Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kZiBgUMFCCPU-dw_X0ER1RyG0Z0.roa
File: kZiBgUMFCCPU-dw_X0ER1RyG0Z0.roa (raw, json)
Hash identifier: jPSyJVGYKn5vnhgBLNRZHk7ReCOPzkuBFnicKDTRVuk=
Subject key identifier: 91:98:81:81:43:05:08:23:D4:F9:DC:3F:5F:41:11:D5:1C:86:D1:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 76DB686D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kZiBgUMFCCPU-dw_X0ER1RyG0Z0.roa
Signing time: Wed 30 Mar 2022 03:10:35 +0000
ROA not before: Wed 30 Mar 2022 03:10:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1994090605 (0x76db686d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 03:10:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9198818143050823d4f9dc3f5f4111d51c86d19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:33:d6:98:45:70:9b:43:1a:f6:ea:76:33:51:
a6:6f:99:a1:f4:93:72:e7:9a:28:37:88:c9:65:9a:
40:39:e6:ff:08:ba:2c:09:0f:c4:2a:49:90:f7:be:
26:b2:b7:88:19:15:f9:5d:76:fa:3a:c5:55:46:4b:
76:81:4f:63:39:0d:5e:df:2a:82:16:f7:1d:d9:fc:
c5:71:6a:fa:ba:78:ed:3a:df:29:86:e4:9d:36:12:
92:e8:ad:63:e8:25:a0:64:92:53:d0:e4:70:70:6e:
1b:69:b5:ed:cc:77:11:87:eb:5a:34:dd:04:28:6b:
cc:2a:1d:d3:b5:7d:36:2b:a4:e9:8d:67:ca:d0:26:
c5:f9:da:6a:02:f6:cf:77:24:c5:d6:d7:15:a8:37:
51:1d:e3:77:c8:32:6e:8b:8c:71:de:e2:bc:81:9d:
3b:93:15:b2:74:7b:ca:04:92:d4:1d:26:d2:a5:7f:
64:76:13:aa:dc:ea:b4:82:0b:e9:9b:8f:b5:87:6c:
36:99:e4:91:87:d6:f3:33:7d:ca:b7:ca:d8:24:bc:
5e:8d:c9:fe:e9:72:e2:c7:db:14:3e:43:f6:06:42:
66:e4:ea:c6:f3:fc:fd:f2:a1:b6:af:54:57:b4:e6:
02:e6:f1:40:05:82:7d:5d:62:01:10:25:db:2e:62:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:98:81:81:43:05:08:23:D4:F9:DC:3F:5F:41:11:D5:1C:86:D1:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kZiBgUMFCCPU-dw_X0ER1RyG0Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:6a:03:11:d4:d0:dd:68:42:eb:c5:e6:1d:49:b7:a1:62:14:
6f:1a:b1:4c:7d:5d:6d:8f:a2:ec:52:b1:cb:96:0f:fb:86:e0:
8e:41:b4:19:db:ab:d3:97:42:89:ab:94:84:a9:5d:10:2f:31:
c0:6f:cc:38:d6:a6:3a:de:f3:d3:17:9e:10:70:90:5d:63:1a:
54:79:13:02:88:17:7b:f1:5c:e4:da:6f:75:87:ba:7d:3a:1b:
1a:e9:40:94:08:b6:45:8a:3b:be:8b:ab:ec:24:91:e6:db:3f:
8f:80:2c:b5:ff:9e:57:6f:ca:4e:99:8b:fa:54:2f:65:cd:99:
53:cc:1d:96:69:f8:5f:31:18:bf:fc:2c:8c:f0:c6:f6:24:a1:
cd:ae:1b:88:51:43:c1:d7:56:c0:c9:d8:d5:8c:d9:ba:d5:bd:
39:be:76:43:19:66:f3:c2:6e:87:a0:c3:57:f2:d5:65:4f:45:
37:22:c3:fa:fa:89:7c:f8:b1:29:ca:ee:48:20:b4:86:44:32:
98:b0:72:ad:95:8f:9c:bf:bd:3b:ae:37:0e:ef:72:62:af:38:
cb:43:2a:00:48:d4:bd:5f:9d:56:d5:e3:1a:4c:f7:ba:97:fd:
be:a5:a2:77:30:a1:0b:23:08:1c:e1:cf:65:a4:77:35:77:68:
cd:25:0b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:35:42 2025 by rpki-client