Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KV_2V1oRqMsPurE-6XSiR30Yu50.roa
File: KV_2V1oRqMsPurE-6XSiR30Yu50.roa (raw, json)
Hash identifier: A+sk0D0PcWjtaUM/r/n4zjn9f4RXaPQOVZSljGh/+U8=
Subject key identifier: 29:5F:F6:57:5A:11:A8:CB:0F:BA:B1:3E:E9:74:A2:47:7D:18:BB:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8B559FAB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KV_2V1oRqMsPurE-6XSiR30Yu50.roa
Signing time: Thu 09 Jun 2022 17:09:28 +0000
ROA not before: Thu 09 Jun 2022 17:09:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2337644459 (0x8b559fab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 9 17:09:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=295ff6575a11a8cb0fbab13ee974a2477d18bb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:56:a7:62:ea:74:ad:60:1c:13:54:04:76:18:
98:62:4a:9a:29:e6:76:7b:fd:7b:0d:7a:49:80:da:
b2:66:e8:73:94:49:f0:68:cb:6a:ed:e5:21:c6:d4:
3d:53:63:db:68:a1:7f:1b:2e:74:fa:2c:a1:78:80:
dd:49:53:ab:5f:8b:4f:fe:93:6a:87:11:25:1c:c8:
60:03:a2:94:51:56:40:97:60:8a:7f:cd:33:33:9b:
e1:ac:88:5a:63:75:41:f7:81:d9:65:b8:23:10:25:
21:99:d3:b6:ca:00:1e:1f:59:64:d4:63:b6:54:53:
7c:e1:95:6e:e0:49:2f:7a:8e:89:14:97:b6:f4:30:
f1:82:b1:54:42:b0:15:09:57:dd:e3:e8:fe:55:78:
c8:c0:a1:de:e9:f0:42:b3:f0:3b:7e:16:24:e8:63:
0d:7a:a5:58:b3:2d:a5:bc:9c:ac:53:28:e1:b2:05:
5b:52:54:11:24:9f:c3:89:c9:91:f8:39:9f:2e:98:
f3:13:7a:d2:92:41:e1:cc:3a:4b:32:6e:66:14:e7:
91:f2:4e:9a:94:94:00:a8:7e:fe:e4:f1:3b:bf:58:
f9:04:3e:d7:17:28:e1:54:39:23:4d:98:c9:6b:38:
25:1a:bb:81:2a:aa:0e:8a:9f:4a:fe:67:74:4e:5f:
62:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5F:F6:57:5A:11:A8:CB:0F:BA:B1:3E:E9:74:A2:47:7D:18:BB:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KV_2V1oRqMsPurE-6XSiR30Yu50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:eb:fa:60:a3:23:1e:a5:4c:f2:93:8b:24:fd:47:f4:50:e3:
76:c5:c4:ba:04:30:9e:5b:a7:1e:f6:78:ba:c1:40:71:be:c7:
10:18:46:36:a1:c2:7b:79:cb:a0:3d:eb:71:29:0b:32:5d:ee:
3b:8c:d6:4b:9f:b1:42:c0:b3:5b:0b:3a:1a:93:ad:47:89:03:
ba:8c:77:7e:76:4b:6c:1f:c0:03:d0:ea:27:c2:85:94:0e:0c:
bb:ed:aa:a8:52:ef:94:ba:59:72:42:f7:22:92:c3:32:2b:be:
36:b2:f3:83:97:75:14:41:d3:42:a9:64:a4:42:3c:f2:59:3e:
21:57:46:be:8d:d4:e7:c9:5a:33:ea:17:65:a4:04:fa:66:a0:
8c:bf:6b:c4:11:48:2a:a2:0f:f6:f3:ff:78:67:5b:f1:c5:67:
da:eb:5f:d8:eb:28:3a:8c:47:ff:ba:26:49:d0:af:53:ec:ba:
cc:9e:18:4d:bc:81:fa:1e:bb:c1:c0:29:f3:b8:9a:94:f1:c0:
73:c2:b3:d1:7f:6d:2d:e0:ff:5e:d0:e8:a9:ce:17:93:2e:d1:
5c:b9:d4:bc:97:d3:88:67:08:57:ef:3b:e7:26:ed:0d:48:13:
cc:77:be:90:4d:57:9b:53:12:e7:e6:ec:72:c9:8d:ef:9e:1e:
db:64:93:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:48 2025 by rpki-client