Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kiQS5NQFK1dKD_E4jnWLcwYvoLk.roa
File: kiQS5NQFK1dKD_E4jnWLcwYvoLk.roa (raw, json)
Hash identifier: aO+cqOFxZfIqsYwtcTi31ccVfUfsTjTxFNbBR6NIyfA=
Subject key identifier: 92:24:12:E4:D4:05:2B:57:4A:0F:F1:38:8E:75:8B:73:06:2F:A0:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6E862B17
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kiQS5NQFK1dKD_E4jnWLcwYvoLk.roa
Signing time: Mon 28 Feb 2022 18:09:41 +0000
ROA not before: Mon 28 Feb 2022 18:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1854286615 (0x6e862b17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 18:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=922412e4d4052b574a0ff1388e758b73062fa0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ce:d4:06:32:ff:2e:85:11:a5:b3:b0:de:58:
4e:f7:3b:37:90:83:92:20:f8:30:df:75:37:93:93:
98:98:54:8f:74:f3:46:24:89:76:39:2d:4e:f1:62:
7d:95:f4:f5:04:f7:cc:ae:da:ca:22:e0:d4:79:9d:
8c:12:e1:ae:90:67:49:64:fd:c3:93:90:01:97:8d:
86:24:a2:8b:5d:2d:ad:13:ad:a3:c7:04:d5:7f:06:
c1:42:57:7a:64:23:27:01:62:60:4b:59:9a:f2:5b:
e3:c3:3b:08:7e:e9:8d:d4:42:cf:81:9d:3c:a1:b9:
36:1b:27:80:71:34:4b:11:4b:72:9c:c7:79:0e:48:
61:07:54:20:fe:a3:84:75:1f:10:e9:1b:2c:7c:0d:
51:b2:47:36:e6:dd:78:d4:58:58:69:49:e4:4c:d2:
4a:9f:06:62:43:e3:71:f3:d8:7c:03:33:e7:c1:db:
4a:0a:10:c6:79:fb:13:92:76:5e:6a:6b:75:f0:ed:
4b:28:26:31:f8:a9:82:ee:ef:80:cb:6c:8f:b1:b6:
09:ce:a7:db:80:6d:56:d1:c4:ff:d0:76:f7:f5:ee:
cd:8d:7a:a1:86:03:7a:be:ce:89:60:f5:dc:05:6b:
51:c6:0a:ee:37:45:4f:e5:e9:83:9c:e5:f6:d4:30:
18:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:24:12:E4:D4:05:2B:57:4A:0F:F1:38:8E:75:8B:73:06:2F:A0:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kiQS5NQFK1dKD_E4jnWLcwYvoLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:e2:7b:f1:30:8c:c8:25:69:36:22:6e:a0:a2:1b:c2:ff:26:
8f:99:47:8a:7c:8e:0d:69:f9:8c:45:de:48:e3:dd:b2:19:bf:
66:a0:8b:2a:14:bc:fc:74:09:f8:70:73:27:c9:ea:18:97:15:
23:66:04:c2:5c:bb:70:2a:99:f8:f5:68:23:c5:7f:18:a9:98:
d9:e6:f0:24:d5:e0:89:87:ee:30:94:4a:3e:54:08:f5:89:d4:
00:35:c8:8f:10:1b:59:5a:be:10:32:75:80:b7:3b:27:47:3a:
24:bc:f0:32:31:8d:e4:24:66:5c:54:0e:a2:de:0c:cc:80:95:
3c:29:cb:32:d7:fc:5f:cc:ab:10:94:14:de:6e:58:e1:d1:b6:
3e:2f:d3:d1:10:53:3d:ae:ac:5e:3d:15:0f:c0:91:be:eb:61:
ce:2c:ad:46:9d:4b:cf:6f:21:d1:42:2d:c3:9b:d8:35:bb:37:
84:cb:a0:c5:9c:2e:84:c4:3a:e0:2f:9b:73:78:06:b9:85:a1:
fb:ef:fa:98:68:35:a5:a9:27:7e:63:a8:6d:e5:9a:f1:bd:2c:
42:3c:99:05:40:cf:90:65:1a:9d:fc:59:da:34:de:70:6e:50:
f7:8d:65:d6:31:e9:1a:17:23:a1:ce:e0:32:30:57:82:26:d5:
b3:73:48:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:54 2025 by rpki-client