Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kjwNMV2kuIfTeOflKNmqQUw1iU4.roa
File: kjwNMV2kuIfTeOflKNmqQUw1iU4.roa (raw, json)
Hash identifier: oravqzEyzSGypkBa/w/CL1AQ4ncsihDPtx7DDRamukE=
Subject key identifier: 92:3C:0D:31:5D:A4:B8:87:D3:78:E7:E5:28:D9:AA:41:4C:35:89:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187375ED5C1340521F3CF8D062BA7A6D716
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kjwNMV2kuIfTeOflKNmqQUw1iU4.roa
Signing time: Fri 31 Mar 2023 11:12:54 +0000
ROA not before: Fri 31 Mar 2023 11:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:37:5e:d5:c1:34:05:21:f3:cf:8d:06:2b:a7:a6:d7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 31 11:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=923c0d315da4b887d378e7e528d9aa414c35894e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:49:94:17:98:b5:fb:e6:6c:75:45:a1:5e:
90:14:13:5f:60:1f:26:69:96:0d:1d:82:68:8a:61:
14:56:9e:ab:a9:3c:5b:8c:36:b0:dd:f4:a2:8f:44:
6e:06:37:92:77:74:8f:75:00:20:26:2f:b0:e3:1b:
16:1a:58:90:fc:4e:57:f4:11:80:3c:e8:c4:23:77:
fb:a6:ee:bc:e6:02:3a:1b:11:2e:13:17:6c:09:72:
d8:6a:b4:c4:46:9e:54:49:b6:a7:e3:98:8e:b8:75:
81:6c:6b:0c:42:31:d3:a9:66:12:51:cd:07:49:8f:
78:40:da:a1:9b:80:ce:ee:65:1c:91:41:b9:95:10:
2b:b3:ec:71:0d:47:ee:99:a0:d9:50:54:6e:51:ee:
22:28:78:5c:47:7b:57:10:c0:ef:66:f1:3d:0c:28:
cf:57:18:ff:c0:ca:61:ea:60:ac:b9:a9:4d:b7:3d:
fc:9a:a1:42:22:55:24:c3:63:15:f6:c8:82:ec:fb:
67:aa:3b:f2:7c:a0:72:20:66:71:e1:ff:93:91:24:
05:d6:2b:1d:a6:79:27:47:c0:4d:da:97:b0:50:a8:
04:2e:c1:82:2b:90:cb:44:56:e5:01:cc:2e:4d:88:
9b:d5:89:34:ba:4b:cc:b7:60:1e:b0:08:15:0c:56:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3C:0D:31:5D:A4:B8:87:D3:78:E7:E5:28:D9:AA:41:4C:35:89:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kjwNMV2kuIfTeOflKNmqQUw1iU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:79:f3:4c:ee:7b:7e:86:92:78:13:1d:23:8a:f3:9f:61:02:
82:6a:ea:97:1b:80:9f:61:4e:ae:e2:2c:39:26:83:71:c9:3e:
cd:6f:a3:0a:83:dd:8e:ba:2c:57:6a:e0:8a:54:42:24:a5:15:
74:7a:8d:7b:5a:5c:b4:2f:47:f4:7b:1a:b9:c4:dd:a2:d3:c6:
2c:ce:b9:cf:a1:f0:e1:49:e2:62:3d:ab:e3:42:b1:79:a6:b1:
9d:89:90:6b:85:b6:16:ff:2f:56:f5:d4:dc:6d:08:db:66:00:
b8:7e:94:58:f7:58:8e:82:42:bf:05:a1:88:f0:28:13:3f:2f:
e3:06:8d:3a:69:c5:dc:f1:81:a6:f3:4a:08:5f:79:ba:01:3c:
14:9b:cf:c3:1a:63:12:b8:15:ad:b3:1a:bb:1f:b3:99:28:94:
2d:43:b1:d2:06:4d:34:8c:e3:70:ee:3b:01:3f:17:bd:8d:8c:
02:b2:e9:49:d2:d1:45:d4:b1:53:82:0f:1d:4e:c2:ac:2c:bd:
75:97:cd:a1:6a:9c:f5:e1:c4:61:b4:19:94:58:cc:45:36:e0:
8d:6b:aa:2b:b8:92:f1:7e:84:90:94:a2:53:55:cb:85:ff:97:
ac:5b:2f:49:5d:d4:be:8d:08:55:8f:a7:b5:67:0c:80:12:65:
73:a9:28:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:55:17 2025 by rpki-client