Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kMXrqzWd3dQaC8XSbKi3krWUacs.roa
File: kMXrqzWd3dQaC8XSbKi3krWUacs.roa (raw, json)
Hash identifier: c199i60ywkVsYfceMyhzBRCWDoB6xJGOjrtMLoDG+LU=
Subject key identifier: 90:C5:EB:AB:35:9D:DD:D4:1A:0B:C5:D2:6C:A8:B7:92:B5:94:69:CB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850D8DC73CA69EA70F4FEC33A6E8CB6037
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kMXrqzWd3dQaC8XSbKi3krWUacs.roa
Signing time: Tue 13 Dec 2022 22:14:33 +0000
ROA not before: Tue 13 Dec 2022 22:14:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0d:8d:c7:3c:a6:9e:a7:0f:4f:ec:33:a6:e8:cb:60:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 22:14:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90c5ebab359dddd41a0bc5d26ca8b792b59469cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:09:be:1f:18:e9:22:81:56:6c:f5:90:70:29:
aa:73:6e:6e:2c:b8:b0:77:6e:b3:53:a4:f0:ba:fc:
1a:e4:eb:9f:d9:d8:3c:a8:85:2d:16:5d:ba:c7:a1:
a2:fe:67:ca:71:6f:c7:1f:32:96:88:d0:a4:5f:cb:
19:c0:b0:c8:58:ff:5d:21:1b:be:ac:e0:4c:77:88:
64:d6:33:ab:3f:99:9d:71:9b:c5:68:04:f2:a7:2b:
e7:2f:16:02:72:51:f3:74:99:c4:d0:fb:f8:5a:c1:
ff:dd:0d:6d:26:6f:d1:80:52:bc:f1:ee:07:00:44:
62:17:a0:7c:6c:1a:76:ed:03:dc:12:0f:8a:43:78:
4d:31:76:30:f0:44:f0:d0:21:1b:9d:98:06:d0:62:
5a:f3:0a:48:58:01:dc:fb:99:99:35:0f:63:15:2c:
93:e0:5a:fc:bb:53:1d:4c:df:a0:db:86:01:27:cb:
e0:a9:d8:22:db:18:3b:f8:d2:9e:35:e3:5e:8c:56:
b5:f9:50:1b:28:a9:bd:6f:ca:28:bb:94:cc:b7:26:
de:6f:e2:84:38:0d:9c:c8:5a:d1:f5:f3:36:87:28:
22:19:ec:74:43:bd:4d:61:ae:ef:f6:42:08:34:e4:
9a:b9:51:ec:01:33:f8:36:54:5d:72:0b:0b:4d:01:
ae:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C5:EB:AB:35:9D:DD:D4:1A:0B:C5:D2:6C:A8:B7:92:B5:94:69:CB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kMXrqzWd3dQaC8XSbKi3krWUacs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:d2:e0:fe:8f:87:96:48:de:e7:11:f7:44:72:78:83:bf:73:
99:17:4a:00:84:87:47:f5:be:3a:9f:c8:09:4b:fc:94:8c:b8:
8c:a6:05:00:c9:77:b1:88:c0:bc:7e:db:5d:0f:40:c9:d2:40:
4a:f3:ea:e7:dd:a1:48:3f:19:de:1a:fb:18:6f:d9:bc:53:aa:
50:63:e6:b8:10:91:bb:63:3f:5b:90:ce:cb:e8:42:8a:12:47:
98:7c:6d:d8:c9:2d:26:af:c4:ce:6e:43:80:b0:d5:f3:07:05:
26:09:23:96:f5:81:c3:47:4a:a4:47:ba:dc:2b:d1:dd:7e:e4:
ce:13:bc:77:43:21:5e:03:62:83:31:06:b8:a0:2c:8e:eb:33:
22:f2:12:d4:29:0e:fe:e3:86:8a:b5:4b:95:07:a8:75:cf:2d:
c2:f5:f9:e6:36:4c:95:cf:8e:bd:a2:58:c9:cf:d6:10:b7:55:
a6:b6:16:bd:d8:43:57:2c:cd:99:1e:f3:49:43:46:3b:c3:81:
b2:06:3a:4a:57:91:07:4e:2f:6b:ee:62:6e:48:c3:1a:17:50:
63:eb:97:8b:8a:59:e0:7a:ad:bd:56:23:ff:f6:91:45:11:7c:
42:8a:99:a1:63:a0:4d:03:9e:42:7c:b9:a9:10:7e:98:78:0f:
a6:a4:f3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:50:10 2025 by rpki-client