Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KdeuCWCTbbK-Wa4M9-_Onn2uzJ8.roa
File: KdeuCWCTbbK-Wa4M9-_Onn2uzJ8.roa (raw, json)
Hash identifier: UGF4Pncv/AlocNLAo0HHcW7gnNcEQHBzkQ6w3U+sR3M=
Subject key identifier: 29:D7:AE:09:60:93:6D:B2:BE:59:AE:0C:F7:EF:CE:9E:7D:AE:CC:9F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018802C697A52A2195806099514BD583EA62
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KdeuCWCTbbK-Wa4M9-_Onn2uzJ8.roa
Signing time: Tue 09 May 2023 23:09:09 +0000
ROA not before: Tue 09 May 2023 23:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:02:c6:97:a5:2a:21:95:80:60:99:51:4b:d5:83:ea:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 9 23:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29d7ae0960936db2be59ae0cf7efce9e7daecc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:95:d9:c3:8b:47:39:5f:7a:a5:00:dd:8e:87:
95:76:1d:6c:26:e1:eb:08:47:ad:c8:bc:8a:e4:85:
ff:56:c4:03:d9:0c:94:d4:65:aa:8f:e6:85:55:ca:
09:f6:92:19:a8:b2:43:5f:9b:b1:d0:7b:af:eb:b2:
64:cc:08:09:c2:e7:75:6a:96:59:7a:3d:60:50:27:
62:48:89:22:38:4b:25:3a:de:65:c2:25:64:0e:79:
07:9f:ea:9e:6c:3a:a2:2c:04:da:6d:ce:48:c2:54:
3e:79:8b:c6:f8:5c:52:5e:0f:a9:26:d9:42:d0:28:
5f:7c:ec:a0:99:c1:32:b0:1a:96:47:27:32:0c:6e:
fb:e6:4e:6f:a3:0b:c6:35:e4:17:d1:e1:4a:15:f7:
b5:cb:21:51:10:59:56:d8:73:44:5c:1a:0b:f9:43:
cb:70:2b:c8:b3:d7:d3:cd:f8:9b:e3:7e:0e:72:88:
f8:e3:29:48:c3:97:e6:25:4f:ee:03:67:70:2a:e5:
52:66:04:5c:3c:88:0c:eb:b3:08:58:67:29:04:a0:
9c:95:fd:1b:8e:7d:78:28:8f:c6:b8:05:db:b0:30:
df:c1:1f:fd:ae:e5:aa:1f:c4:b3:bd:94:2a:0e:a9:
38:2f:11:3d:05:fa:8b:1b:81:45:d8:29:32:fe:58:
c0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D7:AE:09:60:93:6D:B2:BE:59:AE:0C:F7:EF:CE:9E:7D:AE:CC:9F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KdeuCWCTbbK-Wa4M9-_Onn2uzJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:55:4d:08:cc:ab:e9:a5:62:8e:3b:6b:db:7f:76:81:7e:68:
36:08:39:83:c3:45:58:1b:04:5a:7e:58:fe:34:12:9e:a3:ea:
98:18:ae:4c:ac:a3:5b:96:0d:4a:96:70:b9:09:b5:04:84:f5:
02:5d:34:3a:49:52:14:c1:a5:6c:b2:42:5c:7e:41:20:2e:58:
48:6d:97:32:41:e9:8e:ce:c8:c3:e5:2c:d5:56:81:a3:75:17:
18:4d:42:34:ca:5d:77:a2:c5:a8:6d:e6:d5:10:33:2d:19:14:
e4:cd:ef:8f:a5:62:61:92:7c:74:20:21:92:bd:21:9d:20:f2:
72:b7:78:bb:33:39:8e:6b:e5:1f:f4:54:db:6c:6a:ab:bb:84:
ec:23:71:40:07:2e:1d:17:19:3e:3c:76:4a:21:c2:7e:7d:03:
c8:ad:36:ad:5c:0d:3b:53:ae:a5:3a:85:e0:73:76:70:5c:38:
4f:1a:0a:0e:22:fa:1d:91:9b:56:9d:01:2b:5d:a8:01:81:de:
8b:63:13:23:48:d0:14:54:0f:ed:ba:9f:22:c7:95:be:11:6b:
f1:86:eb:38:79:18:ba:23:a8:63:43:ef:ad:d8:2c:e3:b8:f1:
c2:a1:8d:ce:3f:da:53:b3:2c:c1:98:dd:30:12:7f:e9:66:7a:
81:3f:5e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:08:49 2025 by rpki-client