Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KdjK3byS2u-420TEikSULE9-M0Y.roa
File: KdjK3byS2u-420TEikSULE9-M0Y.roa (raw, json)
Hash identifier: 1hWvK+k9eDS5PQ9EqnXkACae6WdD5BBS4z0td80MDbQ=
Subject key identifier: 29:D8:CA:DD:BC:92:DA:EF:B8:DB:44:C4:8A:44:94:2C:4F:7E:33:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F3894A766EACA8FEBC7CF784FADCB0C0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KdjK3byS2u-420TEikSULE9-M0Y.roa
Signing time: Mon 14 Aug 2023 10:13:28 +0000
ROA not before: Mon 14 Aug 2023 10:13:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f3:89:4a:76:6e:ac:a8:fe:bc:7c:f7:84:fa:dc:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 10:13:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29d8caddbc92daefb8db44c48a44942c4f7e3346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:17:8b:95:79:f6:f3:2c:6e:e2:6f:26:21:60:
62:bc:d7:c2:fc:45:4c:96:de:ac:90:36:c4:8d:44:
bc:50:89:17:d9:a5:60:ba:04:6b:d1:34:04:82:95:
e0:1e:f4:df:64:3f:1a:05:97:7b:c3:fa:45:0d:2e:
df:3f:d9:f1:16:af:04:11:07:65:95:26:75:65:24:
e9:ab:10:fc:17:16:bd:b4:b5:94:ae:24:08:d3:97:
ef:45:f4:dc:2e:46:e9:dd:83:28:8a:35:cd:51:a4:
d1:09:72:86:06:13:33:25:78:44:ea:e3:7c:24:09:
10:59:28:99:21:95:0f:43:06:06:be:19:14:f2:04:
29:c8:81:3d:e0:3f:81:0f:0e:1a:cd:49:c0:7a:51:
41:31:0a:f3:19:89:2f:d7:83:f1:3a:02:6a:be:8e:
f4:26:21:39:ab:94:fd:2f:68:b2:7a:f3:04:d9:77:
bb:a5:e2:31:83:7c:55:98:53:5e:b6:8c:ea:3d:c0:
be:e2:7f:ae:a1:84:a1:3c:5d:e0:45:5d:b9:cf:31:
7e:db:41:a5:66:6a:50:1f:32:80:ae:bd:c2:8e:4b:
0c:2b:ac:61:fc:8f:61:57:53:08:a5:d9:90:6e:d2:
bd:21:7f:12:9a:e1:6b:6d:34:0c:10:da:4e:59:b1:
be:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D8:CA:DD:BC:92:DA:EF:B8:DB:44:C4:8A:44:94:2C:4F:7E:33:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KdjK3byS2u-420TEikSULE9-M0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:79:f7:8e:14:de:7e:24:bb:29:5d:bf:3d:ae:26:ed:b6:26:
c3:43:a5:1b:e7:a4:20:1d:b5:dc:03:58:8f:14:8d:7c:a8:66:
f1:5e:ee:89:99:77:a0:06:cb:07:fd:0c:69:13:3e:97:ba:d2:
2f:08:f5:79:31:af:ed:e6:77:40:b2:df:0b:17:73:fe:6b:80:
3c:8f:08:50:e9:66:ab:52:e3:de:39:57:0a:10:ff:8e:58:e5:
29:06:5e:d0:83:5f:99:5e:f9:4b:57:08:d5:e9:6c:7e:a9:0c:
02:00:f8:e9:d7:c5:d0:64:02:ae:24:e4:f6:ee:68:7a:92:32:
ad:55:4b:cf:09:63:c9:47:f9:9d:bc:a4:c2:d5:fc:36:a0:26:
dc:62:54:e3:21:f4:a4:9a:92:ed:a9:5f:5d:f8:e8:5f:34:77:
af:e2:7e:e0:4c:ed:37:0a:2a:9c:ed:cc:14:67:17:76:0d:80:
30:d5:14:69:f8:e1:00:62:63:fe:2d:3d:7a:3d:6b:5a:f8:b1:
47:83:5a:f3:ea:21:86:3b:3d:27:37:15:61:f2:73:44:0b:b4:
85:90:25:50:72:e4:3b:7a:d1:78:67:0b:c6:43:83:92:a0:8d:
74:a8:eb:41:75:77:6c:1b:a9:d3:3f:14:70:7b:63:35:9b:96:
d0:4a:9a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:28:39 2025 by rpki-client