Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KiYVmNnYrCZYTSgJoF8_rgg4Aqs.roa
File: KiYVmNnYrCZYTSgJoF8_rgg4Aqs.roa (raw, json)
Hash identifier: JrnHOy4Fou474tAEO38PuHZFgJvfNz6ESCRChgOJmps=
Subject key identifier: 2A:26:15:98:D9:D8:AC:26:58:4D:28:09:A0:5F:3F:AE:08:38:02:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E6A19E7F57F81F48C59152ABB7021823
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KiYVmNnYrCZYTSgJoF8_rgg4Aqs.roa
Signing time: Fri 11 Aug 2023 22:04:58 +0000
ROA not before: Fri 11 Aug 2023 22:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:189:e6a1:1148/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e6:a1:9e:7f:57:f8:1f:48:c5:91:52:ab:b7:02:18:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 22:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a261598d9d8ac26584d2809a05f3fae083802ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:39:47:f7:4a:14:82:1a:31:38:5b:b3:23:2a:
cb:50:1c:1e:62:72:31:e9:ef:6c:d0:90:d6:13:03:
7c:82:0c:35:12:b5:46:d9:ab:72:d9:df:c1:09:42:
9f:8b:3a:b8:44:90:cf:dc:0e:f7:78:a6:13:f5:37:
1c:c0:cc:2f:c5:f5:db:f7:6d:13:c4:d7:d1:65:1f:
34:21:85:57:ee:c7:e4:0f:ef:a8:6d:07:1d:a9:02:
75:63:67:18:9e:22:34:55:e5:21:da:2d:ab:52:91:
95:76:37:ea:fe:bf:96:59:87:4f:51:f8:85:30:ca:
65:fe:a3:5c:0a:76:a3:6a:79:c6:b7:05:b9:d2:9d:
70:64:aa:be:0d:28:e2:5d:39:cc:21:f8:9a:66:2f:
8a:c0:be:43:fb:e6:d0:52:16:35:e2:9a:33:92:1a:
47:38:a8:eb:77:a4:9a:75:d9:eb:f3:f7:2c:a9:14:
d5:02:47:71:c5:9a:1b:92:35:64:d9:95:87:7b:05:
17:c1:c9:f5:c6:da:96:4d:34:e0:e4:f6:3a:55:03:
ac:8c:a3:eb:15:ae:02:a4:a8:d1:99:e5:3a:6b:c9:
8b:1a:03:67:84:d2:f3:e7:50:04:ba:2b:a7:bb:85:
2c:f2:0e:35:63:33:83:85:f9:a1:33:6a:82:2c:be:
a3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:26:15:98:D9:D8:AC:26:58:4D:28:09:A0:5F:3F:AE:08:38:02:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KiYVmNnYrCZYTSgJoF8_rgg4Aqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:31:bf:46:ad:36:46:10:2b:56:04:83:4e:32:bf:f4:0e:e7:
ed:84:01:e2:7f:25:03:10:e4:59:d6:d8:7e:b1:33:6a:01:33:
bb:14:9e:88:67:0a:45:43:7d:55:36:cc:67:60:da:97:0f:d2:
d6:ce:0d:9b:b8:10:31:db:c3:c7:5e:ed:bd:15:96:e1:a5:a1:
b0:59:ae:a5:5b:b1:18:98:1e:b1:22:40:44:1f:1b:03:28:94:
68:44:34:3e:d3:a4:f1:8b:8d:c4:6d:db:e8:a4:a3:f9:eb:c5:
d5:b7:4f:c8:38:e9:6f:c6:74:6b:56:f9:7f:fd:dd:5e:6e:85:
7a:1e:3c:bc:b9:00:60:25:c0:db:47:75:6b:cd:70:08:53:92:
4e:5c:9b:cb:3f:b6:dd:2a:4d:c0:7d:18:1c:73:57:07:79:d6:
51:70:d4:66:e3:2c:3e:44:25:7b:97:5f:56:5d:19:ad:44:19:
12:a0:22:df:c8:e4:c0:11:1b:91:2b:1c:98:33:12:b5:83:d6:
4c:59:4e:44:75:5a:49:fd:b6:a1:0d:2e:ea:7c:03:fe:a3:2c:
68:2d:60:44:8c:a3:fd:4d:52:e6:fe:c7:94:d4:6c:76:81:3d:
73:6e:fb:51:bb:ac:41:03:13:60:2f:82:a7:1c:07:1a:b4:a8:
82:e1:32:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:20:23 2025 by rpki-client