Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KZlig0luQmUcMn8wlhB5g1-aeQw.roa
File: KZlig0luQmUcMn8wlhB5g1-aeQw.roa (raw, json)
Hash identifier: 4Ed5FSzK8FUdMAPoD/jNJwv+6KK2YsnArx24cSDWaHc=
Subject key identifier: 29:99:62:83:49:6E:42:65:1C:32:7F:30:96:10:79:83:5F:9A:79:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B6653FC2D0F57D722B80C235A4C0059D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KZlig0luQmUcMn8wlhB5g1-aeQw.roa
Signing time: Tue 25 Apr 2023 03:11:41 +0000
ROA not before: Tue 25 Apr 2023 03:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b6:65:3f:c2:d0:f5:7d:72:2b:80:c2:35:a4:c0:05:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 25 03:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29996283496e42651c327f30961079835f9a790c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e7:64:2d:38:19:6d:50:5b:ff:c6:5d:35:22:
7e:53:ae:03:01:f4:0c:40:70:10:28:a6:26:7a:48:
9d:13:ba:76:5f:28:35:83:e7:96:3d:3e:3d:6e:54:
39:d9:3e:7b:bd:62:65:fc:9a:0f:a5:92:7a:ce:79:
22:83:a8:13:6f:7c:fe:e5:b2:4b:42:cd:ff:56:3d:
73:47:f1:b0:26:93:7f:f7:44:d9:d2:98:90:da:d0:
1b:f2:cd:c0:c9:d6:eb:56:94:4d:73:12:a3:c1:07:
b0:37:be:20:89:4b:76:d9:19:ad:47:c5:b7:bd:9f:
e7:ae:b2:be:30:92:13:d2:6d:f4:cd:06:56:8d:36:
67:e4:c0:00:d3:5c:dc:83:7e:52:0f:c6:17:b7:e6:
64:56:f1:ee:aa:0e:9c:c0:a2:79:27:f6:59:24:95:
51:68:68:53:85:14:d1:0f:a2:15:c3:37:86:55:9e:
f8:51:4c:29:f1:17:09:a9:19:3e:f0:e3:d3:89:89:
21:92:d3:03:d4:b8:03:3c:0c:a9:0f:88:a0:73:57:
2a:d5:ac:51:75:ee:14:95:80:b1:9f:1d:4d:62:82:
71:43:b6:33:0c:4d:50:4e:03:57:87:b6:71:b0:d6:
57:8a:ff:d9:75:be:01:24:94:2c:a0:4a:df:fe:f0:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:99:62:83:49:6E:42:65:1C:32:7F:30:96:10:79:83:5F:9A:79:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KZlig0luQmUcMn8wlhB5g1-aeQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:ce:bc:34:8f:78:09:b9:6c:d3:15:90:79:02:4b:1e:98:ce:
91:fb:af:9f:f1:66:04:86:60:c2:c1:03:5c:12:c5:f2:cc:e4:
39:ab:33:23:8c:06:22:8c:81:2d:69:6d:8c:27:49:3d:8b:ed:
ff:fe:92:e8:09:3b:ab:e8:94:be:d0:eb:0b:67:4f:8a:9c:f6:
1c:2f:29:c2:a5:7c:22:03:7c:04:06:ce:78:e8:62:1e:ab:16:
b9:88:b9:37:6c:72:6b:98:1a:c7:13:55:10:20:6e:fb:45:ab:
64:70:e0:04:15:4d:3b:d1:85:50:d9:11:20:7f:14:e4:95:68:
f4:b8:c1:5a:df:eb:01:31:f3:97:74:8c:82:71:bb:40:6d:93:
fb:4e:99:1c:6a:8e:64:6f:eb:b5:49:5e:34:2c:e8:88:83:93:
d8:53:4c:69:7e:96:d6:8d:09:53:08:ef:c9:34:98:e2:e1:14:
49:4c:2e:c9:cf:87:42:6c:7f:9e:6a:cd:9f:c3:8d:7c:e6:69:
83:42:48:74:e4:fb:e7:38:67:9b:6c:1e:5c:54:09:2a:f2:2c:
69:c5:88:a3:e9:92:42:b0:83:0e:22:87:da:34:cd:44:da:28:
c0:bc:6a:72:71:ad:55:bd:4a:bf:62:06:69:19:2e:b8:d4:2c:
74:d0:f0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:26:01 2025 by rpki-client