Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kausjVyfL_SezZXoeOftzabEzCM.roa
File: kausjVyfL_SezZXoeOftzabEzCM.roa (raw, json)
Hash identifier: TYHkHC1ADCiasssFfCG01ci62c40v1dx7+xqjwAwwZI=
Subject key identifier: 91:AB:AC:8D:5C:9F:2F:F4:9E:CD:95:E8:78:E7:ED:CD:A6:C4:CC:23
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871B799B9CFE816CC55980B25BD0D74813
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kausjVyfL_SezZXoeOftzabEzCM.roa
Signing time: Sun 26 Mar 2023 01:12:47 +0000
ROA not before: Sun 26 Mar 2023 01:12:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1b:79:9b:9c:fe:81:6c:c5:59:80:b2:5b:d0:d7:48:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 01:12:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91abac8d5c9f2ff49ecd95e878e7edcda6c4cc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:57:b7:2d:29:4d:f7:6a:ff:bf:c2:1b:c7:3e:
67:cb:38:19:0c:18:0c:bc:06:19:44:32:e5:1f:32:
29:de:24:9c:64:f5:37:30:0c:3c:c3:27:b2:84:7e:
68:d9:a6:f8:25:c8:90:b2:db:56:e0:46:01:a0:c0:
0a:55:f0:10:24:ad:34:fb:a6:36:9b:3d:2b:db:6d:
43:ea:d1:8c:f8:b6:47:5f:db:70:37:3c:86:ba:6f:
13:33:f5:5a:51:62:67:c2:12:17:78:6a:04:b0:dc:
56:f8:db:aa:30:bb:c8:12:b1:da:61:6b:a4:86:ca:
9e:f6:cb:a6:7c:01:3d:0a:89:ad:71:a7:a1:7f:b6:
00:2a:e6:18:61:a8:79:ad:38:f3:78:dd:d3:5b:0b:
4a:5d:87:74:fd:ba:a5:20:78:34:d1:1a:da:e8:ac:
fe:7d:d4:8e:53:ab:96:c8:df:77:79:53:fb:98:c6:
9d:c0:e9:5c:49:57:7b:ab:cd:6a:f3:3d:94:a6:40:
e3:6f:4b:3e:dd:d6:bf:4f:dd:fc:6a:f0:3d:22:e5:
26:33:03:70:a6:a5:86:c6:27:58:71:1f:a4:7e:77:
27:6a:f0:d5:84:ba:bb:5d:0a:f4:d3:9d:01:7c:be:
c0:7d:77:d5:8f:f3:85:ff:05:b1:d4:0f:e5:96:25:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AB:AC:8D:5C:9F:2F:F4:9E:CD:95:E8:78:E7:ED:CD:A6:C4:CC:23
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kausjVyfL_SezZXoeOftzabEzCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:f3:a6:d8:8a:b8:29:68:b7:74:6c:05:b0:be:27:e0:91:32:
0c:17:2b:3d:60:d6:13:ff:39:46:9a:f7:4b:b3:3d:1d:27:95:
cd:dc:a5:c7:c3:bf:cd:c7:ae:77:f3:21:09:65:5e:d8:1c:d4:
a7:64:79:d7:65:8a:fa:56:53:45:9c:b1:55:66:9d:13:9d:0e:
7e:32:f5:36:2c:33:72:5d:68:c0:56:0e:ce:10:2a:94:5c:51:
bd:b6:d9:84:25:4e:84:b3:67:bf:28:43:e8:d0:9f:11:61:87:
1b:a1:d0:c1:96:74:3a:a1:fd:6f:2d:d0:90:df:df:d9:c3:8a:
ee:0c:f3:7e:4a:7a:cd:5d:7a:d1:90:c4:32:ed:6a:01:ad:71:
1c:d1:a0:1d:58:64:13:e5:25:b3:8e:73:55:2a:00:e9:0c:cc:
47:08:0e:5b:ea:22:f8:3e:84:d8:d2:90:ab:46:6e:0a:33:69:
69:93:d6:44:38:2d:3c:bc:5a:7b:ad:22:08:03:2f:c6:b4:bb:
c2:64:d7:5d:47:b0:19:9e:a7:67:b1:99:74:73:69:0b:cc:13:
fc:e3:df:61:fa:c1:2b:2b:9a:08:11:ca:69:fd:b4:95:14:29:
60:dd:d8:a4:58:40:19:7a:c0:2e:9c:ed:53:52:c2:0e:9a:31:
af:29:f1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:05 2025 by rpki-client