Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kf9aZz8b2kEMTNDnm4z_409V-zE.roa
File: kf9aZz8b2kEMTNDnm4z_409V-zE.roa (raw, json)
Hash identifier: QeePnAcfJzCotINKz9NrlLBMBtoSB6lLDqEtcxyamNA=
Subject key identifier: 91:FF:5A:67:3F:1B:DA:41:0C:4C:D0:E7:9B:8C:FF:E3:4F:55:FB:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DC2A8C7F6EE6D92C7AC1E8E2D07511AE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kf9aZz8b2kEMTNDnm4z_409V-zE.roa
Signing time: Sun 04 Dec 2022 08:04:46 +0000
ROA not before: Sun 04 Dec 2022 08:04:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:dc2a:5cbd/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dc:2a:8c:7f:6e:e6:d9:2c:7a:c1:e8:e2:d0:75:11:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 4 08:04:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91ff5a673f1bda410c4cd0e79b8cffe34f55fb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:34:77:dd:6b:85:0a:88:e3:5d:21:d1:32:
84:4c:57:79:b4:0d:ca:f0:51:40:ba:2a:d8:33:05:
08:49:87:56:cc:e6:01:d7:4c:72:49:36:e5:84:25:
c7:45:e8:31:64:bf:38:95:9a:32:b1:df:29:78:3e:
46:15:69:f6:65:74:b8:44:e7:67:91:98:68:b1:b9:
4e:69:43:4c:aa:be:c5:5f:d3:f5:9a:9e:7b:38:8b:
0b:b2:64:12:bf:b7:e3:06:df:57:d5:5c:3f:95:32:
28:e6:0a:28:ff:fe:69:9c:ad:65:42:08:c0:24:d4:
2d:de:f0:88:37:6e:74:8c:2f:8a:f8:32:35:da:19:
2e:4e:b0:97:ce:44:19:ad:36:d8:3c:1b:e4:7b:1e:
88:ed:bd:de:4b:26:e0:98:88:a3:65:a5:07:15:8f:
e7:b7:73:03:bd:a2:47:bc:be:bf:00:c3:18:05:85:
8e:fb:7d:c8:60:af:48:bb:f8:bf:c2:1c:e4:18:b5:
1b:15:70:92:a2:da:46:23:d7:65:d1:0c:90:99:dc:
3b:39:7a:47:51:50:fa:dc:2b:cd:d2:6a:ac:c4:fc:
5c:d3:72:53:9d:22:7a:0f:7a:24:17:ab:aa:d4:09:
5c:7d:9b:fa:63:63:11:63:ac:e6:87:0d:f7:16:46:
72:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FF:5A:67:3F:1B:DA:41:0C:4C:D0:E7:9B:8C:FF:E3:4F:55:FB:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kf9aZz8b2kEMTNDnm4z_409V-zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:3b:fe:a3:73:3c:df:82:59:c1:59:16:76:c4:fd:e3:9c:da:
f5:fa:37:8c:d6:08:ba:56:53:0e:31:51:c3:2a:ed:7f:cd:7b:
b8:cc:ee:45:4c:1f:f8:3a:3d:bd:12:d8:be:fe:b5:69:29:29:
c9:2b:af:a5:0b:fc:61:57:47:9d:15:38:dc:a4:94:d2:14:e1:
ed:54:4e:64:97:15:17:c6:3c:69:26:a8:cb:b7:2c:40:11:55:
d2:6e:8e:12:cb:38:86:3e:e9:bf:a5:45:56:f1:21:e5:2f:9c:
f1:27:fa:a0:19:94:af:35:62:45:60:05:95:7b:d0:e5:92:bf:
98:fc:67:8e:d3:a7:11:08:6d:cb:ed:33:8f:26:85:a5:32:d0:
b2:d2:8d:c4:d7:6d:0b:72:67:6c:20:24:87:2e:1c:cd:07:a1:
46:54:b2:c8:a1:08:18:b0:3f:02:80:55:84:a1:e2:0b:da:8e:
6d:49:ac:05:f8:c0:83:7d:73:99:6c:33:74:b5:94:2b:db:96:
8d:60:67:28:b2:29:63:17:9e:31:30:ca:62:b0:dc:14:29:c9:
a3:3d:be:a3:0c:bc:f4:16:19:eb:9d:5f:85:18:e5:c2:20:95:
8e:05:46:63:d8:c8:af:7b:68:c2:68:7c:65:77:8a:c5:1a:fd:
b6:14:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:59:36 2025 by rpki-client