Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kRd_6yUJ7pi4oTnjRPNIreJWx0I.roa
File: kRd_6yUJ7pi4oTnjRPNIreJWx0I.roa (raw, json)
Hash identifier: Y+EvpzAmn52KSlbm75X1qNoEdrQXK58z17uZiMKaa+Q=
Subject key identifier: 91:17:7F:EB:25:09:EE:98:B8:A1:39:E3:44:F3:48:AD:E2:56:C7:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186CED8172296EA97EDA5064E76393CFCF1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kRd_6yUJ7pi4oTnjRPNIreJWx0I.roa
Signing time: Sat 11 Mar 2023 04:05:13 +0000
ROA not before: Sat 11 Mar 2023 04:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:ced7:9539/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ce:d8:17:22:96:ea:97:ed:a5:06:4e:76:39:3c:fc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 04:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91177feb2509ee98b8a139e344f348ade256c742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:02:ae:f5:7c:94:48:05:ac:c7:5f:6d:21:82:
ad:62:7d:08:34:a2:5b:44:48:e0:31:c5:1c:d0:e7:
04:cf:2e:ab:79:e2:b4:2b:40:44:02:b9:b2:00:7d:
ed:1e:9d:af:43:71:78:1d:ac:fb:9b:1d:12:b8:25:
24:89:30:9b:5b:ac:f2:2a:9d:b1:97:0d:b5:53:7f:
65:2d:59:f5:80:ac:42:d2:1d:fa:32:01:57:47:38:
3d:c7:c2:f0:2b:82:c2:86:22:85:80:ed:f0:c7:9a:
d3:23:a2:af:c9:f8:fe:8f:aa:24:24:a6:40:14:ef:
07:9c:06:73:98:96:7b:44:8e:63:16:b4:08:1f:c2:
4c:78:bb:02:64:b0:da:ef:2d:e0:a9:b9:8e:3b:f2:
1a:57:69:f3:3e:48:11:37:90:c2:ed:cd:dc:1e:b0:
ef:ad:2a:2c:dc:e3:81:60:17:3e:98:b2:5b:3a:25:
45:78:fb:68:10:f5:76:12:d2:e1:82:82:65:fa:ed:
7f:04:2c:4b:69:df:29:1b:13:33:7d:d7:19:2d:d3:
48:b2:8b:ae:0f:df:d0:ce:84:12:68:53:2f:13:29:
c3:6e:89:0c:9e:a3:53:8a:2e:65:a8:c0:0a:59:04:
b7:26:64:3a:f8:af:13:fb:ea:cc:16:50:69:4e:2a:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:17:7F:EB:25:09:EE:98:B8:A1:39:E3:44:F3:48:AD:E2:56:C7:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kRd_6yUJ7pi4oTnjRPNIreJWx0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:1c:7a:a8:c5:7a:1a:a9:da:ee:9e:2c:67:35:82:b3:a2:18:
30:e9:9c:f7:b3:1b:91:75:3e:95:30:cf:a9:59:9c:12:54:81:
0f:c8:99:7a:6d:05:a8:56:10:e9:da:ee:d2:d2:1c:7b:59:95:
b6:5d:35:88:79:80:36:5c:25:e6:dd:27:6f:c9:28:e2:30:e1:
77:ef:03:50:a5:f3:00:9c:da:90:6f:e4:79:4d:6f:86:f7:db:
ed:f5:fc:93:dd:0f:fc:89:82:b3:a1:99:87:60:48:00:50:a1:
ae:67:de:28:7e:9a:a3:1c:c7:4d:e5:3a:89:b3:31:88:38:2e:
b4:3c:43:22:df:6f:bd:2b:25:9b:ca:c3:b7:ed:2f:56:3e:96:
49:2f:26:fc:50:1c:8b:a9:26:c3:65:9c:29:0a:bc:33:cd:79:
51:fd:55:cc:03:01:36:50:b4:75:cf:56:06:9d:1a:86:a4:01:
79:23:46:e4:60:91:47:65:09:17:97:12:61:ca:45:5e:4c:ea:
02:73:05:bf:8c:20:c8:bc:1a:78:36:02:f8:94:ef:d6:a9:df:
32:56:9c:5f:4a:ff:3c:62:ce:8f:bd:d9:3e:13:a3:dd:58:04:
8f:d0:c6:c9:ec:6b:56:12:17:fd:4e:1e:38:56:0f:a9:41:ed:
f2:67:88:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:34:13 2025 by rpki-client