Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KwCe1bQSUplsSyGq_Y6s-d9g8Nw.roa
File: KwCe1bQSUplsSyGq_Y6s-d9g8Nw.roa (raw, json)
Hash identifier: HBI26EwablDBiP3BHOVmvwR46SvzL7qjqi42gtICzIU=
Subject key identifier: 2B:00:9E:D5:B4:12:52:99:6C:4B:21:AA:FD:8E:AC:F9:DF:60:F0:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185D4AABD56C8B05BF7887680302A338497
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KwCe1bQSUplsSyGq_Y6s-d9g8Nw.roa
Signing time: Sat 21 Jan 2023 14:10:37 +0000
ROA not before: Sat 21 Jan 2023 14:10:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d4:aa:bd:56:c8:b0:5b:f7:88:76:80:30:2a:33:84:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 21 14:10:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b009ed5b41252996c4b21aafd8eacf9df60f0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0f:1a:ce:d5:9f:85:84:a3:05:c9:af:5c:34:
a9:bc:d2:7c:99:e1:dc:7a:1c:64:01:61:1d:07:5b:
73:ca:7e:ee:96:44:92:e2:09:fa:fc:57:0c:e7:31:
7d:67:8a:b3:1a:a1:30:3a:8a:1f:c7:f7:7a:9d:9c:
cc:6f:88:cc:af:79:1d:93:46:49:73:c5:7e:d8:7c:
28:51:9b:29:dd:8f:81:f7:f7:98:98:fc:ee:86:2a:
aa:4b:73:43:ce:fd:fa:5a:39:bc:ad:6c:68:b6:a0:
e8:96:b2:66:e2:b0:89:45:3b:ac:47:d5:a4:d1:72:
83:f3:f4:d0:92:1b:0d:bd:25:f8:c9:ee:b0:0c:8c:
8c:0a:62:a5:f1:ea:56:c6:bc:82:90:ec:bf:a3:51:
5a:e7:86:af:5e:8c:21:c2:ef:1a:6b:a2:fe:96:16:
3d:62:ce:2c:bd:2c:00:a5:a1:b2:16:04:16:e5:0e:
9b:f3:cd:fd:7d:a9:0a:b6:0c:12:b5:f9:49:1f:68:
f0:c3:e3:f5:ea:29:62:8a:22:82:70:7e:3f:7f:99:
04:2a:3b:b2:93:43:4b:2c:45:0c:89:87:2e:39:e6:
fb:8c:ea:08:84:77:ee:44:38:c7:77:e0:5b:e8:92:
2c:7f:0b:82:a3:8f:28:40:2d:6b:fb:d4:aa:92:4f:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:00:9E:D5:B4:12:52:99:6C:4B:21:AA:FD:8E:AC:F9:DF:60:F0:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KwCe1bQSUplsSyGq_Y6s-d9g8Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:d6:9e:31:4b:56:ac:d5:fa:99:9d:2d:71:7d:d3:1b:eb:45:
45:b0:e7:98:70:0c:8f:2a:f8:19:fe:bc:43:20:28:4f:3a:e0:
c9:53:4b:3a:cc:9b:b3:91:93:df:21:f2:77:d4:57:5c:7a:e0:
ac:64:f0:29:e7:0a:b4:39:44:8d:b3:28:3c:f9:13:43:0b:cf:
d9:52:3f:01:a4:ce:18:5f:06:e5:95:8c:db:6d:d6:e1:f3:2d:
72:d5:7d:75:66:ad:56:02:1d:ff:08:59:ce:1d:19:a3:2e:57:
85:2f:a1:a6:8f:5f:0e:c0:88:ba:30:da:fd:f5:24:a2:1a:12:
23:45:94:28:b5:40:07:73:0a:5a:4d:ef:30:33:8f:34:75:13:
a7:6b:6b:25:6f:c3:2f:48:4d:1b:94:6a:67:d5:2d:20:c3:fb:
16:21:e0:1e:b4:bf:e4:5a:a3:57:b1:92:4f:86:40:bd:97:2d:
59:66:e7:50:a5:9b:d9:25:b9:35:43:ab:47:57:ae:3e:ba:ac:
41:56:21:65:86:e3:e9:50:19:af:de:ca:ff:48:6e:da:92:7f:
87:b6:1a:17:b7:43:fb:b6:c7:92:48:01:0e:a1:9d:5b:c3:d7:
a5:ab:fb:fd:b6:f0:66:b3:bd:9e:02:db:7b:24:0a:e5:1c:23:
42:4b:59:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:13 2025 by rpki-client