Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kj6hLLTmr-x4f-lKTh213q7Mclc.roa
File: kj6hLLTmr-x4f-lKTh213q7Mclc.roa (raw, json)
Hash identifier: SgkP0u3vDu/MVOuEcFUPP1nqyU2vgCkLZgCsFVaXqZM=
Subject key identifier: 92:3E:A1:2C:B4:E6:AF:EC:78:7F:E9:4A:4E:1D:B5:DE:AE:CC:72:57
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018710BFEFEB6DE9442A8AC1132A0732889C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kj6hLLTmr-x4f-lKTh213q7Mclc.roa
Signing time: Thu 23 Mar 2023 23:13:46 +0000
ROA not before: Thu 23 Mar 2023 23:13:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:10:bf:ef:eb:6d:e9:44:2a:8a:c1:13:2a:07:32:88:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 23:13:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=923ea12cb4e6afec787fe94a4e1db5deaecc7257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:24:d5:f5:58:31:d2:e6:f8:2d:dd:ea:11:51:
44:4c:01:79:62:17:e5:25:e7:c4:12:55:73:19:c9:
d6:ba:39:45:a8:7c:41:4e:ce:38:1f:c5:79:74:55:
da:ca:dd:b6:5d:84:2b:19:62:90:65:60:c9:d0:05:
57:ea:aa:f9:4e:c2:3f:73:0e:ff:0d:8e:c6:76:aa:
93:26:f0:78:2e:6c:73:5e:9c:9e:6e:df:c4:0f:98:
58:6a:f2:45:a4:7d:5c:6c:e2:ae:77:d8:9e:ec:ed:
c9:03:ea:a1:6c:44:1c:0a:0f:9c:e7:d7:37:36:2d:
7b:60:36:9e:c8:da:28:4b:5a:02:94:76:c8:1b:a3:
49:d5:d6:84:2a:6c:47:91:f8:c5:6b:65:ea:01:cc:
f8:03:31:4d:a6:51:0e:2d:b6:1d:66:6c:e2:be:c9:
ff:4c:02:54:0c:20:44:d1:08:88:cc:f5:8c:c4:03:
f4:f5:4e:79:ce:4f:cc:97:c7:8c:dd:20:b6:54:31:
d9:f7:5a:13:4b:96:71:47:67:d8:88:67:a6:23:0d:
19:3f:e3:01:bd:27:17:a7:be:46:57:79:3c:24:46:
a3:72:aa:ae:59:00:94:9e:a1:59:30:4d:d0:e0:14:
87:de:fb:ed:74:c8:ed:12:b4:5a:2c:96:00:69:c6:
24:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3E:A1:2C:B4:E6:AF:EC:78:7F:E9:4A:4E:1D:B5:DE:AE:CC:72:57
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kj6hLLTmr-x4f-lKTh213q7Mclc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:1f:2f:d7:7b:3a:cd:b6:d3:44:27:f8:95:50:fd:c9:40:f1:
7b:d0:c1:5c:f8:f6:b9:87:52:ef:e1:08:49:58:5a:48:93:aa:
7d:0c:93:3e:70:eb:57:55:56:ab:79:3d:fd:95:09:b8:fa:b1:
69:89:9f:15:1a:cd:f5:10:43:8c:30:7c:16:7f:27:80:92:1e:
5a:af:0c:41:36:8e:c1:db:bd:f8:6a:05:35:af:a0:8e:32:86:
4a:de:7f:44:1c:f0:71:35:d0:db:5b:bd:42:37:5c:85:15:14:
60:4b:44:f0:31:c6:d1:15:2e:f6:36:f1:01:58:9f:6e:72:e1:
72:16:0e:3e:49:7c:3e:b4:f0:3b:78:84:a1:92:2b:c2:55:b4:
93:0b:14:5c:54:f8:0b:69:d1:23:8d:f5:8d:b4:e7:6f:5d:10:
a1:ac:22:81:4e:22:75:c1:80:37:1b:0b:14:58:85:98:0d:69:
c2:dd:c5:05:c9:c9:06:09:a9:12:62:fd:14:b7:35:f4:14:5f:
3d:a6:b2:6e:ab:4e:1c:c8:53:be:25:82:09:a3:d4:51:4a:03:
14:7a:60:fe:b3:41:8a:45:2c:4f:77:10:b0:5c:27:dd:45:1b:
ed:3c:9e:1b:e1:c6:82:c7:ed:da:af:63:40:97:18:2b:20:37:
ce:8a:80:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:24:07 2025 by rpki-client