Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KTObFYtAGZ8WQ4quEYM0OecQfi0.roa
File: KTObFYtAGZ8WQ4quEYM0OecQfi0.roa (raw, json)
Hash identifier: B81sLT+I9NCsGiwE4xumDCgIX5k/8Uez2WMwHJTMx14=
Subject key identifier: 29:33:9B:15:8B:40:19:9F:16:43:8A:AE:11:83:34:39:E7:10:7E:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7E2C5EB6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KTObFYtAGZ8WQ4quEYM0OecQfi0.roa
Signing time: Sun 24 Apr 2022 20:09:26 +0000
ROA not before: Sun 24 Apr 2022 20:09:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2116837046 (0x7e2c5eb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 20:09:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29339b158b40199f16438aae11833439e7107e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b9:07:1f:50:33:d8:6b:13:b0:7e:ea:17:4b:
02:0d:ac:84:c6:cd:88:e4:ff:5a:e9:f4:74:f8:92:
5f:c3:4c:85:80:4f:5d:c0:c1:0f:6a:6c:be:2e:6b:
df:34:9d:14:70:08:ad:75:f9:7e:9e:5e:49:ff:68:
89:98:8e:cf:4a:3e:4b:dd:eb:fc:4a:42:9e:e6:16:
d3:e8:b8:20:55:61:cf:d6:c9:80:81:a0:90:94:81:
02:16:d1:c8:00:46:3b:d0:2d:74:0b:4d:33:92:3b:
78:3f:34:64:ae:4c:1e:01:ab:b6:a9:81:8c:6d:cf:
aa:41:f7:ce:bb:d7:33:57:35:98:65:b0:61:af:a7:
88:1a:6d:a9:c6:9f:0a:a0:c3:6b:b4:5f:01:57:cc:
ea:20:5d:65:17:93:08:42:a5:f2:82:94:50:a1:b8:
d4:d8:c8:f3:2b:4f:c8:41:17:71:6b:90:15:d5:ee:
e7:92:b5:ce:2e:83:50:1a:88:90:39:d8:56:42:6c:
8d:25:f4:29:8e:cc:76:ac:80:d9:a7:03:7a:d8:b4:
c7:3c:7a:49:d9:e1:75:80:94:80:e0:2c:3e:cd:e4:
aa:52:b6:a8:7e:70:57:c5:66:85:f0:35:17:4d:49:
fa:9c:6f:ba:e2:02:b5:db:8c:22:3c:0f:30:ef:00:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:33:9B:15:8B:40:19:9F:16:43:8A:AE:11:83:34:39:E7:10:7E:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KTObFYtAGZ8WQ4quEYM0OecQfi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:e3:71:ed:fc:a0:df:33:e3:93:f0:52:34:91:1b:0b:f8:fe:
b2:12:8a:3c:27:d2:ca:56:e0:2c:37:5c:02:ac:b8:56:73:35:
57:35:d2:b1:93:e4:89:28:10:65:cc:43:5c:48:33:27:b6:b9:
5e:89:96:24:e0:32:61:73:1c:95:1a:9c:4e:13:0a:33:ca:01:
7d:c9:cd:4b:19:49:8f:80:83:47:dd:42:26:62:91:04:5d:75:
57:7f:71:cf:9d:78:36:cc:b5:1c:17:f2:9a:7b:de:cc:3c:da:
66:d5:00:ab:fc:0c:b5:de:d8:cc:6d:02:a0:54:e2:cb:f3:e3:
a7:86:44:9b:13:e0:9c:bf:4e:6b:f6:7d:bf:64:b7:7f:49:7d:
77:e0:99:82:af:b2:8b:3d:00:95:a7:a2:53:05:a9:dc:c6:8d:
6f:2b:a9:d8:f7:80:56:df:1f:53:d2:cc:47:6e:22:68:e9:cd:
f9:4f:30:74:c6:bc:5d:b2:26:52:14:3a:67:07:23:3c:d2:34:
73:d4:b2:59:ed:a8:60:3b:79:59:72:79:b9:dd:00:72:c5:96:
9d:ea:0c:c3:6d:2c:ec:20:26:ba:14:4c:43:2d:91:42:7a:32:
8c:72:c2:0c:9c:6c:07:e8:2f:a1:9e:8e:a9:10:5c:0f:66:0b:
b8:64:5c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:05:28 2025 by rpki-client