Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kX9SCr7SCvu32hKlzMGaCQfn0VE.roa
File: kX9SCr7SCvu32hKlzMGaCQfn0VE.roa (raw, json)
Hash identifier: //53d6/fUYTjYuYhGSnIc9e8SPydnGu2QgIAauhKdWE=
Subject key identifier: 91:7F:52:0A:BE:D2:0A:FB:B7:DA:12:A5:CC:C1:9A:09:07:E7:D1:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184B2FFB461D0DB0A93439DFACD1E629166
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kX9SCr7SCvu32hKlzMGaCQfn0VE.roa
Signing time: Sat 26 Nov 2022 08:13:33 +0000
ROA not before: Sat 26 Nov 2022 08:13:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b2:ff:b4:61:d0:db:0a:93:43:9d:fa:cd:1e:62:91:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 26 08:13:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=917f520abed20afbb7da12a5ccc19a0907e7d151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9f:8c:df:70:96:53:32:96:54:64:66:47:69:
d4:d9:e3:b7:3e:24:5a:db:c5:c4:f2:09:11:30:d6:
8e:03:a4:6a:78:8b:ba:fd:ab:35:ed:1c:75:b8:32:
fb:ed:e8:d1:2c:37:93:db:45:58:f1:32:d9:72:50:
19:6e:47:ce:3a:14:7d:30:6e:cb:e3:3d:c0:23:9b:
1c:1b:65:24:4f:35:13:57:e8:31:a8:58:8b:54:36:
dc:f8:4e:8c:98:c9:b8:82:1f:d7:2a:72:f6:05:21:
33:83:c5:33:f4:f7:6c:9d:6e:59:be:34:ef:2c:d4:
70:29:59:d5:e5:10:c9:f8:ba:46:a2:5e:47:c1:bc:
e8:58:0a:57:16:a4:56:d6:c4:f3:7a:81:a7:9c:e0:
0d:c0:58:29:3a:fa:ab:25:45:ee:55:6a:75:3f:18:
a3:20:3d:79:fa:59:b9:3a:e9:e6:01:5f:f2:ce:c8:
dc:c7:0c:14:6b:72:1f:84:74:eb:41:40:09:6d:44:
48:17:3a:ee:89:7d:52:8d:17:97:45:f2:c5:85:43:
29:f8:99:0d:db:56:ce:87:0b:fe:93:a4:75:42:b8:
11:e3:81:bb:17:54:a3:61:3e:60:74:be:b7:8e:28:
6a:22:4c:20:f5:72:c5:6e:e1:ab:98:71:fc:71:11:
a1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7F:52:0A:BE:D2:0A:FB:B7:DA:12:A5:CC:C1:9A:09:07:E7:D1:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kX9SCr7SCvu32hKlzMGaCQfn0VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:2b:ec:3e:48:0e:88:57:af:e4:08:71:6a:98:6a:74:67:28:
06:b7:a6:0a:ac:3e:7c:3a:f4:7e:09:45:7b:2b:eb:7b:e9:b1:
fd:d5:4d:af:65:a0:4c:08:69:3c:90:d5:d3:62:c8:a4:05:b3:
bb:6f:a6:10:64:11:0f:a6:00:9c:e8:01:ed:bd:ea:bf:91:5b:
ad:7d:69:e8:f0:2f:ee:ed:e1:32:0c:d6:b0:28:b4:b2:a8:33:
2f:57:0d:64:29:f8:88:3e:21:5c:e6:d0:de:48:6c:e3:bf:ed:
a0:24:59:22:5c:26:79:66:e6:66:6b:c0:26:b6:fb:10:7f:01:
2f:1f:0a:ec:d4:96:be:8a:05:8d:c8:01:6f:b9:e5:93:04:8a:
dd:53:00:ec:17:fc:19:5e:1e:4c:2b:b1:61:56:a3:69:13:d6:
bf:34:8b:65:b4:79:9b:6f:e4:63:18:df:51:27:b5:68:60:10:
27:69:e7:5e:34:ec:44:09:10:5e:27:94:e5:2c:76:2c:72:66:
d3:db:1d:7d:5c:72:83:5c:0f:92:2e:d6:5b:7c:c5:3b:9d:c4:
82:45:54:4c:d5:c2:a1:cb:3b:3a:93:64:e1:47:22:46:51:c7:
d3:20:5e:6e:36:a9:f1:8c:b4:46:29:5b:00:fd:70:9d:2f:31:
e7:eb:2d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:14 2025 by rpki-client