Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kWuonpzJTv4NDO_ZjLoEVSCeDSw.roa
File: kWuonpzJTv4NDO_ZjLoEVSCeDSw.roa (raw, json)
Hash identifier: ELki2TFPdnbxScdR0eJZS9iL3kwFnyX5xyREjPeZ9nw=
Subject key identifier: 91:6B:A8:9E:9C:C9:4E:FE:0D:0C:EF:D9:8C:BA:04:55:20:9E:0D:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185180DCA6E0658F1FC013FDEDDAB1A20A5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kWuonpzJTv4NDO_ZjLoEVSCeDSw.roa
Signing time: Thu 15 Dec 2022 23:10:35 +0000
ROA not before: Thu 15 Dec 2022 23:10:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:18:0d:ca:6e:06:58:f1:fc:01:3f:de:dd:ab:1a:20:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 23:10:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=916ba89e9cc94efe0d0cefd98cba0455209e0d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ef:e6:47:37:47:d3:5a:08:9f:11:10:47:88:
06:b5:2f:df:be:ae:28:6c:c1:17:09:08:21:c0:9b:
7d:70:68:6d:49:6a:9a:e9:16:19:18:e9:85:3a:61:
b5:17:35:1d:9b:7f:d0:53:b2:ee:9a:b2:58:97:64:
66:be:55:08:3c:6e:50:19:fc:d3:54:4f:72:26:aa:
95:30:02:83:87:8c:da:81:30:5f:c9:03:69:b4:6a:
3b:bd:69:b1:c2:3d:6a:56:1d:5b:79:1e:e0:64:35:
f5:e0:b3:0f:1f:66:e2:76:d3:5d:e5:35:4a:0a:e3:
e6:3a:98:32:65:aa:92:63:0c:f9:36:7f:ea:b4:d3:
7b:8d:50:e7:67:c8:3c:05:64:75:22:df:df:fa:68:
c2:1a:6b:d7:50:bc:b8:ae:aa:1e:d4:17:77:1c:33:
a3:54:d3:f0:e7:bb:82:4d:58:cf:02:25:63:0c:52:
4a:67:72:ec:a3:cb:3d:4c:9c:bd:1e:69:ba:7c:b5:
d6:74:05:04:51:c0:b7:32:bf:4c:41:2b:10:dc:4e:
e0:69:aa:8a:97:0a:0c:a5:68:d3:ff:d7:98:27:24:
0c:7a:c8:a9:ad:a5:9e:ed:05:b0:18:ed:03:47:b7:
7c:0c:05:c4:25:60:20:77:4e:88:6f:14:69:10:bc:
c8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6B:A8:9E:9C:C9:4E:FE:0D:0C:EF:D9:8C:BA:04:55:20:9E:0D:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kWuonpzJTv4NDO_ZjLoEVSCeDSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:9e:d9:12:0d:9f:cd:2f:58:c7:07:27:54:b0:89:66:c7:aa:
4e:f3:dd:7c:44:e5:ef:2c:00:17:69:ed:dc:a0:be:73:b7:63:
e4:14:d4:10:66:db:bd:a5:fa:e4:e2:46:0e:99:9e:5b:3c:f8:
4b:d3:b6:9a:bd:d7:cc:42:d5:af:9c:53:af:95:62:1b:a5:83:
c9:d8:f5:d2:9c:a1:d9:bc:08:14:b4:92:a8:13:fe:9c:58:3f:
a1:3f:59:29:af:03:d6:52:c0:0e:da:28:e8:55:eb:05:dd:ae:
d7:65:5f:a7:58:d1:4a:ca:66:d7:80:f2:06:fc:f8:c8:39:f4:
04:d5:7e:c5:c4:03:70:e2:77:2b:af:90:51:af:0c:d4:82:d7:
f4:ad:dc:7f:f7:2d:92:71:f1:cc:10:49:53:73:f4:de:0d:f9:
15:d4:d1:8c:85:e6:b4:52:29:d2:cf:a6:0e:38:1a:d4:c1:2d:
1d:fa:19:0b:e6:81:9f:0d:dd:b7:81:24:1f:37:9e:0f:45:b6:
f8:05:35:f8:e3:ce:f0:da:a1:ef:5d:7c:ba:cc:14:19:35:2e:
a5:fb:d2:2a:c5:ee:fa:3d:ef:e3:67:5a:68:f6:7a:83:2d:9f:
da:09:6b:9e:4f:d7:a1:28:e7:05:b9:db:5a:35:7f:7f:63:50:
c5:9a:cc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:19:25 2025 by rpki-client