Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kyljepj3Ae1PwKiBYYWjms6Va_o.roa
File: Kyljepj3Ae1PwKiBYYWjms6Va_o.roa (raw, json)
Hash identifier: nF8d99TIplC11+yS9AgUdVP7PRs1fO/ydqDwNbyPF/0=
Subject key identifier: 2B:29:63:7A:98:F7:01:ED:4F:C0:A8:81:61:85:A3:9A:CE:95:6B:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188BD75F1F530B0A4B767B449E4A47A728B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kyljepj3Ae1PwKiBYYWjms6Va_o.roa
Signing time: Thu 15 Jun 2023 05:10:03 +0000
ROA not before: Thu 15 Jun 2023 05:10:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:75:f1:f5:30:b0:a4:b7:67:b4:49:e4:a4:7a:72:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 15 05:10:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b29637a98f701ed4fc0a8816185a39ace956bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ba:82:79:bf:40:3d:80:5a:db:71:2d:e7:87:
eb:04:99:16:41:dd:65:66:9a:3a:00:43:0d:4c:c6:
85:bc:b1:66:49:ed:bf:3e:10:42:4d:9b:10:12:df:
cf:8c:05:fc:07:02:f6:91:db:4f:be:7e:24:01:ab:
e5:a1:53:a3:7e:bc:5a:18:9d:6a:e9:ac:55:8e:07:
a4:2d:d8:2d:64:f0:eb:11:d1:e5:28:64:f9:72:f8:
71:97:09:a9:0c:2e:4f:c6:40:0c:ec:8c:80:c5:45:
65:c0:d6:5b:b8:f7:c3:0a:72:d2:f1:ba:d4:f2:9b:
b7:ee:a6:1a:91:7e:e0:d7:ae:21:75:c6:d1:99:30:
57:b0:02:ed:98:a6:2c:6f:0e:49:3d:df:4d:14:21:
e2:28:ff:3c:09:99:1a:10:7d:4f:2e:c8:ef:f8:82:
22:28:b1:2d:61:ee:0c:55:6d:52:ad:4a:42:0b:80:
81:1f:62:d3:6a:f6:9e:6c:30:c8:28:19:d2:26:fc:
1b:e1:0d:c0:59:f7:bd:13:60:cf:61:df:08:4a:0f:
b0:64:8c:3b:89:3a:7c:d8:64:17:04:2c:f9:59:ad:
22:06:cd:ee:9a:62:01:4c:06:b8:51:ed:75:c3:96:
bf:f3:0a:ea:1b:6e:37:42:5b:df:55:d6:52:8f:91:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:29:63:7A:98:F7:01:ED:4F:C0:A8:81:61:85:A3:9A:CE:95:6B:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kyljepj3Ae1PwKiBYYWjms6Va_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:82:5e:5a:86:16:49:e0:0b:09:57:44:51:a0:d6:34:01:d0:
c0:6c:19:c1:de:c0:58:a6:bb:09:17:0c:19:a9:95:39:7f:93:
2d:a8:e7:9e:67:c0:74:60:0f:f3:9f:28:39:b1:ce:b6:74:7e:
65:b5:d9:83:21:d7:16:a4:e9:a8:a7:13:8b:20:1c:40:e0:21:
bd:08:40:1d:85:e8:2f:b7:d7:11:f2:1e:07:48:06:5a:2b:e8:
8c:ae:99:91:dc:f3:8b:16:7e:a3:b3:e8:51:17:df:f3:da:46:
44:45:f3:87:ad:65:6e:8c:60:08:d0:a3:14:36:2e:b7:5a:ca:
65:10:27:84:ba:a5:66:f4:71:c8:d2:cc:17:b1:02:e8:62:64:
02:d0:70:58:c3:77:42:bb:2b:7b:fa:17:2f:2a:4b:93:fc:51:
a9:ca:9a:8a:45:d2:f8:9e:da:1b:08:d2:d0:44:63:8e:cd:2d:
46:b2:58:cd:d1:b3:69:df:cc:ff:f4:65:46:a4:ff:7e:b4:b8:
6c:fe:e6:2a:91:37:08:6e:85:f2:39:e1:81:ea:20:38:f1:40:
6b:a0:3e:36:72:eb:10:ca:0a:0b:76:26:a5:c0:1f:9b:eb:6a:
e0:5c:21:69:fb:15:05:b4:af:2b:ab:84:58:c9:20:7b:69:ec:
86:00:ce:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:24:31 2025 by rpki-client