Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_KBMSRGIInj44Y9wv77aRF1fOb0.roa
File: _KBMSRGIInj44Y9wv77aRF1fOb0.roa (raw, json)
Hash identifier: AjiMKZPu9NRyF7/uuL0L/TXvFV7aFD4ke5HOubctYVM=
Subject key identifier: FC:A0:4C:49:11:88:22:78:F8:E1:8F:70:BF:BE:DA:44:5D:5F:39:BD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187DA342625AECEAC46CDEB1831049E2B33
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_KBMSRGIInj44Y9wv77aRF1fOb0.roa
Signing time: Tue 02 May 2023 02:04:23 +0000
ROA not before: Tue 02 May 2023 02:04:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:187:da34:13f5/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:da:34:26:25:ae:ce:ac:46:cd:eb:18:31:04:9e:2b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 02:04:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fca04c4911882278f8e18f70bfbeda445d5f39bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:84:4e:95:5f:c1:c3:02:00:cd:fa:67:d4:5f:
25:ed:2a:6b:ca:36:49:90:0a:ab:46:4b:49:4b:9c:
7c:80:1f:95:21:aa:40:61:db:ee:f5:b9:16:57:43:
f4:5c:34:df:b9:03:5b:ad:49:b6:01:7b:55:d4:92:
26:ae:d4:11:f7:be:af:9f:4f:4b:12:32:04:cd:be:
70:d7:ed:45:e7:59:7f:1e:02:8b:b0:75:3d:03:51:
13:48:8f:eb:52:37:76:4d:64:2f:c1:c5:a4:13:6a:
65:4e:18:cf:1e:d2:0c:7a:b2:fe:b6:0f:8c:2d:bd:
a6:e0:f2:15:d6:e3:f0:13:d0:d3:34:e8:c6:24:ef:
33:81:14:55:ab:fe:b7:bc:c6:ad:9c:75:98:2c:ae:
4d:cc:25:14:80:f9:b0:df:09:00:b5:4a:56:b0:12:
67:44:e7:70:67:6f:55:03:25:ad:55:5e:42:b3:23:
cd:a7:b5:7a:81:7f:8f:e8:46:3c:f6:d4:e2:77:0c:
37:c5:a2:70:d3:63:42:6f:b4:10:01:d5:06:ae:24:
91:bd:fe:ea:d4:8c:60:8c:5b:db:26:79:f6:57:08:
e6:d3:0c:7f:c7:e4:5f:8b:b7:e5:b0:d0:fa:ba:9b:
cd:f8:ab:b3:d6:1c:16:d3:89:31:71:b3:71:cd:a3:
c0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A0:4C:49:11:88:22:78:F8:E1:8F:70:BF:BE:DA:44:5D:5F:39:BD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_KBMSRGIInj44Y9wv77aRF1fOb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:28:89:9e:8d:6a:85:02:ef:5e:d9:5d:c4:6f:d9:e4:b2:b9:
15:b5:e5:40:44:ce:e1:d9:ca:2c:db:04:27:bd:c6:37:8e:80:
7d:82:ca:ac:41:6f:2d:8e:41:6c:35:d5:9e:31:26:c5:b4:2a:
fb:64:97:61:4a:fe:5c:7a:09:c0:be:e7:be:23:a5:7c:16:9e:
3c:f3:80:a9:3d:ab:76:10:0b:0d:01:9a:ca:e3:59:f5:c3:6a:
6a:a2:93:1c:69:86:41:18:e5:54:43:d9:a9:73:01:5a:26:5b:
7b:20:a4:3c:17:e0:02:d6:b1:2f:73:03:f5:28:fa:ef:6d:4b:
6c:ff:7e:a3:78:59:24:30:f2:ed:4e:39:70:f8:5e:0b:d1:a5:
bc:53:02:22:8f:68:5e:2a:a0:e6:f4:9a:5b:5f:e7:3a:d9:71:
3c:7e:14:36:cf:56:13:9a:72:f0:9a:a6:4e:ad:6e:e3:e5:66:
08:0d:45:1d:f6:9d:2b:6a:2e:5e:c4:7e:06:93:2a:e3:bb:15:
3a:fe:52:49:22:bc:86:8e:a4:41:84:8c:c7:79:97:b3:68:0f:
55:a0:29:0a:a0:36:47:3a:d4:02:89:cb:29:a1:e3:c8:66:50:
5f:f1:ba:3a:79:5a:dd:25:f6:ad:db:e5:1f:f7:14:d7:40:a9:
f1:13:5a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:30 2025 by rpki-client