Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kIdS4roA0hkUd8-eqwOXbYhb0Mc.roa
File: kIdS4roA0hkUd8-eqwOXbYhb0Mc.roa (raw, json)
Hash identifier: KedNrTzpvnNF5b+1Q6vu+SxSW/NpbsbD2JrkLepIzC8=
Subject key identifier: 90:87:52:E2:BA:00:D2:19:14:77:CF:9E:AB:03:97:6D:88:5B:D0:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C2D30025168178765D6494EAF22D9F17
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kIdS4roA0hkUd8-eqwOXbYhb0Mc.roa
Signing time: Wed 08 Mar 2023 20:04:13 +0000
ROA not before: Wed 08 Mar 2023 20:04:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:c2d2:fa2a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c2:d3:00:25:16:81:78:76:5d:64:94:ea:f2:2d:9f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 20:04:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=908752e2ba00d2191477cf9eab03976d885bd0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:0f:c2:9a:d3:58:b2:03:bf:65:ee:52:7d:
31:f6:e1:33:e3:5b:6d:ac:1f:b7:86:54:8a:d8:83:
98:f9:04:32:68:43:a7:c5:9f:a4:df:b9:cc:b2:d9:
a1:20:c3:ba:ec:f3:5f:1a:09:4a:32:ec:2e:49:a2:
ae:14:fc:cb:07:91:57:e8:e3:fe:29:13:4a:e5:82:
a2:ce:e3:67:5b:3e:76:d1:af:e2:10:e2:01:c2:1b:
d4:e2:40:20:a5:3f:7a:da:05:ac:2d:2a:86:ec:98:
4b:14:0a:55:36:d7:f0:d3:b8:f6:9d:e9:32:8d:15:
1c:5e:b4:32:33:a9:20:ab:dc:a0:8f:e5:49:f6:17:
b0:54:32:8e:c7:d4:62:b6:d5:68:32:5f:3a:fe:7d:
6b:cf:20:d2:06:6b:27:1c:50:9d:7b:73:98:5d:c5:
72:1c:02:31:d8:44:73:d8:e4:76:3f:2e:55:21:6e:
5d:aa:bd:45:09:dc:98:23:c1:1d:2f:35:27:dd:b4:
35:32:39:64:c2:3d:c7:8c:4b:65:98:be:8f:b9:9b:
45:b3:17:0b:9c:de:21:8c:df:0f:6f:60:ae:af:e7:
76:dd:fb:97:6a:c2:47:24:50:a4:a4:ce:23:85:8d:
de:f0:e4:0b:fa:e7:61:dd:2e:ee:e4:f7:a5:88:de:
76:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:87:52:E2:BA:00:D2:19:14:77:CF:9E:AB:03:97:6D:88:5B:D0:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kIdS4roA0hkUd8-eqwOXbYhb0Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:10:61:1e:6e:b1:21:24:75:80:b8:61:f1:94:b4:e7:65:61:
a8:62:d5:f9:99:25:5d:8c:9c:92:29:64:f4:b8:79:9e:11:be:
5a:12:2a:8f:a8:5f:1d:1e:fb:1d:9d:3b:43:c9:4f:4e:74:d1:
da:a3:a3:00:e9:78:6f:56:c4:89:b0:a8:6c:e9:cc:f1:34:02:
56:e1:06:fa:e8:87:24:33:95:c3:a5:fe:c6:85:05:cd:7f:ef:
ae:07:f6:2b:23:3e:36:8d:07:e6:32:0d:bc:15:71:18:7b:3e:
a1:c0:5b:4d:36:3a:4a:eb:dc:d9:26:52:41:94:58:97:fe:c6:
37:04:0f:82:99:85:41:45:f8:3d:27:18:93:c4:1d:26:6d:4d:
82:91:c5:b9:f7:f7:3c:e3:7d:d6:f5:8c:4c:c0:c5:20:66:6e:
66:1c:5e:25:fb:c5:43:de:56:37:ae:e0:71:1c:35:1a:32:8f:
49:82:b4:ef:2b:f6:14:7b:8a:f9:c3:cd:65:7e:92:94:dd:f2:
a0:72:2d:2a:5e:3c:79:88:da:95:99:64:95:41:c8:4e:91:8e:
7f:57:01:27:f8:e1:8b:b8:d8:c1:2e:1e:3d:d6:07:40:8f:06:
34:f8:30:3f:82:8f:aa:61:42:7e:53:02:bd:85:47:59:c5:3d:
8f:6e:20:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:27:23 2025 by rpki-client