Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kcN_8q6cNSmGTCSNckei6RyPQX0.roa
File: kcN_8q6cNSmGTCSNckei6RyPQX0.roa (raw, json)
Hash identifier: znI6paliF0ajivW45Smx/8YTFRvVsPEgncDll61umPw=
Subject key identifier: 91:C3:7F:F2:AE:9C:35:29:86:4C:24:8D:72:47:A2:E9:1C:8F:41:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876A9FFDB0B257E650EA76011326424D43
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kcN_8q6cNSmGTCSNckei6RyPQX0.roa
Signing time: Mon 10 Apr 2023 10:04:42 +0000
ROA not before: Mon 10 Apr 2023 10:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:187:6a9f:bc83/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:9f:fd:b0:b2:57:e6:50:ea:76:01:13:26:42:4d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 10 10:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91c37ff2ae9c3529864c248d7247a2e91c8f417d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:db:98:8d:d9:21:79:b2:94:38:c0:42:99:61:
15:f5:38:9c:3a:b1:25:8c:80:a9:08:f4:d1:5f:3e:
86:15:68:8c:04:af:fe:ff:2d:8b:b0:fe:0c:a2:cc:
00:4c:87:9e:b0:00:58:a1:f2:f3:3a:31:81:7d:c0:
1d:ac:36:d4:b9:c2:11:d4:41:63:a6:91:8d:e7:19:
e8:d9:36:58:66:de:dc:9a:ee:03:74:e4:3b:11:9b:
49:c2:d7:cd:6a:da:1d:cb:40:80:56:dc:fc:08:45:
73:52:87:16:fd:eb:8c:56:f8:96:ff:ca:b6:b2:fb:
c5:e9:95:12:fd:c6:48:31:87:41:aa:0c:90:db:1e:
9c:fd:46:34:ba:12:dd:3a:77:3d:24:12:2b:e4:34:
19:f8:96:ba:09:1b:cd:a4:6e:54:7e:47:6b:77:8a:
2e:99:d4:8b:a7:f1:b7:49:97:6d:4f:a7:16:a4:2f:
13:cf:8e:6b:d9:f8:54:fc:9b:e6:02:38:18:20:20:
af:87:d3:25:00:07:27:94:63:62:ea:0c:66:8a:dc:
b8:b6:c8:11:40:da:31:d8:d7:1c:22:12:62:77:f5:
f0:9b:9c:4a:19:1b:5e:71:0b:ae:52:8a:69:fa:c6:
a5:42:52:f5:4e:4f:c4:c5:cd:b1:06:db:41:c8:38:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C3:7F:F2:AE:9C:35:29:86:4C:24:8D:72:47:A2:E9:1C:8F:41:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kcN_8q6cNSmGTCSNckei6RyPQX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:9a:a0:23:97:5d:89:8c:b2:10:3a:17:3f:05:81:f0:54:20:
b3:09:09:a3:90:6c:6c:83:d1:7b:46:07:61:51:f1:24:d7:86:
af:dd:a4:f8:d0:1a:6f:a6:c0:bf:4c:20:d9:6a:a8:f7:12:72:
ee:6c:3d:8d:73:ed:0b:d4:1c:ed:f6:e7:27:86:77:94:d6:f5:
92:f5:d5:9b:fd:55:a1:ab:45:7b:48:66:be:b4:c1:52:c8:9f:
12:ab:e3:0b:f0:1f:36:bb:a8:e3:b0:34:0e:ef:ff:e6:3c:0c:
52:63:76:cd:36:0c:fe:02:3f:e2:cf:cf:16:88:89:09:05:cd:
63:87:e4:11:81:8f:54:b5:34:5e:d7:22:1a:f4:95:02:e8:31:
77:c1:3c:7b:09:7e:b7:36:59:34:c6:7e:ec:44:25:b4:fa:c5:
af:87:18:0d:fb:e9:c9:21:1f:c1:67:d7:da:04:f2:ee:a2:82:
bd:5d:21:18:68:99:a5:98:42:cf:a5:95:c5:6b:e3:79:9f:a0:
f7:bf:74:a5:96:7c:e9:5e:b9:f5:70:ee:f3:a3:9a:96:4d:49:
bf:a4:30:ad:0b:cd:ba:12:a3:7b:38:9a:52:eb:7d:5d:b8:e1:
e2:0a:48:21:20:96:9f:68:00:7a:d8:41:aa:7b:90:c8:1d:0e:
c6:39:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:05:55 2025 by rpki-client