Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KV5_YWmR7vHWG_71cx4UpUlD-Fg.roa
File: KV5_YWmR7vHWG_71cx4UpUlD-Fg.roa (raw, json)
Hash identifier: jDqcVUgCbAv24U/8WyThiGNCprlLP9HvAnmqmNvc+WQ=
Subject key identifier: 29:5E:7F:61:69:91:EE:F1:D6:1B:FE:F5:73:1E:14:A5:49:43:F8:58
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DDDCBDC09195542B3CB67CAF739D56C5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KV5_YWmR7vHWG_71cx4UpUlD-Fg.roa
Signing time: Thu 10 Aug 2023 05:12:58 +0000
ROA not before: Thu 10 Aug 2023 05:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:dd:dc:bd:c0:91:95:54:2b:3c:b6:7c:af:73:9d:56:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 05:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=295e7f616991eef1d61bfef5731e14a54943f858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:48:5a:11:1d:2d:a0:75:96:b0:58:50:35:
d4:ae:f2:32:c4:4e:c8:59:88:01:62:f8:7d:3f:f7:
5e:a9:2c:f1:33:99:5a:df:7f:41:1c:a9:c3:85:e4:
55:3a:b6:85:de:d0:cf:d5:12:c0:a0:3c:51:ab:89:
b2:85:20:cc:81:cf:66:d5:c9:6f:34:c7:fd:17:cb:
24:c5:36:34:6e:fb:90:c2:29:f8:11:e1:b1:75:91:
66:b9:81:e2:b3:94:69:cc:7a:de:0a:b5:a1:7f:41:
61:ee:dd:b3:22:57:36:b8:d8:98:93:02:76:0a:46:
ba:ed:51:3f:3e:2e:25:f3:9d:15:e4:bc:5b:58:6c:
61:d1:94:d7:7a:e7:36:c3:7d:e9:36:61:b5:7d:17:
c6:29:a1:0e:ee:1c:f9:49:ed:22:83:f0:34:05:45:
f6:0c:b3:05:fe:2f:e2:40:1f:02:a9:52:f0:79:03:
b0:cf:8b:c6:4d:62:3e:28:d3:7b:55:8b:2c:ad:82:
3f:ce:0f:b5:d9:32:bf:8f:a0:a4:4a:90:0d:e0:bc:
31:51:3b:15:6b:65:99:36:b6:0c:b4:a8:69:0c:d8:
77:ef:b6:52:0e:65:88:53:3f:e4:62:51:7a:04:5c:
e1:af:53:ef:71:d1:79:ae:93:4c:b7:e3:c6:96:e7:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5E:7F:61:69:91:EE:F1:D6:1B:FE:F5:73:1E:14:A5:49:43:F8:58
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KV5_YWmR7vHWG_71cx4UpUlD-Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:42:58:72:e6:32:33:55:91:72:1d:86:09:b5:2e:43:16:a0:
8b:b0:ae:2d:4c:66:94:63:c0:eb:68:0a:9d:c6:5b:cf:41:19:
de:fc:c8:a8:77:d2:9e:88:be:b4:d8:00:48:c8:a7:f5:69:d2:
73:e5:57:0e:51:ff:b8:89:d7:28:65:a4:d1:46:47:91:9c:4a:
f1:4c:59:0d:1c:e3:ef:de:6a:63:48:f9:97:0a:ac:cb:e8:a3:
52:00:f1:73:51:3f:b3:ef:76:d1:35:cb:a1:65:34:a9:5b:38:
b5:53:2f:9a:68:90:c5:94:74:2f:7d:26:c5:60:88:46:ff:61:
2c:7f:40:5c:a3:c9:bd:17:34:92:4b:49:60:14:ee:2a:2a:ac:
13:53:94:b2:5b:57:c1:79:88:31:06:00:7c:76:7f:5f:97:7e:
8e:1a:f7:55:a2:d1:4a:97:cf:cc:f4:2d:bf:21:18:f4:b4:fe:
77:43:a6:7a:92:3d:0d:4e:33:a3:70:b8:59:9a:dc:2f:36:9c:
e1:08:32:c7:ff:8a:67:d7:31:65:3d:47:3e:d1:5e:58:13:e4:
bd:77:99:22:c0:7a:55:32:a4:fc:a6:58:75:fc:8f:6f:95:82:
95:cf:74:0a:9b:c6:b2:01:9a:23:7e:44:29:4f:8a:d8:c4:8d:
6b:30:ce:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:48 2025 by rpki-client