Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kv5-yODlcQHIO9apCaIDuzJZOTs.roa
File: Kv5-yODlcQHIO9apCaIDuzJZOTs.roa (raw, json)
Hash identifier: VWbNNymlGooV2UeLMaZaEySQCB9alCIKrqoakWzNpaM=
Subject key identifier: 2A:FE:7E:C8:E0:E5:71:01:C8:3B:D6:A9:09:A2:03:BB:32:59:39:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018506E2523E8A5432EFCF19A04E979C484D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kv5-yODlcQHIO9apCaIDuzJZOTs.roa
Signing time: Mon 12 Dec 2022 15:09:33 +0000
ROA not before: Mon 12 Dec 2022 15:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:e2:52:3e:8a:54:32:ef:cf:19:a0:4e:97:9c:48:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 15:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2afe7ec8e0e57101c83bd6a909a203bb3259393b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3f:25:e9:73:c9:ff:60:6f:91:cf:39:3e:cc:
08:94:42:fc:cd:cb:d1:3d:97:73:f2:53:db:ff:5a:
09:fd:e8:c1:9b:3d:93:43:fd:c8:cf:52:95:97:48:
99:37:ca:42:ec:d0:8a:f2:28:34:85:58:1e:84:25:
9b:ec:28:93:42:96:63:5a:7c:23:44:12:d7:f0:88:
cd:4b:84:83:8c:16:d7:d3:cb:6f:3a:16:98:ca:d7:
a5:3b:72:ca:5b:55:82:c1:d2:46:4c:d8:cc:29:41:
ab:ab:28:7a:ca:ce:41:9e:74:da:10:1a:de:25:68:
9a:2e:bc:44:74:9d:21:ca:d3:cc:60:a9:43:26:c7:
b6:33:0e:e9:73:2d:eb:9c:86:17:b5:14:bd:25:86:
7b:2a:5c:3f:c9:7f:c6:fb:e5:1d:d1:5a:4d:46:00:
45:b8:b0:41:82:f2:6e:c9:d4:53:1e:33:5d:c0:d8:
00:66:15:c8:71:f0:13:c6:89:42:f3:db:44:42:e2:
ca:dc:d4:a1:eb:b4:46:d4:de:3c:08:aa:78:17:79:
68:7b:fc:fb:47:e3:54:e3:9c:d6:39:ed:58:f1:09:
06:8f:e8:42:46:95:26:a8:40:e9:cc:b9:97:f4:1e:
1f:a7:0e:34:07:fe:83:1d:c0:68:00:01:73:11:40:
89:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FE:7E:C8:E0:E5:71:01:C8:3B:D6:A9:09:A2:03:BB:32:59:39:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kv5-yODlcQHIO9apCaIDuzJZOTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:a3:60:b4:1a:6d:7b:e7:b1:9b:48:7f:11:4c:dd:b4:43:40:
dc:6c:d4:6e:64:3e:54:8b:6d:68:4b:95:65:81:03:ed:55:65:
4d:1b:46:c3:f9:5b:01:52:3b:30:ed:0b:5b:a0:ee:e6:d3:b7:
2d:1e:e8:ec:74:50:b5:a1:a5:f2:4a:c0:fe:a1:8c:f7:30:3c:
f4:c4:0f:b7:61:35:6c:b9:a4:cb:b6:c3:7f:e3:03:74:7d:98:
51:16:00:21:72:e9:cf:da:e3:65:77:e1:a5:91:29:86:12:c9:
09:37:b6:71:d0:78:fe:97:1c:d3:39:d4:fd:48:59:43:38:45:
fb:a8:f8:7d:28:91:6b:0d:c1:b5:f1:86:0b:db:a1:4d:91:ab:
eb:fe:02:92:c9:b7:d2:2c:63:25:84:83:65:7d:98:9c:09:50:
af:24:3b:ce:f0:1f:d6:86:b1:97:93:8f:07:dd:1b:9b:46:2c:
4b:48:1e:ea:35:c5:c0:8c:fe:c5:01:4b:36:5d:31:85:ea:26:
05:68:b2:42:83:3d:25:02:b2:66:b1:53:44:cb:37:67:12:0c:
01:27:ef:a5:f4:bf:25:c2:e8:bb:33:90:7a:8c:05:7c:e8:e6:
f4:4c:7c:de:4f:69:28:45:e7:d5:1c:66:aa:f8:0a:20:fc:1c:
8d:62:16:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:28 2025 by rpki-client