Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KgSIvC761Z0_nIDAdi2a6ZRWWyM.roa
File: KgSIvC761Z0_nIDAdi2a6ZRWWyM.roa (raw, json)
Hash identifier: 1iCDmF6CaAHbav9PUSGxnhgZELQhPLUxRSPT05H7Fz0=
Subject key identifier: 2A:04:88:BC:2E:FA:D5:9D:3F:9C:80:C0:76:2D:9A:E9:94:56:5B:23
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866C61D96C197E0015220D91689F36EC91
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KgSIvC761Z0_nIDAdi2a6ZRWWyM.roa
Signing time: Mon 20 Feb 2023 01:13:17 +0000
ROA not before: Mon 20 Feb 2023 01:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6c:61:d9:6c:19:7e:00:15:22:0d:91:68:9f:36:ec:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 01:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a0488bc2efad59d3f9c80c0762d9ae994565b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cd:20:e7:08:03:2c:de:cd:bd:11:80:20:93:
41:01:7f:f1:f2:2c:8d:48:43:1f:5c:b6:6f:0a:9b:
91:c7:1e:b4:68:73:3a:39:23:be:8d:c9:be:45:95:
a8:b3:35:6b:d1:f1:63:9a:1d:6b:14:3e:83:b9:d9:
7d:76:ea:de:37:bd:26:03:85:13:bf:34:81:43:c2:
70:d7:81:dc:ef:ea:35:f0:7c:c7:d0:f2:0a:3c:d7:
54:30:b7:b5:56:72:e5:a5:14:e8:9d:ba:58:84:fd:
70:6a:f0:e1:01:c7:39:3c:67:42:0f:60:ea:2a:f1:
b1:4b:eb:4f:48:5d:f7:bd:4a:1d:91:7c:c4:fa:4b:
ae:af:9f:35:49:b3:ab:10:61:9e:74:e1:ab:42:4b:
f7:66:85:8f:4e:cb:e7:d1:e2:b5:5b:c9:4e:a7:0c:
c7:2a:8f:1b:d6:d5:92:c7:4a:3e:98:39:fe:13:48:
4d:ff:51:98:f4:98:15:9e:c4:fd:ad:31:d8:0c:9f:
b0:74:8a:0c:ee:7d:c3:49:5a:65:dc:94:f6:05:eb:
c6:e8:6d:68:4b:1f:f9:e7:bd:2f:a2:82:f0:f2:ce:
42:37:c1:7a:d6:24:a4:fd:a8:88:16:c1:9a:e3:5d:
58:36:c7:30:9b:3d:cc:64:d3:bc:12:86:d6:06:a0:
d2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:04:88:BC:2E:FA:D5:9D:3F:9C:80:C0:76:2D:9A:E9:94:56:5B:23
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KgSIvC761Z0_nIDAdi2a6ZRWWyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:d6:ac:00:e0:b9:08:fa:90:4b:40:42:60:b5:6f:0d:00:18:
ff:aa:33:a4:33:ee:29:d1:ec:37:f0:34:4f:32:a4:03:f6:0b:
55:f1:a6:c1:53:4a:46:a6:43:bb:fe:57:1d:37:14:9e:72:92:
47:82:32:d6:e3:40:f6:43:4e:59:5c:a3:30:e9:89:07:bb:ca:
48:6a:f2:90:c1:f4:d5:d4:85:9b:6b:ab:25:c8:f3:d0:35:b8:
ec:54:33:2e:a8:2e:3f:3c:9f:7e:48:cf:d6:11:d5:14:7e:65:
a3:f4:d7:84:a0:47:75:48:22:8a:85:c1:95:5b:b9:f4:8f:6e:
a5:47:ba:49:94:c9:8b:d5:25:50:82:07:4a:9a:e0:c0:d6:e0:
91:22:fc:90:87:1b:de:dd:fa:0f:0d:8d:67:20:e5:e7:7c:1f:
d7:b0:a3:5f:7f:b4:8d:4d:41:01:bc:d9:fe:4b:64:79:43:2a:
99:e8:61:8d:45:0d:e9:1c:97:5b:27:8f:7b:0e:df:f5:8c:6a:
19:5c:81:19:e8:4e:cc:6a:7f:dd:ff:9f:56:7e:09:61:ce:cd:
06:86:9a:2c:71:cd:1c:f0:d5:7a:6f:3c:ff:f5:a4:a3:82:06:
81:50:f9:a8:03:56:ad:a7:56:d0:57:75:c5:06:33:3f:80:b8:
89:2c:57:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:13:43 2025 by rpki-client