Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KQd6FUy2bojunrNgq33gEcjD0Os.roa
File: KQd6FUy2bojunrNgq33gEcjD0Os.roa (raw, json)
Hash identifier: jPD4iLSVcbw1mPBkjxVZ9AzmTWYmNmgjbMUF9xh1Lq8=
Subject key identifier: 29:07:7A:15:4C:B6:6E:88:EE:9E:B3:60:AB:7D:E0:11:C8:C3:D0:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6DE0F9B2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KQd6FUy2bojunrNgq33gEcjD0Os.roa
Signing time: Sat 26 Feb 2022 13:08:35 +0000
ROA not before: Sat 26 Feb 2022 13:08:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1843460530 (0x6de0f9b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 13:08:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29077a154cb66e88ee9eb360ab7de011c8c3d0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:48:10:fa:dd:23:83:4a:d4:ba:ec:d0:e1:
a2:0d:25:f9:4a:36:41:3b:73:66:fe:37:a5:f3:36:
97:0b:9b:59:11:e8:09:e2:5f:e9:d4:e5:e3:b0:13:
f9:c4:3d:08:c6:e0:9d:c6:12:ac:73:82:90:c5:64:
fe:49:f6:34:a1:32:fb:40:2f:be:96:65:a7:08:33:
67:d1:01:0d:13:13:77:f3:f2:38:0a:24:bd:66:0a:
de:d9:a1:9b:df:15:e5:6d:9e:77:28:6f:e5:e9:c3:
3c:dc:46:d8:f7:0f:2d:2f:ee:b3:23:e0:83:12:dc:
f0:87:e6:29:0c:ba:75:5f:de:2f:a1:54:de:0b:ea:
07:d1:fd:23:02:ac:5e:6a:81:5c:31:11:25:3f:1a:
09:7e:c0:fc:89:77:0e:8c:54:7d:e1:ac:00:e1:18:
74:58:58:14:d3:42:f2:52:7a:e2:d4:b4:66:10:c8:
93:71:7a:3c:39:3f:63:eb:18:17:b0:32:11:2b:28:
3f:ff:d3:55:2d:de:9f:e4:a9:8b:e5:b1:89:7c:cb:
da:1b:ec:52:87:2a:68:74:f0:29:f8:4a:75:40:f1:
f0:ef:8b:cd:e6:fd:79:16:39:39:96:e1:98:24:81:
5f:b4:6d:59:51:22:d1:3e:73:ef:d4:2a:19:7b:87:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:07:7A:15:4C:B6:6E:88:EE:9E:B3:60:AB:7D:E0:11:C8:C3:D0:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KQd6FUy2bojunrNgq33gEcjD0Os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:97:78:0e:dd:33:eb:0d:ae:04:fb:48:7d:9f:27:46:9f:22:
4f:e2:a5:10:84:88:6b:9c:24:18:30:31:1c:a2:43:e0:cb:e2:
b7:36:8e:76:55:a4:4c:a3:f0:e3:67:9b:4f:d6:8b:88:33:01:
db:ed:b5:54:f4:ff:97:58:d0:99:bf:27:ac:a4:a4:26:af:fa:
d9:aa:1a:2e:b4:fe:d5:a8:55:30:93:a2:cd:af:ac:80:f4:c7:
a2:47:e0:b5:c5:ef:0c:af:76:49:95:38:fe:87:01:95:9f:7f:
b8:f2:f6:c8:23:c9:3c:43:35:d6:2a:df:1b:1f:f1:2f:63:75:
e5:83:f1:75:cc:fb:a0:6c:4a:58:b4:a5:a6:8b:ad:53:6b:38:
db:2c:b5:e5:1d:e5:c6:d9:bf:73:9c:67:4c:ca:94:04:f8:19:
59:13:52:f6:88:13:e9:32:78:23:a1:2d:ae:d7:19:7a:ec:40:
b9:08:bd:9a:0a:6f:e6:b9:94:0b:24:45:fb:44:58:67:43:88:
28:4e:2b:9d:a8:07:10:20:f3:69:f6:af:d6:18:d9:31:ef:f2:
80:5b:15:4f:d3:17:2d:3c:88:f8:b6:34:e9:6e:8c:ee:1f:5b:
60:1d:b9:f5:c4:bf:5b:16:70:8c:e7:5c:72:87:0e:40:9e:03:
9d:4f:dc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:51:04 2025 by rpki-client