Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KiIQ_Cm2qy7Rj1KIb3p6LfoWZuQ.roa
File: KiIQ_Cm2qy7Rj1KIb3p6LfoWZuQ.roa (raw, json)
Hash identifier: gYBTWiYHSpnW/oYoYyZz258bDzreR1Er7iZJLMfoDhY=
Subject key identifier: 2A:22:10:FC:29:B6:AB:2E:D1:8F:52:88:6F:7A:7A:2D:FA:16:66:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018884D020732E50279DC42B7B7994AED147
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KiIQ_Cm2qy7Rj1KIb3p6LfoWZuQ.roa
Signing time: Sun 04 Jun 2023 05:10:12 +0000
ROA not before: Sun 04 Jun 2023 05:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:84:d0:20:73:2e:50:27:9d:c4:2b:7b:79:94:ae:d1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 4 05:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a2210fc29b6ab2ed18f52886f7a7a2dfa1666e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1e:cb:e3:bf:2e:09:9e:07:ec:bc:3e:7f:ff:
73:a8:32:09:01:69:96:88:f9:5c:7b:a2:63:77:de:
9c:e2:ef:06:00:9a:b5:3e:3d:e9:98:36:0a:36:64:
2e:fc:dd:50:96:a0:b2:94:ad:d4:e9:82:78:8d:2f:
82:07:ae:21:f4:cc:4b:5f:82:19:ba:53:37:aa:21:
c6:22:97:32:8a:e7:55:b9:8b:41:27:0d:db:2a:11:
eb:f2:45:2f:2d:56:e1:5b:f7:bc:80:f0:dc:ff:94:
c0:3e:87:3a:b3:78:b6:0c:e6:e3:6f:98:5d:d4:32:
6d:26:b5:0d:9e:b1:41:a7:e5:2e:0f:37:03:3f:4c:
12:b6:a3:c2:27:43:1b:b3:c1:88:f2:46:05:d2:04:
78:10:60:ea:80:a7:60:0e:d8:f9:ed:04:91:68:2f:
5a:a2:f7:6b:9e:cc:53:1e:77:01:e5:54:51:ee:e0:
9f:f9:15:73:93:c1:d5:e6:1d:34:91:e2:40:33:67:
5c:b5:68:10:b3:c0:7d:32:f9:de:52:80:0f:01:00:
1c:be:4a:ce:3a:b6:53:57:22:d1:ab:d8:d1:20:c6:
e5:8d:fc:cd:5e:cc:0a:d9:b4:53:86:45:d8:02:73:
eb:11:21:85:4e:4f:07:51:d2:94:4e:c8:b6:8a:e7:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:22:10:FC:29:B6:AB:2E:D1:8F:52:88:6F:7A:7A:2D:FA:16:66:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KiIQ_Cm2qy7Rj1KIb3p6LfoWZuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:20:0c:21:bb:16:b1:8d:9a:97:c2:de:fe:22:3d:bd:c5:d0:
c8:81:00:67:ef:d9:a8:7c:f7:dd:28:43:39:c2:45:16:0c:06:
cd:1a:c5:d5:10:8e:8c:28:7b:6f:28:52:5c:8b:53:e1:ad:b1:
a7:92:e0:4c:f7:be:01:2d:a6:96:cc:09:e3:4a:b6:46:16:f1:
36:6c:89:e9:a1:a0:11:18:d1:9e:bd:2f:44:ff:f7:f1:2b:2e:
c0:f4:96:0e:e5:ec:18:56:74:4d:ec:e6:89:06:cc:56:2d:15:
96:d5:1b:51:52:17:fe:60:8d:14:68:37:07:00:8f:9d:5a:4b:
ba:5f:64:eb:4f:68:ee:66:69:e4:03:40:df:6c:29:77:1b:a7:
3d:83:5b:25:ae:d1:1e:43:23:fd:7d:cc:15:c5:5c:ad:da:1e:
89:dd:ab:6e:46:9b:2d:76:0a:d4:54:0a:f2:51:10:80:e2:68:
7d:e0:8f:1d:80:b9:d0:d4:93:f5:0d:be:4d:6e:55:2e:22:b6:
72:8e:6e:9f:9f:d0:6d:13:99:79:c8:55:0b:c5:82:24:05:42:
d7:a7:60:6d:8e:0f:d9:e0:69:f6:46:b1:05:f4:23:4c:8e:bd:
2e:2e:2f:06:9b:68:c6:33:58:6a:6d:ff:ad:ae:83:0d:0c:5b:
7d:02:41:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:15:35 2025 by rpki-client