Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kbk-lc_K115kra8YoXOYKwnMpio.roa
File: Kbk-lc_K115kra8YoXOYKwnMpio.roa (raw, json)
Hash identifier: 0fuJdA1ipiskgWCJsbd16MakKzRjLoXeUfkb1SmkWYM=
Subject key identifier: 29:B9:3E:95:CF:CA:D7:5E:64:AD:AF:18:A1:73:98:2B:09:CC:A6:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01887AF3198E49671FE1697C60B422C4F64B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kbk-lc_K115kra8YoXOYKwnMpio.roa
Signing time: Fri 02 Jun 2023 07:12:12 +0000
ROA not before: Fri 02 Jun 2023 07:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7a:f3:19:8e:49:67:1f:e1:69:7c:60:b4:22:c4:f6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 07:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29b93e95cfcad75e64adaf18a173982b09cca62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:cf:9f:3b:dc:61:e8:39:ba:11:35:41:41:
38:35:ed:15:76:41:95:54:3d:ce:57:b8:95:97:40:
87:8f:a5:58:c0:20:6f:17:59:fd:e5:38:0e:7b:99:
19:6e:60:d9:b6:0c:dd:8f:0e:8a:7b:93:2a:f4:2c:
d9:d2:3a:3d:19:31:b9:a7:84:bc:b7:f6:e2:c6:6e:
fb:b3:b4:05:82:b7:c6:34:44:18:f2:21:b1:6f:cb:
19:7d:1e:ed:17:9d:d9:33:fe:7a:00:63:e8:eb:76:
06:c7:c3:5f:9a:dc:6d:e9:50:fa:4b:2b:dd:c7:51:
a0:78:71:5f:ce:62:78:59:1e:59:7b:f7:57:36:02:
84:96:54:6a:79:d9:2d:c4:ca:12:c1:be:a6:06:b6:
a7:34:ca:37:e8:25:a0:09:62:48:41:1d:dc:b1:41:
7a:fc:eb:b5:9f:b4:b8:64:df:c0:42:80:de:74:53:
65:61:49:57:db:6c:67:9d:16:55:4a:74:45:39:3d:
c8:a3:8a:01:9c:68:66:a9:be:49:50:fc:97:22:8a:
6c:13:fd:65:48:bf:38:36:2f:90:59:f7:92:fb:b0:
71:7e:09:9b:9b:a7:81:ae:02:43:08:9b:a0:22:a6:
c9:5c:aa:3f:74:c5:5b:f5:34:67:d5:8f:74:2f:40:
6f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B9:3E:95:CF:CA:D7:5E:64:AD:AF:18:A1:73:98:2B:09:CC:A6:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kbk-lc_K115kra8YoXOYKwnMpio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:20:92:0a:c3:51:e5:6d:e2:eb:4e:2f:9a:9d:46:16:b4:47:
66:ec:52:f8:ff:a4:45:ba:e8:e5:4e:da:a8:72:ca:b9:c3:e1:
18:89:32:ea:60:4e:23:63:f0:01:59:29:b0:a5:7f:73:01:62:
2b:29:02:98:42:47:4c:ff:ff:33:ba:00:c8:c3:25:9f:e9:6e:
b2:24:1b:36:01:8a:e3:63:0d:be:f6:6b:96:87:3c:cf:e3:a0:
9c:fa:11:0a:0d:17:78:6c:e3:53:c7:2b:0e:22:40:fa:1b:62:
f4:5b:ba:c7:3c:c4:08:04:39:bb:e4:7f:81:b6:fd:76:95:13:
ec:59:9a:19:e0:81:2f:c5:2c:aa:c5:d2:e6:c7:2a:5b:77:eb:
3f:37:b3:56:0f:3c:cd:89:87:16:b8:63:64:9d:3c:dc:6f:c0:
b1:6f:78:76:0a:eb:26:ac:62:9a:78:e6:87:3a:bf:48:38:e0:
fe:26:b1:d5:34:13:d9:25:18:4d:21:20:71:43:44:42:ba:5a:
7e:ab:ed:f4:e9:04:e3:d7:77:fe:33:ed:53:c7:12:a6:0e:ad:
e9:1b:62:8c:8f:1a:39:9d:b1:09:fb:23:69:96:cc:0e:b8:d5:
ce:b3:72:7f:b5:be:62:dc:62:43:ac:46:59:72:93:61:bb:0f:
ae:9c:71:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:02:07 2025 by rpki-client