Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KQymzLhJqGLkZFe_HBPeZiOcV8Y.roa
File: KQymzLhJqGLkZFe_HBPeZiOcV8Y.roa (raw, json)
Hash identifier: yM9mzbvMXSEBwFL7cSEG/PykMkfh4kFtRjZ822bXduo=
Subject key identifier: 29:0C:A6:CC:B8:49:A8:62:E4:64:57:BF:1C:13:DE:66:23:9C:57:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189653DBBC6CE8F33924F4B9277B332B84D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KQymzLhJqGLkZFe_HBPeZiOcV8Y.roa
Signing time: Mon 17 Jul 2023 19:04:51 +0000
ROA not before: Mon 17 Jul 2023 19:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:189:653d:6529/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:3d:bb:c6:ce:8f:33:92:4f:4b:92:77:b3:32:b8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 19:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=290ca6ccb849a862e46457bf1c13de66239c57c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fa:0b:54:37:d9:ff:e3:6c:b9:fa:a5:82:7d:
e2:5d:3d:6d:44:aa:41:d2:87:90:89:f2:cc:f3:32:
51:07:15:22:09:3f:75:01:a2:90:1a:18:74:bd:9d:
e3:d2:81:d2:dc:f4:d6:21:2b:15:60:b7:b2:8c:8c:
86:91:3d:0a:5a:56:30:10:cd:7e:98:2c:f3:e6:30:
64:e2:69:73:5b:47:fa:f0:c3:37:dc:09:20:53:ca:
96:a0:fd:e0:09:80:f7:6a:48:5c:7b:73:ac:21:a4:
9b:41:76:a0:a9:e2:66:dd:91:3c:f9:4b:6b:38:21:
93:13:c8:4e:6a:10:46:45:6e:5c:2b:45:d3:3f:69:
74:a9:0c:d4:d7:9e:47:ec:b5:3d:05:7b:f6:7c:d8:
4d:f1:a3:08:ac:80:4c:7b:5c:88:38:b9:c4:fb:f4:
ed:7d:bf:6f:be:4f:4e:03:1f:35:f9:f5:ac:3a:33:
c7:7a:e7:44:b9:31:17:9a:77:e9:d4:e1:b9:50:10:
5f:c8:3d:a1:6f:fb:9d:de:97:99:14:06:6d:25:44:
5a:77:79:ec:b0:37:0d:cb:e6:42:ba:ef:e9:c5:7b:
a7:e2:d9:09:74:06:d8:90:c9:e3:41:ed:3a:ef:90:
fc:6e:5a:3b:e7:b8:7a:19:bb:09:a6:87:f3:a5:26:
84:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0C:A6:CC:B8:49:A8:62:E4:64:57:BF:1C:13:DE:66:23:9C:57:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KQymzLhJqGLkZFe_HBPeZiOcV8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:a7:40:00:e1:a4:8b:e6:0f:c2:47:eb:b0:39:a5:30:23:f2:
4b:78:d6:e3:a4:95:89:02:4c:44:04:37:40:9c:c5:b7:46:61:
00:b2:27:4d:d9:59:41:d2:ae:06:61:49:35:f8:1c:fb:9f:da:
a9:84:b5:6a:6b:58:ea:67:44:cc:94:79:e3:90:64:9b:3e:08:
24:fc:5e:2e:6a:40:ae:c1:4d:12:01:9d:5f:e1:7f:91:1a:85:
b2:2e:8e:aa:16:c5:77:41:7a:1c:fc:2a:b5:bc:d8:8c:23:ea:
46:db:ce:d8:82:87:5f:03:a0:57:e2:fe:1d:84:27:fc:62:69:
f6:04:a2:a7:b7:19:13:fe:08:e5:5a:e2:c6:0e:c6:b6:af:eb:
0c:25:60:f1:19:e8:f2:d3:13:f0:90:a2:af:6e:dd:f2:0c:55:
de:df:0d:d4:28:b9:86:e5:f8:91:c8:99:18:4f:49:14:6b:51:
1f:6c:78:c6:78:c8:de:f8:9d:07:20:85:43:35:ec:1e:a9:1d:
f8:1f:cf:44:fc:97:f1:d2:0b:ef:ca:1f:1c:b5:43:82:36:a4:
fe:98:71:6f:f7:27:2e:45:27:b0:c7:41:e3:5f:3a:1f:0c:f8:
b3:d6:b7:6e:fb:21:c3:1b:52:3f:de:6d:c3:47:51:90:f4:12:
df:a3:b1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:27:29 2025 by rpki-client