Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kDI2CGvkF1DVj_otyhlLvmocUj4.roa
File: kDI2CGvkF1DVj_otyhlLvmocUj4.roa (raw, json)
Hash identifier: b44HHxCjyZQL+GikazGESZzaZX9M7JngjjMhmBbwN58=
Subject key identifier: 90:32:36:08:6B:E4:17:50:D5:8F:FA:2D:CA:19:4B:BE:6A:1C:52:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018553EAE7FC0182DE5C69E1144DE22FBBAC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kDI2CGvkF1DVj_otyhlLvmocUj4.roa
Signing time: Tue 27 Dec 2022 14:09:41 +0000
ROA not before: Tue 27 Dec 2022 14:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:53:ea:e7:fc:01:82:de:5c:69:e1:14:4d:e2:2f:bb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 14:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=903236086be41750d58ffa2dca194bbe6a1c523e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ac:c4:a9:d6:12:1f:24:c8:a2:03:70:0c:17:
f1:18:ff:ef:f1:48:04:0c:fd:a2:c1:15:b3:97:7a:
88:5a:2b:3d:f0:f8:71:06:5f:4f:a7:10:5e:4b:07:
c1:c3:4f:b6:71:08:c3:0d:9f:6e:3a:9e:75:f3:8c:
f8:49:6f:df:94:a5:f1:18:d2:91:f6:55:3d:93:29:
5a:b1:89:94:07:a0:5f:9a:8d:38:1f:ac:ed:0c:41:
2f:af:08:2c:2b:11:78:ab:8d:a1:5b:bf:b6:1e:74:
b4:36:bc:67:e2:4a:aa:f7:3d:55:d9:f6:34:10:29:
8f:ef:94:d2:5a:92:b3:42:fd:ec:9c:1a:16:d9:7d:
9d:c3:58:d9:f6:01:cb:22:3c:ec:d8:42:65:1c:8d:
45:f3:83:9e:e9:0b:96:43:49:eb:67:aa:5c:2f:5d:
50:18:16:65:78:93:ac:ac:44:a3:95:50:42:83:6b:
a4:29:21:04:f4:cb:14:b6:5e:55:98:f8:40:96:73:
28:de:2b:07:96:97:20:f6:0f:01:7b:e8:d2:9d:72:
d5:6e:26:3f:e7:3d:fd:19:88:b9:ad:85:97:c3:ac:
81:dd:23:8f:c4:a0:08:3e:80:7a:2e:fb:80:04:4b:
05:4a:e6:45:7b:0a:62:2f:d5:33:63:1d:b1:7f:08:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:32:36:08:6B:E4:17:50:D5:8F:FA:2D:CA:19:4B:BE:6A:1C:52:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kDI2CGvkF1DVj_otyhlLvmocUj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:d3:ba:3b:18:4e:a6:e4:8b:cc:84:ca:a8:47:95:f8:cd:1d:
ba:c0:b7:df:94:dc:d9:6d:72:18:4a:f5:5a:0d:6e:7d:f4:0d:
d9:45:73:7d:e1:99:ff:79:05:82:26:a7:cc:49:f7:1e:0b:4e:
91:03:a2:29:fc:0b:73:55:a4:69:82:86:44:76:1b:11:ef:7c:
bb:b2:57:93:7b:26:c4:7c:cf:9a:c0:69:28:8e:1f:6a:b5:87:
8b:89:89:95:8f:99:72:97:f7:e8:e0:fd:d9:6c:9c:19:60:19:
4b:cb:d6:b1:42:1f:bf:fb:64:58:c7:6d:4a:88:82:20:7c:e9:
3d:37:75:e3:27:74:fb:e9:71:3e:f8:f9:4a:b8:44:68:97:4d:
cd:25:b7:98:fa:3e:2f:e9:69:00:35:79:d0:ec:c7:db:6a:92:
77:b9:a2:5b:b4:78:7d:32:94:95:e6:7f:ec:44:01:27:1a:d2:
2c:90:3a:cf:83:33:f5:81:24:49:29:1f:cd:41:19:5c:a7:8a:
88:f4:44:cf:54:27:d0:e9:82:69:cc:aa:d5:7d:8a:91:d6:9f:
c9:93:e4:fd:bb:c4:1b:2f:47:33:d1:90:6f:d9:90:d8:4d:4f:
00:14:53:53:ee:5d:9e:93:ab:7b:92:4d:d6:01:0e:b8:c6:21:
db:21:e0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:34:36 2025 by rpki-client