Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kJwILVI_pSsgVj_kJ28mbltc5tg.roa
File: kJwILVI_pSsgVj_kJ28mbltc5tg.roa (raw, json)
Hash identifier: NSKJm2jkafnzbuslFpU2LlGmrsWjl0/Sx48L8A7kwe0=
Subject key identifier: 90:9C:08:2D:52:3F:A5:2B:20:56:3F:E4:27:6F:26:6E:5B:5C:E6:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01882E23208DB96F415E19E059F28826B730
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kJwILVI_pSsgVj_kJ28mbltc5tg.roa
Signing time: Thu 18 May 2023 09:13:54 +0000
ROA not before: Thu 18 May 2023 09:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2e:23:20:8d:b9:6f:41:5e:19:e0:59:f2:88:26:b7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 18 09:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=909c082d523fa52b20563fe4276f266e5b5ce6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dd:c7:a3:74:7f:4b:23:72:00:50:78:3c:3b:
6f:ba:ff:d2:3c:d8:55:68:64:e3:bc:36:43:b8:db:
66:d0:9a:d2:22:6d:09:3f:08:f1:b7:48:32:f5:ed:
1d:e4:b2:0c:bf:82:32:f5:6d:ca:94:5f:94:69:1c:
b0:4e:af:41:fa:85:24:9e:b9:ab:84:2d:4c:07:4c:
2b:33:5a:80:cb:09:6e:cd:e2:93:ab:86:46:86:5e:
e1:ff:6b:82:5f:a0:48:1d:be:ea:a0:db:a7:c3:f0:
7b:a1:2c:6d:98:0f:1b:d9:3f:5f:eb:0f:0c:41:21:
5a:ec:81:0f:f7:e8:04:16:4e:7c:36:98:69:86:f7:
98:31:79:0f:a6:c0:39:fc:ad:d6:93:75:54:55:e8:
69:d2:3c:8b:a0:d3:4a:95:29:f9:56:e2:e1:1b:f9:
e5:31:f2:81:e7:84:51:94:ee:27:65:42:4c:3a:f5:
a3:cc:b5:8a:cf:02:39:c9:94:1e:2b:6f:bf:16:e4:
20:4c:dd:20:cb:1d:ed:31:8c:5e:97:3b:d2:fd:7f:
59:23:72:12:6f:09:06:9e:a8:77:af:88:26:da:73:
02:ce:ed:d4:08:5f:8b:c0:6a:cb:e5:6a:57:12:e3:
54:7b:64:99:3d:b1:8e:9c:e7:29:c0:00:1e:50:54:
9c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9C:08:2D:52:3F:A5:2B:20:56:3F:E4:27:6F:26:6E:5B:5C:E6:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kJwILVI_pSsgVj_kJ28mbltc5tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:fa:94:4d:3b:10:38:8b:73:8e:2e:ba:ed:6b:12:a9:3a:18:
96:47:62:93:ce:44:4b:ab:eb:84:e5:30:f5:6f:8d:60:e1:6e:
20:ba:c1:2e:ad:5a:40:0c:df:e2:30:14:d5:ab:be:e8:3e:38:
d6:3b:30:ce:cd:64:70:bd:e9:24:3d:40:e0:0d:bf:f9:6d:8e:
46:e6:06:df:15:6a:f7:cc:db:fa:16:c5:e7:b4:1f:92:82:3c:
82:41:60:5f:8a:1c:68:ff:cb:cd:3f:83:8c:19:5b:af:19:f3:
63:99:e0:5e:a0:6d:a1:3c:c8:e4:ba:84:20:2c:02:87:a9:a2:
f0:56:d6:62:c8:cb:af:cf:72:10:a0:28:e3:8f:02:7d:c8:19:
d5:b1:c4:f0:48:11:7a:27:f1:f2:1e:9d:df:4e:e8:52:de:3f:
08:96:c2:63:9f:0f:96:1d:38:f0:54:dc:3f:98:3d:1b:97:4e:
ae:39:09:52:59:ec:18:91:1c:83:c8:f2:9c:f1:fe:0e:90:60:
f5:d3:68:cc:41:b4:f1:fe:e5:18:20:32:63:fb:f6:4b:bd:74:
40:fe:70:df:9a:23:5f:22:ef:fa:69:9b:de:f9:d3:06:c7:a7:
1d:83:97:e3:90:eb:c7:c7:10:b5:83:0a:c0:17:2e:2c:3a:2a:
da:ee:4e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:50:42 2025 by rpki-client