Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KQ5qSwhJe7Hs4MNcO06d0FKCeas.roa
File: KQ5qSwhJe7Hs4MNcO06d0FKCeas.roa (raw, json)
Hash identifier: lwdspfCTt6lGx8dpVptckOCnzBEZmx651UWjDmT2cnY=
Subject key identifier: 29:0E:6A:4B:08:49:7B:B1:EC:E0:C3:5C:3B:4E:9D:D0:52:82:79:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018881CFFEA44A19F03B1BA61B466A126467
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KQ5qSwhJe7Hs4MNcO06d0FKCeas.roa
Signing time: Sat 03 Jun 2023 15:11:12 +0000
ROA not before: Sat 03 Jun 2023 15:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:81:cf:fe:a4:4a:19:f0:3b:1b:a6:1b:46:6a:12:64:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 3 15:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=290e6a4b08497bb1ece0c35c3b4e9dd0528279ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a0:f0:de:52:b2:59:61:0f:a0:3f:97:d9:ca:
39:59:73:88:5e:3d:59:fe:1a:41:81:ce:93:9a:dc:
2f:24:f2:8a:08:11:ad:24:00:ee:1d:77:ee:24:0b:
6e:23:18:6a:8d:ff:0e:2a:77:61:49:73:6e:76:1f:
7d:f0:8d:86:a2:7b:0b:30:55:f3:f7:9a:fd:56:7b:
18:02:a7:3d:61:59:4f:9c:6d:f7:31:a9:d6:c2:0a:
05:02:85:50:90:0a:ea:e2:99:db:0a:85:48:07:0c:
8f:74:14:0a:53:db:98:1e:47:1c:e5:c8:da:df:a2:
63:51:7e:9d:2b:65:f6:c9:60:20:1d:30:3c:83:3e:
2f:0c:dc:ad:84:c3:4a:46:4a:88:9d:e8:e8:e8:5c:
a9:30:5b:81:28:a5:85:2a:a0:b1:ea:f1:03:a2:39:
7f:f4:2b:bd:34:fa:c4:fd:c5:3f:d5:cc:d0:32:c9:
41:42:67:fa:71:77:a8:5d:15:92:d1:26:e7:dc:59:
9a:d1:97:33:7f:84:41:15:b5:39:94:e3:5b:51:6d:
46:72:51:5d:ab:c2:3f:c2:67:27:63:31:1b:d5:46:
6f:8f:4e:61:75:f2:ee:90:85:5a:d0:01:60:d7:98:
bd:bc:e7:ff:05:39:98:a9:63:82:ab:fc:5d:43:eb:
1e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0E:6A:4B:08:49:7B:B1:EC:E0:C3:5C:3B:4E:9D:D0:52:82:79:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KQ5qSwhJe7Hs4MNcO06d0FKCeas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:fa:16:ce:77:3c:7c:38:c9:b2:47:76:ef:18:be:45:a1:05:
2b:3c:b8:9e:5e:ba:5c:c8:36:9c:3f:23:c1:92:63:e7:35:7c:
ed:e4:c7:58:dd:f0:49:89:dd:cf:ff:06:0d:98:cf:22:b4:42:
76:4a:90:cb:a1:c2:09:1d:20:fd:f3:e6:bf:16:8f:d2:10:11:
ed:70:df:13:4e:91:f5:71:fa:d3:6e:c7:1d:4e:88:27:b7:5d:
a6:b0:e3:52:d0:df:30:e2:ce:49:20:13:8d:61:c7:cc:8d:fe:
fb:3d:59:b4:2c:3b:c7:07:08:20:0d:26:e4:6f:1e:76:b5:da:
97:ff:e9:2f:78:6d:dd:39:27:8c:17:52:05:ca:b8:ed:5a:83:
71:48:0e:2a:09:af:82:6e:85:cf:79:d5:38:93:56:3e:bf:78:
b6:21:a2:42:95:38:fc:aa:0b:30:d0:83:e9:1a:8a:13:a0:2c:
28:d3:f8:2d:71:1a:f1:35:b6:bb:7a:78:21:8d:55:31:46:58:
6e:74:4e:a7:6e:4a:89:83:7d:fa:77:9e:1c:cb:d9:56:e8:22:
4e:b4:05:29:04:99:eb:8e:db:65:15:84:e5:c5:4c:c6:19:0b:
bf:ea:1e:71:fd:80:ab:4a:c8:2b:22:04:43:79:d8:79:65:9c:
7a:87:ab:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:17:06 2025 by rpki-client