Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kvjjjyx5vUnx-HA9lHQScnY_pDM.roa
File: Kvjjjyx5vUnx-HA9lHQScnY_pDM.roa (raw, json)
Hash identifier: dwObcjLHQ6H+UXN1WzD62gphvTyUrkRYyUaEzDdSlVw=
Subject key identifier: 2A:F8:E3:8F:2C:79:BD:49:F1:F8:70:3D:94:74:12:72:76:3F:A4:33
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018956019418B1929F28947377FC2B57EB85
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kvjjjyx5vUnx-HA9lHQScnY_pDM.roa
Signing time: Fri 14 Jul 2023 20:04:51 +0000
ROA not before: Fri 14 Jul 2023 20:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:189:5601:88a/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:56:01:94:18:b1:92:9f:28:94:73:77:fc:2b:57:eb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 20:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2af8e38f2c79bd49f1f8703d94741272763fa433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:fe:b8:84:26:03:a1:51:11:c8:4b:40:50:
9c:33:9e:a9:1c:d6:50:a6:c3:00:05:7c:4d:fc:b8:
c2:5b:0e:00:bb:4c:09:a2:d1:51:73:79:53:6e:bd:
fd:1d:49:7b:26:75:36:38:34:cb:47:ba:e0:d7:80:
df:aa:2d:55:7e:84:5e:6e:99:f7:73:3a:a6:c8:fc:
84:67:aa:c2:2a:93:6a:cd:d3:4f:b8:91:1d:db:34:
cd:09:38:1f:4a:a0:fe:ee:35:03:ed:4c:c3:2e:5c:
b2:e5:4c:24:43:f0:b8:2c:fd:91:08:0a:e2:73:9e:
5c:77:e9:ab:73:14:74:0a:02:42:a5:d7:7f:8d:79:
59:f9:cd:5a:54:97:29:c2:98:b0:03:11:93:4d:79:
3b:2d:7a:06:ff:66:b7:cb:33:60:6c:48:c2:7f:02:
bb:df:dd:53:ae:2c:c1:80:3d:28:3e:6d:10:f5:6d:
9a:d9:a8:87:b2:ee:39:ec:48:93:ff:8c:11:06:2b:
0c:c4:1f:eb:50:a0:0b:f0:96:14:1e:26:50:77:63:
a3:2f:9c:e7:64:32:a5:8a:cf:88:25:48:07:d7:b4:
52:a6:66:c6:39:56:03:e7:14:7f:fb:32:a7:aa:92:
23:62:e4:fc:fd:1b:a2:1e:97:90:76:dc:fe:f3:04:
ce:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F8:E3:8F:2C:79:BD:49:F1:F8:70:3D:94:74:12:72:76:3F:A4:33
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kvjjjyx5vUnx-HA9lHQScnY_pDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:da:a3:c1:7b:80:f4:6f:2e:87:12:9e:a8:a0:29:e4:9d:9e:
2a:7a:1b:95:92:53:a2:ed:d0:55:15:52:1e:2c:84:aa:22:d8:
42:87:a2:76:80:ba:56:e6:05:46:1f:cb:2b:49:a4:35:85:2c:
78:26:fd:54:fd:8f:e2:a2:2c:e3:1a:cc:44:c1:0b:07:97:e1:
82:7f:59:8f:c5:d4:ed:c5:ed:87:54:b2:55:fb:6a:e1:a7:a2:
7f:f0:f6:4f:9f:c3:9a:4d:94:56:26:4f:98:21:b2:c7:b9:32:
c5:75:a1:a8:5b:6c:b1:c6:63:27:62:3f:95:3e:e0:ea:94:cd:
a5:04:ba:ff:06:e3:3b:ea:7c:51:8a:ef:bd:77:5f:fc:60:0d:
65:58:7f:2d:8e:a1:e4:82:e9:25:b7:34:a2:40:29:d7:56:87:
c7:72:f5:64:ad:88:50:be:3a:43:fd:72:cb:65:d5:32:c8:38:
f1:43:15:64:19:fd:21:13:b8:50:e8:ee:ce:be:db:10:ba:59:
34:a5:1d:13:29:2c:db:d8:88:50:c0:1d:8e:ce:e1:c7:a8:a6:
84:79:9b:15:63:cb:a2:00:46:ce:42:eb:ef:1f:d0:c7:b5:b4:
d8:a8:f8:d6:51:e0:c4:d3:54:6d:82:39:b2:53:c4:d6:fd:ef:
62:2c:88:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:52:06 2025 by rpki-client