Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kcuiZ1sHsLGT4Fl-HpsSvBrN1XE.roa
File: kcuiZ1sHsLGT4Fl-HpsSvBrN1XE.roa (raw, json)
Hash identifier: 85d7Z9m4FJgoVzgn1qBlTDRAeIH+/lCFLC9ae2brOFc=
Subject key identifier: 91:CB:A2:67:5B:07:B0:B1:93:E0:59:7E:1E:9B:12:BC:1A:CD:D5:71
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893E67185DB0B04571F4C77E5964413BCD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kcuiZ1sHsLGT4Fl-HpsSvBrN1XE.roa
Signing time: Mon 10 Jul 2023 06:04:51 +0000
ROA not before: Mon 10 Jul 2023 06:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:189:3e66:fa0b/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3e:67:18:5d:b0:b0:45:71:f4:c7:7e:59:64:41:3b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 06:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91cba2675b07b0b193e0597e1e9b12bc1acdd571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:b1:4c:c0:b0:55:93:40:a8:27:f7:35:22:
8b:37:27:9a:06:22:78:df:ff:11:d3:da:a5:fd:19:
e8:bf:61:d5:03:ad:fe:51:28:98:ca:81:11:dd:af:
5b:12:21:b6:7f:76:4c:6c:fb:4f:11:0d:06:bc:f8:
ea:56:e3:a0:22:fa:c4:b6:9c:f1:7d:42:e3:dc:b1:
2f:b8:57:3d:c6:02:a8:7f:ab:6b:4e:4a:ec:2c:e2:
f0:d4:46:6e:12:63:fb:a4:a3:19:cd:c5:8e:2e:a2:
c5:a5:21:de:20:1c:62:2f:05:01:51:1f:5a:42:5d:
b5:7e:3e:5f:d5:b8:97:30:25:08:4c:a1:ef:89:bc:
7b:06:2d:17:3b:b5:41:fe:59:9f:b3:28:3e:9b:9e:
4e:95:bf:7c:d9:e5:c8:87:75:cf:9a:24:b5:65:fe:
ac:ca:a7:a0:01:42:61:ad:40:5c:d2:a9:e7:b7:c4:
9a:26:b1:26:38:e9:bc:f1:87:cb:ec:7d:11:5e:bb:
c7:c7:cf:ea:45:35:de:91:a5:2e:ab:a3:6b:44:f0:
fb:bb:bf:f5:bb:a5:92:7b:8e:df:9e:57:13:9c:6c:
ef:a8:3e:ba:0d:bd:67:6f:c7:a2:07:74:29:b0:04:
cc:29:77:e1:80:f9:c1:7f:b6:db:fc:f3:96:a2:03:
eb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CB:A2:67:5B:07:B0:B1:93:E0:59:7E:1E:9B:12:BC:1A:CD:D5:71
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kcuiZ1sHsLGT4Fl-HpsSvBrN1XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:8b:b9:fc:23:4f:c5:75:9e:5e:c5:c0:83:10:5f:4e:50:57:
5b:17:0d:7b:16:1e:f3:cd:45:8e:ba:34:63:7c:4c:65:fc:63:
b2:45:59:e5:d7:2c:99:c5:90:31:fc:ec:9e:f1:89:39:8c:5c:
08:e7:e4:72:6d:7f:93:dd:51:5b:29:1a:c2:71:be:9e:44:31:
0f:2e:61:bc:e6:2e:1f:d3:70:c5:d2:93:0c:38:d8:3b:fc:85:
fc:65:09:3d:3d:5e:40:7d:86:7a:3f:69:2c:b3:16:e1:9b:b3:
15:79:8c:5f:77:32:22:6a:57:0f:0b:ae:7a:38:a1:1e:46:4b:
4d:a4:76:fc:0e:2e:9b:91:38:e1:66:c1:12:44:7d:85:25:6f:
05:b1:c3:1a:ff:7f:fe:b5:30:9a:0f:de:f8:ce:1f:09:ab:ef:
7b:0d:11:3b:66:f7:50:4a:aa:d4:8e:de:8a:3d:40:6e:cb:b3:
bd:94:04:5b:0b:7d:c0:15:70:a0:e0:aa:0f:6c:fe:66:84:b2:
11:25:e3:78:eb:4a:94:3e:e2:56:bb:85:0d:1a:4b:36:8b:8c:
dc:9a:8d:c8:f4:a1:8e:81:09:f4:d8:97:00:a3:73:90:44:97:
f7:15:e4:5b:5f:b9:0a:be:d4:49:1f:21:03:02:42:1c:fc:8f:
b7:34:b8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:41:03 2025 by rpki-client