Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kLUUsYtaR7CV3xfOe3lWOiSjC-8.roa
File: kLUUsYtaR7CV3xfOe3lWOiSjC-8.roa (raw, json)
Hash identifier: cOvs4Lh/IuYeL7/hVwiCUZYhF9BxqgM5azz8la2Me3s=
Subject key identifier: 90:B5:14:B1:8B:5A:47:B0:95:DF:17:CE:7B:79:56:3A:24:A3:0B:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884FCAB53D82DA00924CE5C3B51E1CD18A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kLUUsYtaR7CV3xfOe3lWOiSjC-8.roa
Signing time: Wed 24 May 2023 22:04:24 +0000
ROA not before: Wed 24 May 2023 22:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:188:4fca:78a5/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4f:ca:b5:3d:82:da:00:92:4c:e5:c3:b5:1e:1c:d1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 22:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90b514b18b5a47b095df17ce7b79563a24a30bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:ca:3f:98:eb:fc:d5:2c:85:a4:b8:c0:5f:
85:e2:1a:bb:fe:41:cf:04:e0:4c:06:5a:a8:98:3b:
4a:e4:3f:b4:2d:a2:4d:55:fb:12:90:28:86:90:31:
e8:5b:b1:e3:db:21:b0:23:c5:7a:5e:b2:3a:4a:f5:
33:7f:bc:f0:47:07:99:2e:1b:ce:3d:7a:be:d0:b5:
b9:15:b3:41:b4:61:8d:3a:2c:e0:ff:ed:d6:ce:f2:
35:94:fc:35:e6:22:82:ea:3c:a7:b5:5a:7f:47:05:
2f:07:15:72:77:27:8d:13:d5:dc:71:e3:dc:05:29:
28:b1:15:5b:7c:7e:90:38:89:2e:76:a1:38:63:4d:
86:14:bc:00:3f:30:ee:c9:5e:84:0d:00:67:05:41:
64:f6:09:19:a8:7f:1c:e5:9b:7a:0b:e9:e3:c4:06:
a9:03:9e:1c:af:fc:4a:11:d0:19:9e:2c:ef:a6:fe:
96:b6:6e:ba:66:63:04:7f:9b:7f:f2:09:12:36:e0:
19:0e:c5:80:1b:34:36:ed:2f:c9:13:b1:ca:45:b8:
02:6d:6c:8f:92:85:59:c1:74:7a:ed:29:48:9c:36:
22:7c:14:f1:db:71:17:22:b1:e4:d4:df:16:62:39:
22:9b:cd:29:57:18:fa:7f:60:07:3a:0b:b9:04:1e:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B5:14:B1:8B:5A:47:B0:95:DF:17:CE:7B:79:56:3A:24:A3:0B:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kLUUsYtaR7CV3xfOe3lWOiSjC-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:31:1d:e1:23:96:8c:74:d9:d2:d6:c4:65:af:e8:90:be:95:
d3:fc:a2:63:b2:dd:a6:4e:c6:b9:62:ca:dc:47:a9:83:f3:75:
09:7f:dd:2c:1d:1a:92:89:cf:6c:30:76:90:89:40:17:50:a3:
b3:43:de:3f:0e:48:c4:fe:46:c1:c1:2c:f2:e4:81:00:1c:a1:
de:10:ea:3c:69:8b:ec:85:55:fa:7e:2b:33:cc:09:79:4c:82:
89:c8:fd:4c:1f:63:1b:4e:e2:44:cc:07:d5:0c:22:95:b1:ce:
8e:f0:65:7c:a2:76:14:64:35:35:3c:2c:6a:21:26:05:5a:3c:
64:03:b1:0e:9b:ff:15:c1:bc:70:2e:c3:c8:01:fb:95:be:4b:
9f:3e:90:18:df:ed:c7:dd:5b:6a:d6:aa:4b:23:d6:02:78:87:
a9:eb:e4:8b:4d:9a:96:03:b7:89:b6:04:bf:86:1f:ba:bd:7a:
e2:78:5d:a4:36:7a:87:20:f5:90:b7:4f:24:9b:cd:a1:91:30:
74:51:15:4d:78:f9:85:29:75:0e:6e:ff:6d:78:9c:22:5f:e5:
aa:a3:26:e4:16:e1:f9:9c:c5:fb:9b:bf:b1:12:d4:ca:27:fd:
1d:1c:c5:02:fd:21:cf:03:4c:35:a5:8a:76:c5:e0:36:e4:f1:
05:eb:98:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:47:53 2025 by rpki-client