Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kgdqeB6uE1iSZ7IH0gMO3liErzc.roa
File: kgdqeB6uE1iSZ7IH0gMO3liErzc.roa (raw, json)
Hash identifier: Z20CTgCsc4c83gq5C9OWGoyyM+c0V4oE863QJT7wePU=
Subject key identifier: 92:07:6A:78:1E:AE:13:58:92:67:B2:07:D2:03:0E:DE:58:84:AF:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871BE7786E8DAC4C67CF9DDAC20DC5FAFE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kgdqeB6uE1iSZ7IH0gMO3liErzc.roa
Signing time: Sun 26 Mar 2023 03:12:47 +0000
ROA not before: Sun 26 Mar 2023 03:12:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1b:e7:78:6e:8d:ac:4c:67:cf:9d:da:c2:0d:c5:fa:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 03:12:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92076a781eae13589267b207d2030ede5884af37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e6:5c:6c:30:df:a9:44:2b:87:fd:12:85:af:
97:ce:28:8e:38:01:6a:4b:1a:22:8d:99:96:cb:0b:
7b:5b:47:82:c4:53:9d:b5:ef:54:dd:2a:ba:8d:a3:
6e:f5:d2:a5:ba:fa:54:3d:c1:cf:b2:9a:e8:a9:8f:
66:8e:8f:58:c1:b8:28:b2:ef:43:64:7c:9e:40:f0:
93:95:5f:fe:f5:e7:0e:89:af:e6:3a:05:b9:c7:c7:
d9:3b:41:9f:35:68:8f:54:e2:f7:28:bf:44:31:5c:
29:20:df:40:56:b2:cf:75:71:26:3e:e1:4a:d6:83:
f3:c6:13:95:cb:a1:07:c8:2c:14:c4:d4:52:8f:d8:
0d:ce:8f:5b:a5:f3:5f:84:2c:64:65:12:fd:88:ac:
13:19:e2:94:4e:dd:b7:a8:28:3e:57:3d:87:86:af:
9c:69:56:1d:b4:10:6e:71:f1:a7:15:72:01:60:94:
15:2e:25:0c:22:fd:7d:b7:96:e2:f7:23:3e:a7:28:
46:0b:6a:21:60:39:65:cf:44:7a:42:88:09:3c:bd:
b3:39:0f:9a:af:d8:36:e5:62:68:3c:da:a7:39:24:
29:98:e9:26:63:84:8c:97:fa:e6:97:14:9c:1d:ad:
3d:8a:9f:92:fa:4b:39:90:5e:dc:c2:32:75:58:ab:
63:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:07:6A:78:1E:AE:13:58:92:67:B2:07:D2:03:0E:DE:58:84:AF:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kgdqeB6uE1iSZ7IH0gMO3liErzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:fd:e7:36:1b:eb:81:66:d8:4e:f9:54:cc:cd:6f:3d:b5:2e:
4d:0e:f4:53:58:30:db:a1:3e:07:fd:fb:e2:67:15:8e:21:05:
96:af:ca:03:b4:8c:7c:a4:68:3b:71:7b:4c:5c:b6:bb:28:4c:
b3:4e:a9:e7:b8:63:da:4a:70:2c:f4:c1:cf:69:92:4c:c7:f9:
ed:58:a2:ff:3d:a4:84:c5:b6:9c:cb:9e:90:94:17:69:ea:a1:
0f:65:76:92:5f:f0:0b:5e:45:72:3b:5f:49:42:70:fd:58:9e:
6a:0f:c9:87:79:0b:c5:c2:64:75:bc:ef:14:40:19:cb:83:bd:
d2:d2:29:91:c1:24:60:5e:e2:1c:df:68:75:a0:8d:fb:d2:49:
84:3f:a5:93:40:c8:a5:15:49:a0:24:55:5e:9f:20:cf:4a:0d:
0d:b0:55:38:f3:98:ed:55:53:fa:4b:74:45:73:6a:18:d2:7e:
33:23:c1:af:29:44:49:22:67:39:f0:de:82:a3:45:e1:1c:1d:
d1:33:33:49:54:8b:2b:01:53:e5:65:db:8f:cb:af:72:92:62:
b6:b0:3a:09:73:93:93:52:4a:7d:73:6c:39:e8:13:1f:23:f1:
44:6b:88:3c:f6:89:49:95:d7:da:40:ce:22:ae:9c:49:21:8d:
9b:92:76:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:13:48 2025 by rpki-client