Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kTRumjbctjAiepOZYpASnzCWAeg.roa
File: kTRumjbctjAiepOZYpASnzCWAeg.roa (raw, json)
Hash identifier: 0RFuae2wroNCYO8rYyTD0Ig6p67KjNlvjDcTckYPL4Q=
Subject key identifier: 91:34:6E:9A:36:DC:B6:30:22:7A:93:99:62:90:12:9F:30:96:01:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851467ED7D943AD081AA2017EBB10F7931
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kTRumjbctjAiepOZYpASnzCWAeg.roa
Signing time: Thu 15 Dec 2022 06:10:33 +0000
ROA not before: Thu 15 Dec 2022 06:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:14:67:ed:7d:94:3a:d0:81:aa:20:17:eb:b1:0f:79:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 06:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91346e9a36dcb630227a93996290129f309601e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7a:81:30:67:f8:4c:06:0d:83:a5:80:54:6f:
64:06:0a:02:82:24:8e:bc:a1:bf:1c:80:52:1c:d6:
00:3a:af:4b:01:75:0e:1d:ae:11:43:b4:77:33:de:
91:4a:c5:1e:c8:28:07:66:5a:c4:4d:94:49:08:6f:
c4:e4:57:a8:7a:70:83:4a:b1:e4:63:41:7e:cc:83:
dc:0c:77:af:6b:36:c7:89:5d:91:81:f6:45:97:56:
a1:31:2c:41:73:4f:61:03:1b:68:5e:36:43:ef:b4:
13:43:39:7b:85:1d:0c:19:e1:f8:12:b1:e1:2d:1b:
3c:ff:0e:e7:5b:d7:ba:df:b2:ea:99:e9:93:04:95:
a5:fd:41:f2:ad:fb:59:d9:08:81:69:cd:f0:5a:28:
a4:a4:3e:37:83:97:a6:a0:e3:a2:80:bc:f4:cb:c0:
5b:9d:e7:3c:c3:58:d7:ba:77:9e:bf:fd:b7:05:49:
87:32:25:7d:56:43:57:73:ca:85:68:ea:79:51:96:
7d:cd:fd:70:0d:f9:72:bf:fd:ed:94:e9:15:14:18:
44:e9:84:e8:1d:d4:74:96:45:3d:2e:0c:96:63:50:
b8:c2:a2:1f:46:d6:d1:ce:f3:c2:f0:48:f9:2c:e6:
dd:38:47:d9:52:2c:81:5c:b6:48:fc:38:1d:7d:d7:
c4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:34:6E:9A:36:DC:B6:30:22:7A:93:99:62:90:12:9F:30:96:01:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kTRumjbctjAiepOZYpASnzCWAeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:d5:fc:31:56:7f:35:46:d2:b9:a7:93:56:75:ef:2a:e1:9a:
79:c3:be:ff:6d:aa:8e:a4:dd:77:84:e2:94:c5:26:95:a9:cc:
de:4e:a7:b0:4c:65:39:95:a9:32:8c:df:dd:e8:7f:a9:22:c0:
c9:c8:b9:fb:b9:6d:27:b2:cf:d4:3c:75:21:38:97:b9:af:ef:
57:75:e2:d8:1d:7d:87:5d:b2:0a:c3:fc:5a:4d:13:76:a1:59:
3f:03:f0:61:fe:ab:43:90:ee:c6:9a:92:1e:ba:de:82:b0:bd:
fd:9e:31:af:92:82:ba:6f:ff:50:7e:b1:d4:49:d6:42:f4:61:
ca:10:b1:95:77:bb:72:51:5c:5f:a0:ad:27:7b:b6:b4:62:8c:
54:e8:1a:fa:a8:41:7e:30:d0:27:f9:41:a6:e5:df:ff:ef:df:
2e:f0:37:b4:6b:d5:ea:7a:1a:3d:bf:6d:13:37:06:df:7c:f3:
3e:59:60:70:07:6f:3c:32:14:d7:51:6d:7e:6c:cb:8a:d0:ea:
64:be:60:38:33:76:b0:f6:e3:3e:2b:02:e7:b5:d2:df:42:2e:
84:ea:88:f9:b1:8c:3d:34:3e:d6:57:35:ab:68:b3:9d:9a:61:
57:3e:8d:a1:dc:ad:30:f4:9f:ac:cb:7f:26:a2:dc:48:60:e8:
e4:4d:90:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:40:47 2025 by rpki-client