Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kDzS3zsIXNEFO359UUCJ4kfwn5o.roa
File: kDzS3zsIXNEFO359UUCJ4kfwn5o.roa (raw, json)
Hash identifier: 5lJ87mBi1dbpgml1JwDcIK4F7hZfGQfzFLaoxp6vxGc=
Subject key identifier: 90:3C:D2:DF:3B:08:5C:D1:05:3B:7E:7D:51:40:89:E2:47:F0:9F:9A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018967A14B4E3E1572EEBBBC600CC7FED051
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kDzS3zsIXNEFO359UUCJ4kfwn5o.roa
Signing time: Tue 18 Jul 2023 06:12:51 +0000
ROA not before: Tue 18 Jul 2023 06:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:a1:4b:4e:3e:15:72:ee:bb:bc:60:0c:c7:fe:d0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 18 06:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=903cd2df3b085cd1053b7e7d514089e247f09f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:d2:35:dd:72:ea:c1:2b:25:92:2c:45:5c:
3c:11:e5:d3:89:86:bf:38:dd:87:14:4d:51:09:0f:
01:41:15:e3:ad:7b:46:bf:2b:6e:b6:0e:80:89:f8:
fd:d7:ce:96:7b:88:79:f1:04:e8:cd:90:f6:2b:5e:
58:88:e8:de:12:2a:72:2d:94:bc:4d:6f:59:02:e3:
9f:13:65:88:1c:1a:f2:54:76:6e:2d:08:03:39:7a:
98:d5:b2:e9:e3:c2:1d:ef:56:4b:26:3e:97:24:2e:
f9:da:1a:9f:c9:33:6d:62:eb:0f:20:3e:62:c7:e1:
31:e3:c5:0e:1e:78:46:74:10:be:d5:86:ea:f1:e3:
84:e0:d8:65:a1:f1:71:41:9a:db:45:c4:a9:fe:93:
81:85:01:c9:f5:8a:c0:de:12:4e:3d:ee:d1:1f:da:
3a:bd:17:a6:ce:aa:7c:b7:b1:ce:cf:98:be:98:ab:
b3:ed:9c:2e:77:25:2d:fc:80:62:d6:48:0a:4b:74:
dd:46:16:70:28:70:c4:97:38:86:ad:b8:ba:b0:20:
25:eb:ee:dc:35:7e:c4:03:d4:b4:42:03:8a:47:29:
ba:f3:bb:55:3d:38:e7:de:96:a7:6f:02:ed:92:a9:
04:8e:42:56:77:e2:78:b0:05:a7:1d:4f:5b:2f:ed:
49:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3C:D2:DF:3B:08:5C:D1:05:3B:7E:7D:51:40:89:E2:47:F0:9F:9A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kDzS3zsIXNEFO359UUCJ4kfwn5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:9c:a7:33:90:59:5b:4d:50:9b:b4:3c:b0:2a:b7:83:b4:ec:
be:a8:bd:32:64:db:23:9d:52:37:90:e2:06:cd:71:3f:d1:f8:
3a:97:1e:37:63:91:58:93:f7:3c:f8:36:90:2a:9e:1f:36:b9:
ad:74:bf:66:ce:17:ad:6c:3e:bb:82:67:d2:b6:cb:dd:71:bf:
75:e3:6e:12:93:41:56:0d:71:20:6b:35:c7:c1:b6:6f:c1:eb:
41:49:ad:8f:a1:29:97:16:b5:a3:c2:8e:84:7e:ca:92:27:cf:
74:be:ca:fd:b1:58:07:8f:95:70:01:eb:76:e9:13:af:9a:7a:
1c:fc:15:ed:2a:28:a0:ac:bd:a3:ea:52:16:99:d4:bf:3b:d4:
1f:7e:aa:fd:6d:ce:9d:72:6f:93:e2:e5:91:4f:ed:24:06:7f:
5a:fa:46:95:85:2b:d3:0c:ee:45:9e:cd:40:ea:c6:45:cf:ea:
b0:70:ef:80:12:46:6e:36:18:a8:a1:0d:03:1e:27:93:bd:bc:
42:79:cf:02:20:07:86:8b:be:b5:e4:1a:9f:be:04:bb:a2:69:
9d:e8:12:9c:d9:a7:de:54:3b:df:0c:ac:16:c5:1d:a7:45:9c:
49:62:d7:cb:50:7f:1d:13:5d:5b:2e:3f:37:98:98:a8:2d:7a:
e3:c9:8d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:48:10 2025 by rpki-client