Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ko46tbklHnN_ShPYqQlnuqpSZTU.roa
File: ko46tbklHnN_ShPYqQlnuqpSZTU.roa (raw, json)
Hash identifier: rAAT5SfhfiTrHcS+acb1jrkeaV2Qn2GsVGuEE5s1sco=
Subject key identifier: 92:8E:3A:B5:B9:25:1E:73:7F:4A:13:D8:A9:09:67:BA:AA:52:65:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01827E39EDB852F8AEDC1FE36A988C0DE082
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ko46tbklHnN_ShPYqQlnuqpSZTU.roa
Signing time: Mon 08 Aug 2022 16:11:41 +0000
ROA not before: Mon 08 Aug 2022 16:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7e:39:ed:b8:52:f8:ae:dc:1f:e3:6a:98:8c:0d:e0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 16:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=928e3ab5b9251e737f4a13d8a90967baaa526535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d4:c9:54:5a:62:55:0b:e3:24:22:79:20:85:
57:e8:39:62:9c:d8:89:37:df:54:d1:78:da:77:3a:
18:51:9b:cf:6a:75:d3:06:fc:a4:94:3d:4a:06:a6:
4f:47:ed:05:1b:25:fb:a2:6b:6a:56:d7:2e:18:1b:
ff:c5:41:04:5e:e8:f7:65:d3:3c:f2:a4:7b:e1:8a:
1e:e2:0b:51:41:ce:87:10:a9:69:c7:62:d6:e9:c4:
65:00:c8:6a:d3:43:56:15:61:9e:af:e7:8a:cc:9a:
40:4a:8e:98:80:34:0e:39:38:13:31:20:10:ea:9c:
75:11:24:0b:46:76:50:1c:81:8c:4b:72:7e:b3:a7:
88:8b:5d:e5:44:ca:75:fa:54:4e:18:51:53:c1:80:
c3:53:2f:11:72:e6:a4:2d:4f:56:d1:a3:54:ed:6a:
00:ec:65:ae:f2:82:ca:69:79:9a:8b:d7:4f:e8:17:
e3:84:36:65:44:0b:2c:0c:51:47:1f:02:27:4d:93:
a6:1f:0f:c3:a7:30:78:44:dc:81:d3:09:a1:f0:d5:
2a:da:bb:6f:0d:ce:40:22:60:71:93:11:60:73:eb:
0c:89:ad:d5:c5:dd:3e:27:b9:08:7b:b8:3b:c1:85:
1e:e1:b7:5d:d5:ed:c4:bb:34:0c:6d:4b:e9:cc:70:
c2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8E:3A:B5:B9:25:1E:73:7F:4A:13:D8:A9:09:67:BA:AA:52:65:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ko46tbklHnN_ShPYqQlnuqpSZTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:a3:09:f8:64:67:57:30:b4:66:32:ab:4b:e1:bd:32:8d:e1:
9f:3e:1c:8e:b7:9f:46:4d:30:12:76:c4:9e:a3:ca:45:d9:62:
4f:f0:1d:2f:b6:f4:98:de:ff:7a:51:04:14:55:95:3c:30:3a:
7d:76:92:03:60:a0:55:c0:a7:fb:02:1a:f7:1c:af:b9:52:17:
1c:44:69:c2:2c:51:64:8d:df:9e:d8:04:43:5d:16:4e:85:0a:
ef:83:e5:98:6f:26:f4:ca:4e:a4:63:56:00:30:c4:54:f3:ce:
9c:9e:cd:7f:de:d1:f9:ce:4d:16:cd:90:5c:8b:c1:f1:e3:8c:
cf:0a:d6:6a:ae:69:ed:40:7a:cd:50:86:7f:83:ec:41:83:ff:
c7:f7:4c:a3:a6:2c:76:61:a9:aa:38:5f:d1:16:cf:ca:27:c8:
7f:81:3b:05:2f:83:ac:50:17:4b:19:f8:53:d2:b2:6e:ee:cc:
ad:5e:89:b0:32:96:fb:e4:ea:ab:2a:1d:ba:86:b8:c1:83:81:
2b:cd:05:34:c0:71:b7:e9:bc:92:cf:bc:81:18:a8:cb:d2:8f:
de:d4:91:86:f2:84:85:1d:93:b7:a3:40:6a:93:45:f0:45:87:
45:0a:64:62:c0:ed:02:5a:9a:4e:99:31:9a:d2:f0:7f:57:8d:
a8:0f:d2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:16:29 2025 by rpki-client