Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kc5K2p3uAk3sKis-AK49CCdeEIw.roa
File: kc5K2p3uAk3sKis-AK49CCdeEIw.roa (raw, json)
Hash identifier: bdRj1E2PZkR182d9y+nOXRinBhlus8B/BOI63kSIKVg=
Subject key identifier: 91:CE:4A:DA:9D:EE:02:4D:EC:2A:2B:3E:00:AE:3D:08:27:5E:10:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018947E140934FD78662A0EDA74D6EDD94C2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kc5K2p3uAk3sKis-AK49CCdeEIw.roa
Signing time: Wed 12 Jul 2023 02:14:51 +0000
ROA not before: Wed 12 Jul 2023 02:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:47:e1:40:93:4f:d7:86:62:a0:ed:a7:4d:6e:dd:94:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 02:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91ce4ada9dee024dec2a2b3e00ae3d08275e108c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8d:6c:74:4d:3b:23:b6:4f:85:dd:d6:88:d0:
6d:b7:c7:23:ba:1c:f9:e7:4e:e7:11:31:8d:cc:02:
ff:58:b2:6d:0c:ef:da:43:fe:94:bd:68:f3:7e:48:
20:02:b4:e3:f2:e5:6c:f0:ea:42:07:19:f8:bd:20:
bf:15:ef:3c:06:94:9c:66:dd:94:24:21:da:a1:c7:
9b:4a:1c:64:d4:a7:f5:67:a8:fb:b0:30:66:73:d0:
48:13:ff:41:d3:0f:7b:c2:4c:9a:f7:02:65:bc:55:
d1:20:fb:c3:db:a5:a1:e7:9b:1e:fe:f8:b0:db:cc:
b5:52:2b:0a:cc:88:2c:e0:ad:59:4d:65:18:f9:b7:
a6:26:de:03:88:82:51:d5:c6:49:cf:ec:c4:24:f4:
ec:3f:2e:4a:10:9f:f0:69:5b:57:59:7a:0d:bd:a4:
2d:e3:9e:87:36:8f:8f:e4:e7:11:39:d6:68:00:4b:
45:90:b7:5e:67:fb:6e:6b:1c:f1:a6:da:17:50:0c:
7d:29:b7:86:ab:26:ad:d8:b1:83:80:5c:8f:c5:b5:
e3:64:f4:99:ae:ac:3a:e3:34:df:f5:fd:2b:c0:0b:
e9:73:53:da:cf:21:ac:2f:43:ed:b1:c9:39:b7:de:
0f:ab:fd:2d:17:61:68:ee:ad:0f:4d:67:9d:9e:dc:
91:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CE:4A:DA:9D:EE:02:4D:EC:2A:2B:3E:00:AE:3D:08:27:5E:10:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kc5K2p3uAk3sKis-AK49CCdeEIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:c8:7c:f2:23:a1:f1:1f:1a:fd:eb:44:aa:10:ba:08:b5:71:
f4:64:29:07:3a:3a:f1:d0:19:de:c7:cf:70:ca:bc:25:04:4a:
4c:55:09:86:d8:1b:b6:0b:dc:b8:95:68:9d:58:ee:f8:6b:f9:
d5:50:a2:b3:40:59:06:f0:ec:fa:c4:76:10:b4:1c:b5:b3:db:
1f:a9:7b:c0:d0:36:4e:c2:79:67:47:25:01:9c:4f:af:f4:59:
4e:87:73:05:2f:62:ae:6b:14:85:41:b7:ca:b1:3c:40:ec:0d:
47:18:5c:1f:b9:f6:ca:cd:d1:b0:33:3d:f5:f9:0e:35:c0:8e:
af:3f:c6:76:16:6c:85:3f:d7:ae:a3:19:74:18:e4:a2:f1:af:
ae:7e:b1:5d:f2:8b:09:5e:20:f1:d0:1b:4e:ee:d7:19:25:df:
a6:b4:58:c5:1f:af:37:7a:42:07:91:67:2d:60:3f:4d:13:be:
94:a7:34:4c:e2:8b:45:a1:48:52:77:47:fe:d0:2a:7f:e7:a0:
28:f1:1f:72:5f:e5:e0:4d:50:ab:18:fd:cd:0f:84:7c:a1:a6:
da:be:95:9b:3d:4c:91:47:de:ed:4a:ba:47:4c:4a:56:88:93:
93:9e:b1:70:28:91:34:f6:f8:87:f1:42:d5:bb:f8:27:74:46:
13:76:a3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:38:47 2025 by rpki-client