Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ku4b6ZgllBGn6iJzkJDbzI5jfqM.roa
File: Ku4b6ZgllBGn6iJzkJDbzI5jfqM.roa (raw, json)
Hash identifier: YHKcfDdTiPH5VhS6drQFNSPRz3X+KldzaJzUwIf+llQ=
Subject key identifier: 2A:EE:1B:E9:98:25:94:11:A7:EA:22:73:90:90:DB:CC:8E:63:7E:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189650D3539191A249A04684C949F6B4D75
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ku4b6ZgllBGn6iJzkJDbzI5jfqM.roa
Signing time: Mon 17 Jul 2023 18:11:51 +0000
ROA not before: Mon 17 Jul 2023 18:11:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:0d:35:39:19:1a:24:9a:04:68:4c:94:9f:6b:4d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 18:11:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2aee1be998259411a7ea22739090dbcc8e637ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:d7:89:67:1e:6a:a7:9f:da:da:f6:16:6a:
56:9f:f9:ec:7f:ed:6e:5c:f0:43:86:1a:69:a7:0d:
9c:95:6d:6d:c7:0c:f2:f8:b5:e7:2c:4f:d8:b7:a4:
f5:79:02:ac:6b:a8:56:3a:94:de:58:9c:03:9c:ce:
34:9f:9a:b1:8d:c9:91:75:70:59:4b:2f:2c:d7:77:
b7:3b:74:6f:10:11:da:32:dc:a8:7b:67:8d:8b:77:
0c:5a:b9:f6:08:87:17:45:94:45:d3:a3:7b:e6:f5:
c7:5b:f2:40:5d:cf:f2:14:95:70:51:6c:e6:fd:33:
5f:ea:10:5c:be:6b:29:4b:57:11:c8:17:63:17:d7:
c0:9e:fd:fc:8a:63:18:61:96:d4:a1:00:48:a5:64:
cc:0c:0d:a3:20:f5:29:b2:de:c2:b0:93:79:fc:6c:
dc:84:14:06:ab:64:54:4c:de:97:db:10:34:85:1a:
1f:0a:f4:74:d9:6b:e2:82:56:1f:b1:30:31:79:f7:
72:91:b0:22:d8:7e:52:98:d1:d3:8e:05:82:8c:a7:
77:cb:6d:88:b7:fa:96:b1:33:fa:23:f8:58:c8:b9:
1b:f9:e7:4d:1c:64:b9:11:3a:cf:3c:03:81:0c:4a:
50:c6:3a:a0:bd:be:89:ba:3f:22:30:91:1c:bc:69:
6d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EE:1B:E9:98:25:94:11:A7:EA:22:73:90:90:DB:CC:8E:63:7E:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ku4b6ZgllBGn6iJzkJDbzI5jfqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:37:98:84:e5:91:33:e1:f3:51:d8:b1:b0:6f:2f:49:57:48:
5d:f8:64:ee:bb:2f:64:ff:d0:36:a9:d9:2f:45:b4:63:93:7e:
82:ce:bc:db:91:79:54:a1:fe:fd:5d:76:ff:17:8e:07:32:7c:
b6:5d:86:3f:6b:61:69:e1:e9:0f:83:88:c5:d8:86:ef:3c:18:
0b:fb:67:89:f6:87:5c:78:52:d1:fb:7a:df:0f:70:67:fa:d4:
94:78:e0:c9:9c:52:1d:a2:07:36:d3:1c:50:7d:d7:ba:18:4b:
f7:84:79:85:79:94:36:a8:23:a3:c1:57:54:5f:a7:66:3f:7e:
f8:0e:e3:84:e6:b9:52:07:48:81:d2:ba:f6:81:cc:96:84:a7:
73:93:e7:31:90:9a:f7:5e:79:2f:92:99:c8:f8:1d:ff:b1:89:
76:87:86:2c:10:10:96:ef:73:d8:0c:cf:05:7d:ba:e9:2b:31:
61:a4:cc:0e:d2:3c:7b:e6:90:59:51:5e:96:89:a9:d0:af:cb:
da:24:6b:81:5d:97:e1:b5:21:3a:ab:52:f4:46:e2:b1:46:1b:
78:c9:64:82:7a:36:40:8a:b3:06:b6:16:5a:17:00:f2:93:e8:
38:1e:70:34:11:95:73:a4:7a:3c:fe:86:95:4c:0e:25:1b:0c:
98:ef:2a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:08:04 2025 by rpki-client