Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S_KKcaqODQ7B6uc_SHHviv_GuXA.roa
File: S_KKcaqODQ7B6uc_SHHviv_GuXA.roa (raw, json)
Hash identifier: OvJKUeNG3v9gZFT3EQiOkYuqvbrLJiXfnYuZE74BOb8=
Subject key identifier: 4B:F2:8A:71:AA:8E:0D:0E:C1:EA:E7:3F:48:71:EF:8A:FF:C6:B9:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182E0F1F4C0BC0B4B0CABA7EAB4A6B84E92
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S_KKcaqODQ7B6uc_SHHviv_GuXA.roa
Signing time: Sat 27 Aug 2022 20:15:29 +0000
ROA not before: Sat 27 Aug 2022 20:15:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e0:f1:f4:c0:bc:0b:4b:0c:ab:a7:ea:b4:a6:b8:4e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 20:15:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bf28a71aa8e0d0ec1eae73f4871ef8affc6b970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:fd:2a:a3:8a:18:63:b8:c6:9c:c6:78:50:
54:95:b7:41:a3:74:a2:4c:2b:f9:bb:38:05:c5:39:
d8:c0:43:e0:ee:b7:d0:0d:9f:cf:b9:4e:5b:56:86:
b6:92:67:7b:b1:9a:49:84:96:bf:ad:e0:06:b2:2d:
80:9d:2c:57:39:29:d9:cf:83:fc:b1:f8:08:0c:e6:
d0:58:c8:3b:ff:ae:14:98:ce:44:9f:3d:0e:a4:b4:
9a:14:81:c4:71:d0:5a:1b:62:f0:82:52:05:13:a2:
2b:bd:1b:31:b9:d8:99:9a:10:da:c6:ee:99:ed:da:
a7:07:38:8a:86:86:a0:55:c8:95:2c:d8:f5:a5:6f:
5c:e5:6b:14:ba:f2:37:53:9f:2f:6f:24:b0:91:fa:
6b:59:df:e0:ea:56:58:a2:96:2a:76:21:58:76:e2:
b2:a0:06:64:d5:8a:d4:44:df:97:aa:e7:2f:7e:55:
5e:ea:52:4f:6f:8f:9d:f1:f0:8a:17:30:61:3e:86:
cf:6a:5c:47:35:09:ee:ff:fb:6c:78:bb:8d:fd:1b:
4c:3c:1d:60:d7:b0:49:de:37:f2:0b:9f:ef:7d:f0:
31:34:39:22:98:25:69:98:90:16:25:a2:07:b0:5e:
45:41:f7:f2:77:23:3d:db:45:d9:f0:8d:ae:d7:e5:
15:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F2:8A:71:AA:8E:0D:0E:C1:EA:E7:3F:48:71:EF:8A:FF:C6:B9:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S_KKcaqODQ7B6uc_SHHviv_GuXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:a2:ab:fe:f3:4c:cb:bb:b0:3a:bc:69:f7:be:5a:98:3a:75:
a5:5f:1a:85:3e:51:56:38:ab:f9:dc:8f:af:5f:1a:33:23:8a:
b4:2c:67:49:aa:36:60:17:ea:82:93:48:99:80:15:a9:b1:06:
50:c7:c4:7c:dd:a7:74:af:8a:a5:78:cd:51:41:ae:65:10:e0:
63:2f:1f:1d:80:62:1e:57:58:61:ad:a3:f5:78:6e:aa:c1:94:
1c:98:66:17:ed:c1:73:3e:93:e8:3a:a5:2f:df:d1:66:03:d2:
54:f1:9a:5e:40:23:65:39:a8:84:fb:dc:12:be:58:0f:30:7c:
a3:27:ea:9c:4c:61:1d:f8:e0:83:83:23:f3:8b:33:76:31:7c:
6a:dd:79:67:ff:23:e8:f5:29:ec:03:a8:16:c7:10:19:e8:1d:
38:0e:10:bc:8a:58:61:73:e1:4c:e2:3a:fc:a9:79:60:b6:29:
d5:8a:cf:7f:2a:4d:ba:50:be:2f:b0:e0:50:34:2b:68:8b:7d:
31:17:f3:69:d5:28:67:26:dd:8e:7d:7c:99:cb:7c:6a:d0:19:
30:62:3d:2a:df:bd:d0:35:7a:c1:7c:4d:4c:66:c6:b6:01:b7:
e6:a0:83:72:56:a9:dd:80:7d:a6:42:ea:ab:4a:1f:3e:4d:61:
fc:64:32:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:51:00 2025 by rpki-client