Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KR8IFLbCvpqbGnGArIvp9A0BQ9w.roa
File: KR8IFLbCvpqbGnGArIvp9A0BQ9w.roa (raw, json)
Hash identifier: PjVgUXMXr6pduPV0uSRMPcXA/roObar9HvUIhrCPlG4=
Subject key identifier: 29:1F:08:14:B6:C2:BE:9A:9B:1A:71:80:AC:8B:E9:F4:0D:01:43:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FF273FB5152BB4E9C26A76E68024E478
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KR8IFLbCvpqbGnGArIvp9A0BQ9w.roa
Signing time: Mon 20 Mar 2023 13:13:27 +0000
ROA not before: Mon 20 Mar 2023 13:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:27:3f:b5:15:2b:b4:e9:c2:6a:76:e6:80:24:e4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 13:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=291f0814b6c2be9a9b1a7180ac8be9f40d0143dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:42:a7:de:95:74:c5:c0:40:61:a9:6b:6e:ba:
5f:1a:9c:7f:da:62:a3:fc:22:7e:e9:5d:7f:b2:21:
1f:9d:27:d9:35:46:d9:81:24:46:38:7f:a4:ce:54:
9e:b8:42:bf:e3:bf:b6:3b:4d:f0:3c:c6:c1:1a:8e:
12:56:79:d8:36:eb:28:21:b5:94:40:1a:75:39:f1:
0b:39:e5:7b:c5:83:22:b3:65:a4:23:75:e5:6a:ec:
80:9a:24:b2:87:bf:b9:f1:4d:75:0a:97:39:ac:74:
85:28:27:cd:0a:4c:e2:44:7f:f3:d2:24:8a:a7:b1:
e8:53:1f:a2:b8:f1:f9:de:0a:dd:1e:2d:ce:3a:af:
fa:ae:89:b5:31:71:e2:c0:95:03:50:c5:e7:6b:2d:
f4:27:5e:0c:52:13:52:ec:6b:76:f1:39:1a:ad:69:
b0:b9:1c:a6:50:76:13:21:90:50:18:db:31:c0:43:
88:3d:da:f8:c4:09:ab:ab:4f:f5:7d:ba:95:12:a8:
ba:23:9b:15:08:a3:ff:e3:c6:52:5f:e1:e7:59:8c:
8f:8d:50:04:c6:95:37:f4:41:c4:24:8f:2b:78:3a:
69:fd:7e:1b:d1:8d:04:6f:3d:1b:ed:40:8c:42:56:
d7:db:7f:ea:83:23:59:15:09:fe:ac:a8:c8:cd:d3:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1F:08:14:B6:C2:BE:9A:9B:1A:71:80:AC:8B:E9:F4:0D:01:43:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KR8IFLbCvpqbGnGArIvp9A0BQ9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:dd:79:b8:82:19:d0:85:f8:64:71:13:8a:aa:3f:9c:4c:54:
77:c6:f7:f9:49:db:8b:45:c8:8a:28:a3:fd:e6:bc:af:60:6e:
02:2b:ab:5f:2f:f2:28:99:e3:72:a0:17:d4:e9:e5:27:36:a9:
f7:11:36:b4:fb:8f:8e:51:aa:ae:75:79:1c:c4:6e:73:03:52:
7c:a9:cd:27:04:72:c2:cd:76:0a:50:94:1f:69:b9:4d:35:58:
c3:aa:5b:91:5e:fb:de:66:56:8f:9b:0d:49:fd:b1:bd:fe:a8:
90:51:15:d6:37:d0:79:e6:78:f1:23:0a:8d:d6:60:2f:3b:d2:
a2:07:ef:19:12:68:03:f2:05:aa:65:47:f5:d9:fe:04:25:de:
5b:e5:38:01:29:d0:f7:47:9f:d1:34:f6:9e:5e:1a:4d:ee:b9:
45:43:a8:e9:f3:7a:f8:b6:9a:66:e4:c2:c5:ee:2a:ba:cf:21:
c8:e2:94:44:a9:10:79:5b:54:2c:33:89:a7:7c:d2:8f:45:18:
40:95:89:fe:c7:6b:a7:0d:27:bb:98:f3:bf:90:48:f2:64:1a:
b3:5d:70:a2:42:3f:b2:8a:f5:fc:c6:ad:39:22:e5:f0:52:bb:
11:9f:c2:a1:6c:ed:c2:aa:6d:97:22:3d:3f:d3:b0:b3:b6:3b:
b0:69:6c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:56:11 2025 by rpki-client