Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kVaYyUs0gfXiqrAf_biuAN1Gur4.roa
File: kVaYyUs0gfXiqrAf_biuAN1Gur4.roa (raw, json)
Hash identifier: 65jqMn5YNMjmJ0/nrrdlTOGpEdh9KoZHs+d0S0CEYGs=
Subject key identifier: 91:56:98:C9:4B:34:81:F5:E2:AA:B0:1F:FD:B8:AE:00:DD:46:BA:BE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018748C136F8815016397D993CAA8E3EDF07
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kVaYyUs0gfXiqrAf_biuAN1Gur4.roa
Signing time: Mon 03 Apr 2023 20:13:54 +0000
ROA not before: Mon 03 Apr 2023 20:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:48:c1:36:f8:81:50:16:39:7d:99:3c:aa:8e:3e:df:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 20:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=915698c94b3481f5e2aab01ffdb8ae00dd46babe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:ee:79:b6:fc:fc:f4:56:25:6f:7d:fa:77:
e6:65:39:69:29:ae:d4:04:4c:89:cb:92:ca:10:0c:
87:10:c5:7e:3c:a9:f0:f1:0c:f3:33:0b:d7:4a:5d:
37:44:b2:7a:64:86:8c:4c:5a:4e:fc:d2:5a:b5:da:
86:46:b9:7c:c7:4e:77:17:d6:b7:ba:65:f7:c6:2b:
22:db:60:ba:a8:c4:bd:60:91:a8:09:fc:1e:d3:69:
fa:92:d9:7a:e8:ca:44:4a:6f:70:b8:62:65:28:a5:
da:a5:ad:83:ca:9d:0c:c9:da:83:54:4a:38:fa:08:
a3:50:c4:e7:c0:c6:99:2c:e8:33:ec:f7:07:d0:62:
df:b9:05:9c:bc:e0:0b:e1:e7:9e:c8:d0:bc:e9:32:
76:2f:c9:ab:c4:74:9b:81:e4:a4:e4:b1:ef:96:2f:
a9:d3:6b:e8:ff:c7:60:98:ad:32:f8:90:0c:2e:01:
99:3e:a9:b3:45:84:55:95:ed:8e:21:0a:3c:a5:d0:
f1:2f:7d:19:22:00:28:f1:a4:cb:da:b7:1d:ff:63:
d0:50:68:1a:90:39:ab:0e:ab:0a:dc:19:68:32:ef:
80:65:2d:92:70:f5:ac:a2:14:c8:a4:38:b6:5b:77:
3e:d1:2c:e5:39:4a:4a:bd:96:9d:11:3b:36:7f:7e:
47:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:56:98:C9:4B:34:81:F5:E2:AA:B0:1F:FD:B8:AE:00:DD:46:BA:BE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kVaYyUs0gfXiqrAf_biuAN1Gur4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:e8:55:ee:45:e2:15:1a:47:de:6c:de:fa:08:af:ff:ac:14:
8b:5c:2c:95:2f:5f:3a:95:eb:ed:a7:08:80:1c:38:92:9d:40:
87:2c:11:72:8a:d6:8f:0a:8a:b5:1a:f2:ee:6f:72:98:2a:f9:
ae:77:60:2f:f8:aa:46:54:29:4d:ee:5b:45:18:08:ea:55:64:
ef:05:78:8b:6a:a8:b0:33:29:22:8a:b7:59:49:93:3c:4f:44:
10:38:b0:06:1b:3e:93:9d:64:2c:1a:49:68:4f:b6:07:7f:2b:
53:7c:27:5c:6d:89:6d:0d:70:03:69:8b:89:8a:c3:63:eb:ba:
ba:57:ea:a9:6b:33:99:0c:e2:7e:6d:fd:ed:11:83:31:42:a0:
99:57:ec:e4:fd:e6:87:54:97:c0:7f:27:75:70:2b:b4:4b:23:
ec:ff:74:9d:36:f1:54:65:80:17:50:27:11:58:88:ca:80:36:
18:65:ad:77:e1:85:1b:7a:37:a0:cc:48:18:1c:65:62:72:85:
cc:5b:c8:ad:1f:36:cf:83:d7:05:a7:09:ba:5b:1a:2e:da:0f:
f8:8c:07:41:cb:59:59:48:a3:aa:77:85:eb:44:c7:99:b6:29:
a7:da:a9:32:8f:70:5d:3c:32:2d:e7:ee:29:7f:d9:b0:90:8d:
28:43:aa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:25:04 2025 by rpki-client