Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kiu4Xg_FM99SA5XHXLHrRfn6sec.roa
File: Kiu4Xg_FM99SA5XHXLHrRfn6sec.roa (raw, json)
Hash identifier: mgjiZrLz1LUxz+92PPnCGWKbtSRIdhKpW7AcTd9c7gc=
Subject key identifier: 2A:2B:B8:5E:0F:C5:33:DF:52:03:95:C7:5C:B1:EB:45:F9:FA:B1:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018504BE550992C1F1A52E8E9F55DBA512A0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kiu4Xg_FM99SA5XHXLHrRfn6sec.roa
Signing time: Mon 12 Dec 2022 05:11:00 +0000
ROA not before: Mon 12 Dec 2022 05:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:04:be:55:09:92:c1:f1:a5:2e:8e:9f:55:db:a5:12:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 05:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a2bb85e0fc533df520395c75cb1eb45f9fab1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:f3:2d:2c:00:0a:46:4c:a1:e3:fe:f0:fe:
20:0b:be:ba:8d:30:e3:94:6a:b2:88:d0:e8:fe:0b:
42:43:26:9d:c8:89:f0:c9:af:82:92:12:e0:32:89:
18:37:5f:f2:a2:52:fb:b2:ad:de:ba:08:7c:5e:01:
88:e2:c9:53:ba:b6:14:a6:4e:e4:b6:5d:2f:fc:16:
9c:9c:25:1b:5d:af:a1:4d:d3:dc:b5:2b:a5:8e:22:
47:a0:bf:1c:fd:ac:33:cb:7f:5c:b1:fe:43:c9:44:
63:1d:de:59:ef:40:06:dd:84:af:26:a8:f5:ef:6a:
b8:0e:9b:26:a2:30:a4:6f:48:01:01:e5:ab:ee:06:
c1:a0:6f:7d:35:17:4b:0f:a7:62:87:7f:18:f5:32:
ce:56:49:97:51:18:6b:08:59:f7:d4:24:26:88:7f:
bc:c3:46:2a:3a:fd:51:45:c4:93:c9:07:f8:8e:5c:
7d:92:e2:87:d9:ca:4f:0f:55:74:71:0a:54:96:c2:
06:32:2b:5a:c5:3c:2a:02:b5:6a:8f:dc:9f:f0:87:
62:f2:65:2a:29:33:ad:d5:b0:f5:5a:e7:71:dc:86:
64:ef:88:0e:76:54:f2:ca:64:c6:d2:64:4a:5d:a0:
ec:34:15:5b:6d:00:8e:14:d8:18:ed:f8:39:c0:7e:
b7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2B:B8:5E:0F:C5:33:DF:52:03:95:C7:5C:B1:EB:45:F9:FA:B1:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kiu4Xg_FM99SA5XHXLHrRfn6sec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:ea:f3:de:96:f5:1c:85:cc:5f:a2:8b:05:83:7b:04:9d:64:
3c:2d:a9:5b:8b:8e:d4:49:64:ac:6f:6b:9c:e8:50:1c:7b:67:
0e:17:7a:82:f3:46:1a:d8:0a:fa:1e:ba:4f:f7:e2:1d:57:dd:
61:21:5e:45:0e:c6:3c:56:1a:58:55:9d:03:37:7c:61:eb:ca:
eb:26:19:cd:c3:f9:75:25:49:1f:63:f4:a9:82:30:b8:5d:b3:
a9:df:26:a5:57:30:40:84:3a:79:7e:f6:65:b1:21:4b:03:90:
54:b4:d3:0e:dd:5c:bb:9d:4c:cc:e3:32:86:fc:38:2c:1d:2c:
d3:2f:13:29:ce:f7:7e:ea:43:a7:c3:22:4c:e4:b6:4e:a0:74:
e5:a0:e8:3a:c3:6c:10:89:15:de:10:da:22:24:5d:f3:c4:90:
e7:6b:25:94:28:2d:62:fc:a8:b7:26:ec:80:6e:31:7f:e7:91:
df:64:48:7d:60:0d:6a:8e:62:4e:d2:09:d4:5a:16:47:1d:79:
29:bb:d1:5f:56:b7:f3:39:bd:a0:e4:f8:d2:fa:1f:b9:a5:c0:
c2:ed:48:64:b0:5c:32:07:eb:bd:02:73:c7:ff:ae:24:a2:14:
29:2d:fa:96:15:8a:a5:53:dd:9c:b4:0f:f9:41:9f:c4:9e:3b:
1f:d7:c1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:09 2025 by rpki-client