Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kNr6efGGkG-LhqeCR26zBk8nDlo.roa
File: kNr6efGGkG-LhqeCR26zBk8nDlo.roa (raw, json)
Hash identifier: zM53kyOz4pkKGu8JuWPQIDw6dtK6Sqso1kYsWxMCIm8=
Subject key identifier: 90:DA:FA:79:F1:86:90:6F:8B:86:A7:82:47:6E:B3:06:4F:27:0E:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865BA532C19EF7B6968FB2C1B927E7C621
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kNr6efGGkG-LhqeCR26zBk8nDlo.roa
Signing time: Thu 16 Feb 2023 19:13:18 +0000
ROA not before: Thu 16 Feb 2023 19:13:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5b:a5:32:c1:9e:f7:b6:96:8f:b2:c1:b9:27:e7:c6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 19:13:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90dafa79f186906f8b86a782476eb3064f270e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:2d:97:57:0d:f1:c8:35:70:07:07:dd:8f:
27:a0:15:1c:08:3c:99:6e:53:0b:be:e6:b2:58:db:
a7:82:a5:e7:cf:95:ea:6c:4b:63:dc:34:41:79:1d:
e6:8c:44:39:ca:b5:9f:be:a5:65:15:47:2e:2e:ed:
3e:4f:80:b4:cd:54:36:13:0b:91:7f:4c:1b:bb:e5:
16:2f:a1:08:25:f6:ac:e0:5e:7d:9a:5a:33:9e:ef:
a5:9b:74:be:e7:4c:ad:53:4f:2b:56:51:81:88:bd:
22:41:dc:61:13:63:c4:0a:9a:40:ae:ba:74:34:f4:
85:cb:93:a5:8e:ff:8c:8a:82:2a:b0:85:05:08:e4:
fa:98:10:c6:c3:cd:6b:d8:62:58:6d:71:1b:4b:d3:
fe:23:e7:31:5c:2e:27:64:30:bf:74:57:36:53:65:
b4:68:af:f4:8e:36:36:7c:21:fb:b8:2d:0c:cf:f2:
99:c3:48:a1:ad:3a:5b:35:1b:0e:ca:15:68:db:ff:
6a:f9:fd:97:28:65:7a:f4:98:fe:16:0e:24:54:06:
48:a3:e7:ef:b8:76:08:de:e8:87:e0:7f:a1:c9:2a:
78:2e:5a:93:06:e3:76:46:74:6d:da:33:1f:b9:7b:
48:08:fa:0c:b0:95:8d:01:bd:6d:b1:28:db:04:7f:
10:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DA:FA:79:F1:86:90:6F:8B:86:A7:82:47:6E:B3:06:4F:27:0E:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kNr6efGGkG-LhqeCR26zBk8nDlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:90:c1:4d:7d:d5:9c:4f:00:bf:0c:e6:04:56:79:af:df:15:
43:d7:c6:d9:60:0c:69:38:4b:b5:fe:c0:0e:ce:95:c3:77:17:
cc:6c:98:76:36:08:fe:2f:3c:66:ae:91:aa:c8:c1:6b:54:19:
44:b6:af:a7:ec:2e:5f:67:f0:80:6f:8b:8d:85:67:47:49:4a:
5e:e1:3b:22:fc:5f:c0:f9:b6:14:8c:c2:c3:19:7a:e9:b9:f0:
57:63:7c:34:f1:4a:ac:93:df:32:d6:22:e1:ec:32:87:04:08:
fa:93:59:ef:12:95:81:a1:26:3e:c5:51:d6:78:fc:47:32:fb:
c4:19:e3:58:d1:f4:66:7c:f7:b3:e0:46:b0:be:a1:ac:07:b0:
57:49:79:15:77:8f:e0:c1:c1:67:82:67:f3:47:bd:58:9b:41:
46:e3:71:6f:88:23:3e:fd:ba:6d:a7:45:1a:f8:48:e9:7e:a4:
8a:32:0c:43:c9:a5:f0:09:5d:f9:bb:95:8e:b3:e9:1e:d0:48:
17:18:e9:fd:30:c8:28:40:a1:ec:88:8d:9b:99:a7:a1:76:82:
4a:be:04:07:23:72:9f:bd:48:e1:84:62:ea:e0:ac:05:83:b0:
99:cf:b5:81:58:1e:01:33:a4:40:bb:3b:0f:d0:9c:42:29:6e:
d0:40:2e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:39:12 2025 by rpki-client