Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Krh_TLvEA_CrL86gpTnwY9nfC9c.roa
File: Krh_TLvEA_CrL86gpTnwY9nfC9c.roa (raw, json)
Hash identifier: TWbidoW6eULqshQRiUvYN3b7ufJxPAYzFEJocHxuyXw=
Subject key identifier: 2A:B8:7F:4C:BB:C4:03:F0:AB:2F:CE:A0:A5:39:F0:63:D9:DF:0B:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186EC7D1B2BE7E5F7CCBC25D8F1CF2BFCC0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Krh_TLvEA_CrL86gpTnwY9nfC9c.roa
Signing time: Thu 16 Mar 2023 22:14:27 +0000
ROA not before: Thu 16 Mar 2023 22:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ec:7d:1b:2b:e7:e5:f7:cc:bc:25:d8:f1:cf:2b:fc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 22:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ab87f4cbbc403f0ab2fcea0a539f063d9df0bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9b:eb:b5:ff:56:6d:c3:84:ac:a2:8f:4a:15:
f4:6c:de:12:7c:33:b0:3a:5b:59:9b:52:6e:69:0b:
af:bd:cc:e5:0d:e3:48:7a:91:e6:01:9f:45:c8:0c:
b9:71:c0:e3:21:99:67:43:6e:3d:f6:95:0d:5e:c8:
1f:39:e3:32:cb:c4:06:32:f3:d3:d7:c8:a6:cf:8e:
0b:b6:83:33:b1:c4:83:b7:87:8a:9c:44:44:6c:38:
8c:d8:e8:70:7e:46:b8:a5:e8:a6:c6:4c:49:ef:a0:
5d:b5:b0:d8:ab:5b:47:bf:d7:57:8a:41:7d:26:ef:
53:de:a9:52:64:10:c1:0c:db:0e:c9:b3:e8:c2:7d:
b8:58:37:cb:fe:91:78:a0:eb:10:05:96:57:44:ea:
7e:5f:26:70:42:42:dc:22:36:4e:85:28:06:84:a5:
bf:fd:2c:3f:3f:0b:14:32:8c:29:f9:a6:40:95:25:
fa:95:4b:0c:54:5b:ed:cb:dd:e9:f3:c9:73:78:3c:
3c:41:cf:b6:bb:78:85:f9:64:c2:da:90:2b:db:89:
7d:37:b2:9b:cd:2b:a3:c3:ef:42:9b:72:54:a6:05:
7d:98:40:da:14:ac:ba:a1:96:56:51:e4:62:0d:09:
5d:91:06:28:f8:4e:5a:bd:07:4f:59:82:d0:f2:4b:
a9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B8:7F:4C:BB:C4:03:F0:AB:2F:CE:A0:A5:39:F0:63:D9:DF:0B:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Krh_TLvEA_CrL86gpTnwY9nfC9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:57:f8:c1:93:46:11:0a:4f:68:e6:41:ac:2d:62:bf:6f:28:
6f:d9:04:cb:7f:ba:1e:e1:a0:bf:32:ca:50:ee:c2:60:f4:89:
b7:43:4c:6d:f4:33:bc:20:11:d1:0d:5f:ec:91:3b:42:06:af:
c2:1f:d0:a2:93:b4:0f:bc:3b:44:d0:e0:9b:78:1f:19:04:2b:
65:7d:62:e3:73:1a:b6:0f:7f:99:d1:ed:b3:ac:3f:ae:66:9b:
5c:75:be:a0:66:b0:0e:6e:d1:7c:3c:08:24:23:b4:fc:0b:d5:
96:52:d5:83:76:87:c7:db:c5:2b:db:5a:f6:69:63:f4:9b:03:
15:3f:6f:47:92:c9:f3:18:ee:05:a7:d8:85:8a:ab:fa:79:2c:
1e:2d:5b:d7:e4:35:3b:f8:02:63:58:6a:2f:ee:f0:1f:c4:96:
73:6d:6c:ea:20:d9:9c:5c:71:5a:78:c0:57:50:7b:d6:6b:1b:
7b:a5:d9:b2:ab:10:1b:13:f4:84:67:f0:3a:b1:e8:9b:85:89:
b5:0c:b7:59:a8:bc:10:95:c1:98:41:99:37:67:b5:ff:50:98:
b8:80:e5:be:dc:43:fa:80:e4:6f:58:fe:18:00:d0:08:ba:1e:
43:08:0a:08:92:1b:c5:5d:bc:b6:8c:bd:f0:5a:22:e5:8b:31:
e7:eb:e9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:52:32 2025 by rpki-client