:01:26:aa:92:99:4b:fe:05:b4:5b:9e:53:d4:
ee:8c:5a:ac:bf:98:bb:23:c3:e4:33:06:2a:29:28:
16:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DE:EE:AA:35:38:11:1F:F9:40:EA:24:EC:89:24:2A:82:C1:EE:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KN7uqjU4ER_5QOok7IkkKoLB7hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:76:39:08:67:0c:42:47:b0:14:11:5c:f3:ae:ac:cf:b9:aa:
65:3e:af:c5:a5:45:c5:43:21:b6:b4:4c:16:28:28:dc:5c:dd:
f2:49:20:75:24:2c:fb:74:54:fa:29:f8:40:fb:fe:78:d8:5b:
e9:ec:d4:e1:3d:b1:00:b4:65:51:02:07:93:db:3d:7f:17:7b:
12:c0:72:00:0c:4d:63:64:30:4c:58:4e:0d:a5:2d:12:71:19:
19:07:0d:c4:2d:3a:48:c3:33:47:cb:dc:01:7a:c1:cd:42:09:
cf:34:02:08:c8:47:54:0b:df:42:36:48:2f:20:8b:5d:5e:5a:
e9:4d:00:9d:83:a5:09:2e:dd:eb:24:c2:de:d9:6b:aa:41:b5:
43:a5:37:71:2e:ba:c3:19:03:bc:16:44:0f:8d:49:db:0c:30:
88:05:52:0a:53:17:53:91:f7:5b:e8:53:37:7b:22:e9:c4:69:
38:a3:ae:0f:fe:e4:36:d2:7d:5e:96:d7:e1:f9:8c:63:18:b6:
d8:39:34:f9:07:9c:94:8f:39:fc:be:18:24:01:64:f9:93:b6:
aa:a3:ef:86:98:8c:60:17:33:7e:d7:ed:9a:1b:5d:6c:f1:bc:
81:b1:04:e3:8c:6d:5c:ab:1e:0d:45:a4:e7:72:55:9a:88:6f:
3a:e2:01:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:37:37 2025 by rpki-client