Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kXr6D6F6a1jkzdK3fYXVQqnKwM0.roa
File: kXr6D6F6a1jkzdK3fYXVQqnKwM0.roa (raw, json)
Hash identifier: DvMEIBXZ0HYoUhSFXHjR+dFKBLJ60Haw5Zrt3UofqPc=
Subject key identifier: 91:7A:FA:0F:A1:7A:6B:58:E4:CD:D2:B7:7D:85:D5:42:A9:CA:C0:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188522C73BFA29540FE745104BE63DA122B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kXr6D6F6a1jkzdK3fYXVQqnKwM0.roa
Signing time: Thu 25 May 2023 09:10:24 +0000
ROA not before: Thu 25 May 2023 09:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:2c:73:bf:a2:95:40:fe:74:51:04:be:63:da:12:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 09:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=917afa0fa17a6b58e4cdd2b77d85d542a9cac0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:ea:2b:be:6b:d8:71:e5:6d:b4:a3:5e:8a:
0a:d2:02:8b:76:10:77:c7:5d:24:73:2d:61:fe:95:
9b:04:fe:c0:b0:d5:f4:e3:4d:2b:f0:1a:01:5f:e9:
73:dd:a5:da:57:98:59:77:11:27:8f:fb:49:ee:2b:
57:f1:8a:cf:63:f5:4c:c8:81:bd:a8:73:ef:a6:93:
1a:37:01:45:98:be:76:d4:8e:94:4a:85:21:8c:09:
88:22:24:19:1f:ed:6f:35:dc:b1:94:0d:83:54:14:
09:13:6f:98:29:fb:34:c7:0a:0a:ca:de:45:f3:53:
1c:26:67:dd:62:a8:49:f9:f4:41:dd:e8:47:6a:02:
d4:59:f7:2e:f9:ac:e8:20:cf:56:a8:24:17:64:1c:
a8:76:2c:b0:7b:2f:2f:e7:ca:fe:6b:ab:90:19:4d:
8e:5b:0e:7f:a5:95:04:b3:1a:9d:29:8f:f2:6d:03:
f7:cd:e8:5c:78:ec:32:32:c1:b7:90:9b:89:de:eb:
75:e0:59:9c:87:c7:09:57:af:a2:a2:d2:ae:65:49:
d2:ae:f3:4c:dd:2b:fc:38:cd:39:5f:ae:68:1d:e4:
b2:5c:91:ca:4a:f9:f9:93:7b:53:be:6a:a2:19:ca:
61:39:50:00:80:28:c7:3b:19:c0:d9:d4:e2:a0:96:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7A:FA:0F:A1:7A:6B:58:E4:CD:D2:B7:7D:85:D5:42:A9:CA:C0:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kXr6D6F6a1jkzdK3fYXVQqnKwM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:0a:bf:49:99:2d:47:aa:bd:ae:f5:a7:c0:a7:48:f6:dc:92:
3f:13:64:dd:1c:3e:32:b3:b8:b4:97:ed:1d:ce:73:8e:4a:ac:
9e:30:92:bb:cd:30:ad:a6:1c:e2:06:a5:c3:7b:92:f5:22:d6:
97:9c:26:89:6e:6e:61:66:b8:94:6a:df:4a:ea:66:1c:d5:fa:
4a:72:2d:45:11:8f:e7:77:87:66:2b:6d:0d:76:13:0b:c5:41:
da:c6:9f:2b:96:aa:33:8c:6c:34:30:38:77:09:cd:79:37:e7:
6b:e9:ae:5a:2e:26:b7:95:f0:e3:c2:84:27:4b:77:dc:22:71:
52:1d:7e:f8:ce:20:49:16:b7:9b:1f:85:6a:75:fd:52:31:19:
84:0c:12:20:43:51:f1:47:90:dc:e0:98:78:6b:ad:89:35:7d:
26:df:7c:69:99:b7:d0:91:53:21:ea:3c:93:f4:f1:5c:33:89:
f4:0d:76:dc:e9:eb:75:21:cd:56:72:6c:4e:8e:7e:09:6e:1b:
a7:13:dd:74:3e:63:78:71:70:22:51:f0:70:b8:0f:b6:1d:d7:
a5:d7:fe:eb:03:cf:d2:d3:2f:17:16:f4:09:f5:df:86:27:7b:
1d:ab:8c:46:d1:01:0d:a8:f8:78:1f:ca:9a:9d:fd:35:94:41:
a3:cd:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:23:45 2025 by rpki-client