Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KRknO9lFxySCfMSPwTyn368SC4s.roa
File: KRknO9lFxySCfMSPwTyn368SC4s.roa (raw, json)
Hash identifier: cbBbM6pwaEzWUEtCfx3l/vU/wbOYMGBGm+ub8wRp1nk=
Subject key identifier: 29:19:27:3B:D9:45:C7:24:82:7C:C4:8F:C1:3C:A7:DF:AF:12:0B:8B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189ED51A46FC0B9EE84142341130D59651C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KRknO9lFxySCfMSPwTyn368SC4s.roa
Signing time: Sun 13 Aug 2023 05:14:57 +0000
ROA not before: Sun 13 Aug 2023 05:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ed:51:a4:6f:c0:b9:ee:84:14:23:41:13:0d:59:65:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 05:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2919273bd945c724827cc48fc13ca7dfaf120b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:55:76:56:84:18:53:4e:ff:df:21:d0:5f:21:
f1:6f:97:2a:96:3a:35:f1:40:fd:2e:ea:5d:5d:11:
31:39:e2:f8:e2:69:15:80:1b:74:91:85:f3:f9:f9:
22:58:e7:fb:ee:62:90:e2:04:fd:f7:f4:60:7d:48:
66:54:66:23:30:55:04:42:10:79:a8:56:4d:a1:be:
83:88:04:6f:1e:e3:8d:97:3a:5d:37:d8:58:45:47:
1d:c3:fd:80:ac:6e:ec:02:ff:3a:e6:c8:3d:38:02:
02:71:b8:a5:50:e9:ec:68:da:9d:ac:94:03:50:2e:
2c:05:c8:11:1b:14:85:7e:9f:5d:69:bd:62:6b:89:
80:1b:00:2c:7b:7b:6e:24:4b:4b:fb:56:f9:56:6f:
10:79:8c:a7:8d:b9:2f:52:05:86:ff:80:38:5e:98:
f1:2a:3b:20:1d:b2:ec:e0:9c:7c:04:2b:4c:9d:7f:
2e:9a:e1:54:44:12:9c:24:5a:2a:80:ea:45:06:fb:
79:a0:97:0c:01:65:9e:50:b1:d4:f1:15:b8:c4:50:
f8:dc:99:db:fa:d4:24:75:d9:28:03:b1:f7:de:0f:
09:62:bd:09:7c:24:f7:10:cc:47:9e:31:53:14:ae:
0f:d7:2f:3d:95:e1:ba:ae:cf:36:22:c1:6b:aa:35:
21:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:19:27:3B:D9:45:C7:24:82:7C:C4:8F:C1:3C:A7:DF:AF:12:0B:8B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KRknO9lFxySCfMSPwTyn368SC4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:00:ea:6c:35:82:1e:7d:9a:5e:e9:77:84:5a:5f:d0:db:6a:
5b:15:7b:94:3f:76:54:53:6f:b5:d2:dc:d0:6b:55:59:56:dc:
8f:23:a4:0f:28:00:74:80:a3:68:3e:07:32:9f:7b:dc:31:8b:
6b:5e:24:73:83:a9:79:40:cb:0d:a2:76:2d:3e:47:eb:77:47:
2c:b7:c8:8d:02:7d:cb:02:5c:aa:9b:3a:23:9b:95:43:24:45:
e3:29:ab:e3:47:ca:6c:99:4e:08:08:13:75:a2:d6:35:53:b9:
ed:2b:7d:76:af:d7:ad:17:a7:d7:50:59:9e:3d:b6:d9:1e:02:
ff:0d:93:d1:65:6b:03:99:f8:7f:f4:09:52:4f:a8:4b:a4:91:
7c:3c:68:1a:47:19:6c:cb:69:0e:5b:48:33:76:3e:ce:3e:16:
ab:9a:e6:67:5f:03:f9:aa:41:0a:1f:d1:ba:50:b6:c9:57:b5:
8e:37:55:2f:da:5d:6f:8d:bd:00:7e:96:ae:0c:83:0d:b7:ec:
85:d5:78:48:3d:b2:5c:48:03:93:e2:87:8d:ab:50:cc:52:ab:
cc:aa:9a:c3:70:81:ea:16:0a:81:89:bb:ba:0a:36:bd:73:76:
76:b6:df:e0:c0:90:f4:87:01:2d:a1:ce:16:d5:a2:a3:0c:1a:
b1:e5:f9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:45:48 2025 by rpki-client