Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kNCk7RGRr0D9dmQyXqg29EvDTYc.roa
File: kNCk7RGRr0D9dmQyXqg29EvDTYc.roa (raw, json)
Hash identifier: wY12WsA5iSne7Oj33vBBxs+un0Jqid+SLF5BmPf5sbw=
Subject key identifier: 90:D0:A4:ED:11:91:AF:40:FD:76:64:32:5E:A8:36:F4:4B:C3:4D:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BD0747330ABDFA03D8BF8A094CE8BA59
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kNCk7RGRr0D9dmQyXqg29EvDTYc.roa
Signing time: Thu 03 Aug 2023 20:11:58 +0000
ROA not before: Thu 03 Aug 2023 20:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bd:07:47:33:0a:bd:fa:03:d8:bf:8a:09:4c:e8:ba:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 20:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90d0a4ed1191af40fd7664325ea836f44bc34d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:30:9a:23:c0:3d:68:fc:ff:5b:52:f7:48:
7a:ab:b8:23:8c:2e:e4:eb:84:51:5e:88:57:94:1d:
11:1c:6a:b2:63:f3:2c:86:76:68:ce:bf:bd:b3:ab:
11:d3:68:e3:60:9e:48:27:85:f7:a2:b5:97:22:22:
11:70:6f:65:bc:46:29:16:84:55:f1:85:38:cd:ca:
de:24:b1:aa:e9:be:dc:7f:8c:28:a2:72:03:c9:a0:
db:95:2a:a3:7f:e9:13:a5:eb:e5:f5:c5:92:e3:73:
2b:81:3f:8d:3b:54:1a:c9:e4:1d:a8:85:6e:58:3f:
5a:2c:9a:54:9b:ec:40:d4:49:a1:ef:81:e6:f3:55:
02:e9:ad:a6:b1:cb:6f:ec:98:c0:55:84:b8:1c:e6:
c6:0a:ba:93:4f:ec:f3:97:93:77:27:b1:9f:9b:87:
3c:b8:9e:60:7d:f7:05:25:7f:60:2e:10:cb:a7:fa:
58:6b:dd:c9:f0:df:c6:84:84:2a:7b:b2:93:b5:0f:
a6:04:94:89:5b:eb:79:88:3f:60:c5:c5:7f:e1:85:
ed:10:10:4e:8d:d5:f4:25:a5:78:3c:b1:9d:1b:57:
e5:41:cf:18:5c:4b:f7:b3:f3:6e:d2:de:8e:fc:24:
e1:1c:00:7d:91:1d:db:bf:06:78:e3:f0:dc:9e:4f:
05:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D0:A4:ED:11:91:AF:40:FD:76:64:32:5E:A8:36:F4:4B:C3:4D:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kNCk7RGRr0D9dmQyXqg29EvDTYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:37:11:61:b0:88:44:39:ff:1d:c9:27:da:87:ae:73:31:09:
20:af:39:25:5c:29:21:f6:2b:30:f3:3b:46:3c:f0:0d:80:aa:
08:f1:21:c8:52:ab:f4:a9:02:87:6b:d3:60:fb:eb:95:b0:4e:
6a:84:f0:14:bc:eb:2d:e7:1b:c6:fe:59:9b:ee:50:0a:2b:17:
c5:0b:1e:88:88:64:b1:3b:58:68:df:79:ce:63:76:70:ee:60:
28:f1:92:e9:71:7f:c2:7d:5b:4b:d4:f8:d8:08:04:e5:55:e3:
79:b5:35:f0:8f:47:94:95:68:6c:15:93:52:35:96:fb:40:d2:
2f:33:f8:da:a1:1d:2c:4e:85:e1:98:2f:d3:f5:14:b9:a1:94:
cc:fa:4f:fb:f2:18:a0:26:03:a0:df:af:b6:cf:d6:7c:0d:4c:
d2:79:0d:7e:2e:e7:d1:a1:b5:70:0b:ec:2f:b5:3b:bb:59:57:
10:4e:cd:5d:8c:f8:d9:80:3d:94:bd:12:ed:26:d5:d9:26:41:
7e:3a:4c:68:5b:97:a8:bd:10:ca:df:78:7a:88:5d:f5:af:62:
a7:3b:1e:c4:5a:69:0e:5e:8c:b0:24:70:66:ce:a7:25:d6:d0:
7f:bc:12:c3:6e:a6:e6:39:8b:7b:b9:ff:91:cf:a5:42:1b:45:
cb:a2:21:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:09:06 2025 by rpki-client