Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kb4CxVzDiHb_zJJX0bVkjYXPRRM.roa
File: kb4CxVzDiHb_zJJX0bVkjYXPRRM.roa (raw, json)
Hash identifier: nfA64WaZQjBSQBkZKdKfw7xukcAgIkwXA8RwZP2dPF4=
Subject key identifier: 91:BE:02:C5:5C:C3:88:76:FF:CC:92:57:D1:B5:64:8D:85:CF:45:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C50178E113448CD4E826CA54E960A90D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kb4CxVzDiHb_zJJX0bVkjYXPRRM.roa
Signing time: Thu 09 Mar 2023 06:14:13 +0000
ROA not before: Thu 09 Mar 2023 06:14:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:01:78:e1:13:44:8c:d4:e8:26:ca:54:e9:60:a9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 9 06:14:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91be02c55cc38876ffcc9257d1b5648d85cf4513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:d7:44:ed:e4:c3:83:66:b5:3e:a1:c9:a0:
2e:4c:7f:db:9b:a3:87:d9:22:32:7a:71:1d:1f:b9:
15:e0:77:a3:2a:48:07:1b:1c:80:c6:98:5d:58:e7:
39:2f:f0:d8:5f:9a:8a:6a:f4:81:5e:25:05:1a:c3:
79:c3:49:e3:ba:18:2f:98:56:68:c7:10:2f:37:60:
50:bc:1d:9b:6c:63:cf:78:43:51:ef:3b:a2:80:91:
db:f3:c5:2e:1e:6a:b3:7e:87:43:26:1d:1a:71:e3:
be:0b:a1:71:4d:84:14:ac:c4:80:2c:37:ea:0e:5c:
84:06:74:49:24:74:85:44:ca:53:32:a2:ff:5c:5b:
db:92:05:4e:a8:ef:42:10:84:e2:39:2d:75:31:b8:
63:16:c9:cd:eb:b7:18:1c:ff:2b:bd:55:3c:50:e2:
34:9d:ac:0c:64:42:d9:da:bd:1c:b5:bf:fe:79:93:
83:3b:e4:b0:ed:e7:66:90:99:53:4c:e9:41:48:a8:
62:67:5f:7e:f4:60:b5:d4:ff:8e:c1:4f:bb:dc:bf:
36:df:8e:d9:f6:b4:40:b5:17:2d:aa:f9:d4:e0:2d:
97:9e:de:10:48:fb:0f:7d:a2:89:1c:ab:ce:f6:0d:
ab:94:41:10:ae:72:e4:0c:3d:54:9d:d1:78:dd:b0:
76:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BE:02:C5:5C:C3:88:76:FF:CC:92:57:D1:B5:64:8D:85:CF:45:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kb4CxVzDiHb_zJJX0bVkjYXPRRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:6b:cf:a7:4f:f7:b4:e6:f0:20:3d:1a:17:30:71:e2:ec:76:
ac:de:fe:46:16:21:54:92:e3:ba:1a:ec:f8:70:ad:1b:7e:ea:
6c:6c:b5:71:ee:0c:2e:d1:3e:d4:cd:85:3f:aa:e3:9a:5a:ef:
ac:5a:8a:3b:bc:7a:08:15:d8:b9:6d:05:34:89:67:46:92:54:
83:e9:4a:b1:73:64:5d:3e:e9:03:c9:d4:53:6c:a9:c6:eb:67:
82:f2:28:6f:aa:13:fa:4b:db:db:de:10:d6:09:6b:70:e8:ea:
b5:1c:d3:c0:a7:d4:ae:b7:97:cb:f3:47:e4:b7:f5:9d:85:57:
66:1a:5b:20:92:40:78:f9:a1:09:1a:c4:ff:75:95:4f:f6:07:
3d:14:ab:c0:fd:23:09:56:0b:bc:cc:22:06:4f:6d:ec:d3:3e:
4b:60:0a:1b:de:40:98:8c:6a:ee:83:62:25:32:99:7e:0f:ba:
64:27:1f:9d:68:96:40:77:e8:af:6a:32:5d:27:95:c2:91:34:
c1:91:95:d6:aa:cd:a2:d2:ef:b0:b7:13:3d:92:31:a1:14:3f:
49:01:df:74:b6:15:48:bc:c5:f3:f9:6c:a3:31:85:e0:f7:d1:
de:cc:5c:68:fe:9e:ca:13:c7:19:7d:b2:b0:97:c3:b6:41:5b:
c6:ba:98:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:15 2025 by rpki-client