Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K_wEn6K_YGcpgvY5cmGPYh3nLYM.roa
File: K_wEn6K_YGcpgvY5cmGPYh3nLYM.roa (raw, json)
Hash identifier: Or7THOerYSz/AZf4NdZubA2+r4O39+EOJNn1L1crCHw=
Subject key identifier: 2B:FC:04:9F:A2:BF:60:67:29:82:F6:39:72:61:8F:62:1D:E7:2D:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885C0B4ED3ED8BCB1DADB07E8D040D9583
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K_wEn6K_YGcpgvY5cmGPYh3nLYM.roa
Signing time: Sat 27 May 2023 07:10:24 +0000
ROA not before: Sat 27 May 2023 07:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5c:0b:4e:d3:ed:8b:cb:1d:ad:b0:7e:8d:04:0d:95:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 07:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bfc049fa2bf60672982f63972618f621de72d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:22:ee:fd:20:5e:71:67:2a:c2:9b:37:50:
d0:6d:6d:93:eb:37:c4:9e:c3:4a:a9:61:65:3d:3b:
bd:e3:2a:85:f8:2c:f0:61:6e:ea:24:43:22:38:60:
56:96:d6:82:f4:14:bb:fa:cc:35:3d:fb:a8:b5:8f:
c9:41:5f:8f:b3:cc:f4:5e:50:cf:46:f0:67:62:c8:
2e:5d:77:fa:ef:b5:d8:cd:44:8d:c4:3f:26:1f:a8:
df:ac:61:ff:b6:37:0a:6d:98:dd:6d:56:ed:be:48:
36:e2:c4:fe:36:9c:ec:bd:24:55:e2:3c:a2:11:b2:
d8:bb:de:64:da:48:df:39:ce:12:89:81:0b:3f:bb:
ee:97:39:a6:a9:93:5c:07:11:7d:09:e2:be:5b:97:
c2:7b:d8:06:c3:0f:3b:dd:92:5a:06:4f:17:d7:cc:
4a:82:94:b6:95:83:63:3f:c0:36:87:77:ec:b5:9c:
81:75:b7:12:a9:41:e3:e5:76:1c:46:f2:ef:3a:65:
fe:4e:8c:37:df:73:6a:f9:3b:1e:ca:62:1d:24:b2:
2c:d7:68:f5:e5:3f:94:67:e6:ca:9c:80:00:97:d3:
55:7b:ac:d0:6e:ad:22:8b:7b:dd:a7:3a:b7:15:28:
2d:88:07:d5:07:f6:fe:d0:0a:e3:9b:23:8b:45:26:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FC:04:9F:A2:BF:60:67:29:82:F6:39:72:61:8F:62:1D:E7:2D:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K_wEn6K_YGcpgvY5cmGPYh3nLYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:94:c3:c3:68:51:49:60:7e:fe:34:b1:72:be:60:7f:a8:be:
d6:0d:1f:d2:0e:08:2d:5d:aa:8b:3d:d0:c9:91:d0:04:43:49:
ca:4d:ca:2e:1e:f2:c3:85:a3:c1:4d:59:b1:a4:39:6d:38:8b:
3c:34:07:fb:63:f6:7b:c5:58:2b:61:99:4b:0c:3c:2b:59:02:
de:89:f0:5e:88:b7:b4:0d:4a:8a:1c:df:b5:7e:08:a7:0d:43:
2a:3f:23:09:d5:2d:9b:67:7c:3c:81:bb:c4:ca:67:b3:13:42:
6b:4f:d5:f2:e0:1b:80:a8:59:4e:af:a2:f0:f5:ab:b2:8c:03:
23:7b:20:f4:6d:51:41:46:d3:c1:69:f2:65:2d:6f:12:ca:f6:
3d:66:88:c6:ca:b1:38:f2:ca:52:d9:e2:c5:e2:ea:54:6d:d8:
b1:eb:28:d7:4a:75:4e:0e:44:fe:28:8c:ea:77:77:33:95:bc:
7b:f6:ce:8a:17:cc:a4:c3:ca:51:d2:8d:62:be:22:79:41:56:
1b:10:c3:4a:3e:12:c1:93:71:5e:7a:e2:1a:0d:e2:23:67:e7:
27:fd:3e:15:8c:de:e2:1a:ff:45:e1:af:23:87:f6:68:eb:f9:
a1:2d:d9:41:aa:a8:93:a9:ed:b2:2d:97:81:e0:ce:03:ae:73:
39:b7:b2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:31:53 2025 by rpki-client