Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KW7i7QntD1fN0YunL4s0Tu4HyRE.roa
File: KW7i7QntD1fN0YunL4s0Tu4HyRE.roa (raw, json)
Hash identifier: Tw3GxETQ7H70+oTNPcvEsmWbYAz12Apfht7sT3m0KAU=
Subject key identifier: 29:6E:E2:ED:09:ED:0F:57:CD:D1:8B:A7:2F:8B:34:4E:EE:07:C9:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3D5C632F6145776E277D0AC4654FA456
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KW7i7QntD1fN0YunL4s0Tu4HyRE.roa
Signing time: Mon 28 Aug 2023 18:16:19 +0000
ROA not before: Mon 28 Aug 2023 18:16:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3d:5c:63:2f:61:45:77:6e:27:7d:0a:c4:65:4f:a4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 18:16:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=296ee2ed09ed0f57cdd18ba72f8b344eee07c911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:e0:72:35:1e:18:2f:58:aa:da:31:f8:91:
3d:92:78:8e:95:59:d0:1f:95:48:ed:13:bc:01:19:
77:e7:23:43:99:84:a8:50:cd:15:95:7c:62:67:9c:
69:98:81:7a:a5:8a:38:52:8a:f0:e0:ab:13:0c:29:
7a:38:1c:81:97:44:5a:8b:58:fc:16:eb:fa:08:8e:
25:60:63:0e:29:1c:32:8d:de:d2:d0:75:63:b4:43:
36:57:c5:c3:eb:e5:e4:43:cc:3d:1e:4b:a0:96:e1:
bb:90:13:03:18:25:f8:f9:ab:4c:67:ee:ac:01:10:
59:47:18:59:b5:49:cb:11:cf:b7:08:55:cc:83:5a:
1e:eb:87:84:c7:3d:32:e1:e0:33:5e:be:85:64:3e:
be:35:29:c2:46:b4:b3:1d:21:2a:b5:e5:69:a5:e0:
19:70:b8:e7:bf:98:db:b4:75:b2:ee:85:40:fe:14:
40:47:ee:ed:82:9f:be:c4:66:f1:64:65:a8:da:31:
df:f5:17:80:4a:ed:7a:a9:62:19:f7:f8:53:8d:01:
80:8c:bb:24:46:de:2c:2b:a3:67:5d:d5:44:48:03:
78:d2:75:29:5e:13:d5:d1:15:32:8e:bd:d7:be:db:
dd:f1:4c:a8:a1:ab:34:ba:aa:2b:15:02:66:66:b9:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6E:E2:ED:09:ED:0F:57:CD:D1:8B:A7:2F:8B:34:4E:EE:07:C9:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KW7i7QntD1fN0YunL4s0Tu4HyRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:6a:c8:2b:34:08:3b:32:07:0c:3b:25:1b:3d:f3:24:bb:ed:
21:81:74:f9:f3:b8:45:02:8e:c6:c7:b3:10:3a:88:50:2a:f7:
28:75:f8:75:43:db:37:ad:c8:d6:e9:35:b3:7f:e3:87:bd:14:
d3:d6:f3:8c:93:e9:40:4c:ba:bc:59:79:87:c4:36:49:6a:57:
fd:d5:9a:47:4d:59:b2:6c:ad:6b:b5:37:e1:71:06:ac:5e:f7:
98:b1:54:e6:d9:d7:4e:61:8e:76:31:86:2a:b1:46:69:75:7e:
7f:2e:14:c0:12:f3:2d:e1:ee:81:d5:4f:f6:cb:a3:d6:72:2f:
e4:af:95:31:97:91:ec:f7:90:37:d8:32:b2:87:d1:53:bf:bc:
96:a5:02:34:8e:38:b1:3c:18:e1:af:17:bc:29:66:b4:c3:a9:
74:8b:e2:4d:16:d0:50:3c:97:e3:78:75:c5:af:cb:53:2e:54:
8a:9d:de:fd:15:b3:15:d5:60:66:c7:5a:49:bc:48:a1:d4:b2:
5c:d0:bf:d0:60:63:77:16:e7:0c:88:26:54:47:5e:21:a2:c3:
b3:84:6a:4c:4f:93:05:4c:b8:5a:bc:cb:a1:8b:86:dc:7b:00:
a7:10:6f:ef:c3:cf:24:31:27:28:de:70:b4:a3:4b:9b:82:5f:
2d:f7:18:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:13:59 2025 by rpki-client