Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/klZkpONo_AqTByECUKmGvGRYrOQ.roa
File: klZkpONo_AqTByECUKmGvGRYrOQ.roa (raw, json)
Hash identifier: cFcBRV911rl8SbQF2RxSqPtjfsvQcNyhhX50reaUwB8=
Subject key identifier: 92:56:64:A4:E3:68:FC:0A:93:07:21:02:50:A9:86:BC:64:58:AC:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018476B8F82F25F01BE5688A2CA6610346FC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/klZkpONo_AqTByECUKmGvGRYrOQ.roa
Signing time: Mon 14 Nov 2022 15:19:04 +0000
ROA not before: Mon 14 Nov 2022 15:19:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:b8:f8:2f:25:f0:1b:e5:68:8a:2c:a6:61:03:46:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 14 15:19:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=925664a4e368fc0a9307210250a986bc6458ace4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:0f:6e:19:21:06:4e:51:b3:0b:8a:ee:5c:
bf:36:fd:1d:87:f0:46:c7:8d:79:e5:15:05:56:ec:
77:39:bc:4b:c1:6b:73:c2:d6:b7:20:53:7c:75:e1:
88:50:6a:b1:b8:6c:18:cd:4d:af:66:f6:a0:50:e6:
29:87:9d:78:85:3a:e7:7a:6a:74:45:5d:c6:da:0e:
2c:a4:b1:25:d1:ca:58:59:b6:19:0e:86:23:3e:59:
b5:7d:cb:fd:bb:21:ac:34:2b:2e:6c:69:b6:bb:4e:
9e:74:3c:61:60:c5:17:48:72:4c:84:99:0b:d1:73:
64:56:05:21:1e:32:0f:e7:c3:7f:08:b4:32:1d:ea:
c1:aa:4b:a5:84:39:f0:c2:b3:c1:3e:5b:36:ca:c5:
f9:65:e5:31:61:08:3a:aa:1c:e0:1a:35:db:8c:e0:
56:7b:58:8d:ea:9b:14:35:59:8a:42:19:28:ea:6f:
93:26:43:e8:89:06:ac:ed:66:0c:30:0d:24:28:7e:
a0:a1:13:55:0a:47:c6:ce:b6:03:86:2a:15:ee:10:
a3:55:cd:30:4c:6b:12:09:cc:df:c3:5d:a8:19:40:
19:ab:17:d2:8f:47:6c:98:fc:ad:ea:af:ec:c9:02:
25:f9:a5:52:e5:91:c6:62:1f:e2:d2:29:8e:50:5a:
f1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:56:64:A4:E3:68:FC:0A:93:07:21:02:50:A9:86:BC:64:58:AC:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/klZkpONo_AqTByECUKmGvGRYrOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:6a:8d:26:8f:68:36:e3:ee:4e:e9:11:28:ed:ed:cf:7b:67:
fc:9a:8e:5b:0d:50:85:2d:18:80:19:49:33:3f:23:87:a5:7e:
99:a0:2b:4e:83:db:fe:78:31:72:5b:7f:fd:51:08:94:27:d8:
6e:c4:80:fe:a6:57:f0:d7:c0:cf:1e:50:54:91:6b:f8:a0:b9:
5f:06:fd:bb:1f:be:79:44:9f:ab:e6:3e:b5:bc:00:79:7e:d5:
cf:2b:2f:b1:06:a7:38:be:40:e1:04:0c:cd:22:96:fb:40:49:
c1:8a:ed:dd:04:a3:17:c2:1b:81:b0:cf:4c:e8:c1:98:09:b1:
26:e9:ba:02:34:31:a3:9d:a1:0e:5e:02:91:db:2e:42:bc:a5:
b0:29:8f:6a:b2:50:6b:47:16:f6:27:bd:ae:77:b7:88:c4:3a:
13:07:97:56:40:d3:cc:0f:01:55:e9:fe:2a:7d:54:50:96:6d:
e2:cb:1c:79:cd:4d:5a:39:a9:0b:19:82:56:37:17:12:61:39:
10:7d:a0:fc:54:db:4f:8e:50:61:c4:29:56:2d:19:d3:3f:75:
1c:89:bd:35:50:ae:11:a0:fe:9d:e8:15:f1:7f:b9:71:bd:cd:
f1:fc:25:55:b7:10:2e:54:46:a2:65:a8:09:9e:9a:5d:2f:70:
ac:65:59:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 20:14:40 2025 by rpki-client