Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Knfi--wbv-sL8nUQEQCf_1RCexc.roa
File: Knfi--wbv-sL8nUQEQCf_1RCexc.roa (raw, json)
Hash identifier: VA1Nr8zOmd3JoWfglp/HOGkbQGABcIlL6DrQNgBopBw=
Subject key identifier: 2A:77:E2:FB:EC:1B:BF:EB:0B:F2:75:10:11:00:9F:FF:54:42:7B:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182666AFAA768D3233717A93BA18AA03BF1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Knfi--wbv-sL8nUQEQCf_1RCexc.roa
Signing time: Thu 04 Aug 2022 01:14:23 +0000
ROA not before: Thu 04 Aug 2022 01:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:66:6a:fa:a7:68:d3:23:37:17:a9:3b:a1:8a:a0:3b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 01:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a77e2fbec1bbfeb0bf2751011009fff54427b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:d5:ed:3b:9b:61:39:53:7e:b3:33:93:af:
7e:6e:ca:d7:46:6c:c2:8d:0d:ae:f3:ca:ff:1d:29:
27:a6:c1:34:1e:51:1e:22:5e:74:64:33:fd:5f:98:
c1:12:f3:dd:62:ca:5f:ce:05:28:bd:4f:59:ff:d6:
60:45:6e:1c:ed:72:ab:a3:70:7a:f4:49:8c:4a:cc:
24:a7:78:7c:a0:75:22:97:31:41:7b:7b:6e:18:04:
c3:0e:61:25:86:c3:51:c0:c6:0e:ac:73:80:93:65:
76:7a:bc:89:6a:e7:50:9d:3f:77:b6:bd:dc:dc:b0:
30:8d:00:40:88:40:9f:ce:21:bc:2a:06:20:b1:76:
12:28:fa:6f:1c:1a:f3:39:e4:76:bd:13:d9:c2:b8:
27:f9:29:77:a7:3f:c0:93:d2:86:7e:54:c6:45:28:
a4:ab:21:54:a4:c4:8a:51:cc:38:9b:4d:97:ea:64:
4c:45:87:89:7f:cc:1f:87:45:59:71:36:d3:79:f1:
28:d3:ce:ec:77:50:bc:7d:ca:6c:dc:2f:4d:4d:1a:
74:0a:34:a8:82:d9:73:60:67:98:9d:5b:20:a0:5a:
29:30:b8:54:85:55:d7:c0:bc:f0:a7:df:90:ed:12:
92:64:8c:a9:1d:2e:cb:b1:53:69:45:d4:01:a7:47:
bf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:77:E2:FB:EC:1B:BF:EB:0B:F2:75:10:11:00:9F:FF:54:42:7B:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Knfi--wbv-sL8nUQEQCf_1RCexc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:d6:88:9c:18:a9:ca:93:c5:d4:9e:d1:db:8c:61:26:53:e5:
36:72:04:ea:d0:dd:70:a8:aa:0e:fc:5d:e1:57:f2:87:c0:5e:
1b:c5:c7:21:ee:16:29:8d:0d:a8:f6:99:75:a4:63:a6:d5:f5:
ca:7a:bc:86:0d:82:63:c3:fa:6d:5d:e4:10:e9:7d:0b:6a:e7:
93:95:0c:f4:23:e5:bd:bd:60:f6:69:5b:d4:e7:56:34:06:33:
b3:46:00:8b:17:5e:ec:89:40:18:34:97:4c:15:3f:6d:f8:c0:
c1:6a:65:a9:a3:b1:ec:58:53:45:b6:7b:c9:a8:48:ec:98:65:
81:75:b0:62:d2:7f:fb:13:b0:6e:5c:18:00:8c:9d:b6:cb:62:
e6:3a:f3:e8:4a:a3:a8:62:f7:23:66:9f:97:8e:2a:b3:6b:90:
eb:24:fb:5d:1d:b8:03:52:da:bf:b0:85:65:c6:4d:44:7a:d3:
9e:4f:59:fe:1b:0b:71:21:ca:73:82:59:c7:01:b6:6f:03:33:
7d:3f:d7:1f:c9:d5:54:11:db:7c:80:68:53:e0:91:72:0d:f2:
78:f5:90:05:a5:11:fb:cf:f9:89:60:52:55:7e:41:09:26:1f:
33:f2:d1:bd:4a:bf:67:56:bf:8b:c6:76:ad:62:b6:0a:4a:40:
a2:17:73:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:30 2025 by rpki-client