Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/koNZP1vDIC6gN8L21tJsYOkM6gw.roa
File: koNZP1vDIC6gN8L21tJsYOkM6gw.roa (raw, json)
Hash identifier: xg2aUAKdcDMPSMu+NKgGKUtO0TJR4LINhQkpYILSWZ4=
Subject key identifier: 92:83:59:3F:5B:C3:20:2E:A0:37:C2:F6:D6:D2:6C:60:E9:0C:EA:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AF4DEE5D08138EC5DC2AFCA76BE40DCF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/koNZP1vDIC6gN8L21tJsYOkM6gw.roa
Signing time: Tue 01 Aug 2023 04:14:27 +0000
ROA not before: Tue 01 Aug 2023 04:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:af:4d:ee:5d:08:13:8e:c5:dc:2a:fc:a7:6b:e4:0d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 04:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9283593f5bc3202ea037c2f6d6d26c60e90cea0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:a7:13:fe:aa:9a:2c:3a:13:21:e0:ad:87:
a9:ff:4a:dc:b6:6c:cf:0a:e1:40:51:1c:36:e9:6b:
73:f5:b3:d6:db:f2:be:63:3e:e4:4d:45:35:62:26:
33:a0:e7:ba:d8:3d:a7:0f:6a:11:7c:7c:78:9f:87:
c2:fd:b6:f8:2c:d9:b4:eb:66:7d:ff:08:a9:a3:7d:
df:96:07:7a:b2:87:45:89:2d:26:8e:3b:c2:ae:59:
43:52:10:df:4e:18:a3:e8:b8:00:40:ea:de:dc:da:
06:07:34:29:23:08:b9:4b:fd:fc:65:bc:6d:5a:8b:
cf:26:b1:db:84:16:25:63:b8:a7:51:5c:38:89:54:
56:9a:2b:9f:58:d6:12:9b:bc:64:f4:3c:aa:b3:33:
97:a8:98:d6:41:02:19:d5:5c:74:e8:62:a6:7c:8a:
86:5f:b4:3b:cd:ce:82:c6:fc:6d:37:67:85:05:62:
d8:0a:d7:cc:57:2d:89:92:b8:3a:ee:1b:a2:fc:8a:
fc:e5:b8:c9:a7:ec:fd:51:ae:8f:66:a7:6e:a0:e9:
f5:a2:74:43:fc:71:43:f4:b4:34:3c:87:9d:6c:e7:
cf:89:6e:7b:87:e9:c7:f7:f9:c9:bd:f3:5a:a4:a2:
1f:74:4b:48:82:cd:5d:7d:5f:ad:88:21:4a:bb:98:
5f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:83:59:3F:5B:C3:20:2E:A0:37:C2:F6:D6:D2:6C:60:E9:0C:EA:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/koNZP1vDIC6gN8L21tJsYOkM6gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:03:8e:fa:aa:ea:8c:43:c1:19:e7:45:a6:c4:bb:c5:7a:20:
de:2b:04:4c:ad:20:b3:11:25:da:35:5e:f4:df:23:93:f8:20:
df:8a:1c:07:5b:a5:cc:5b:40:c7:63:bd:80:74:f7:0f:7d:ec:
90:c6:49:9c:27:1e:73:59:27:20:da:03:90:1a:fc:07:c8:54:
95:00:b4:5c:75:a8:fd:03:16:b8:81:1f:53:72:68:74:ed:77:
d2:4f:9d:c9:56:5b:67:03:e9:c6:b7:47:d2:60:6e:44:22:48:
65:c1:f6:0a:5e:69:76:76:51:50:25:cd:23:8f:67:60:43:8e:
1b:58:04:3c:4e:c0:a1:68:41:ba:4b:5e:08:06:06:a4:7c:a7:
51:f3:6d:c4:be:05:b5:2c:7c:d9:63:7a:08:94:71:d2:84:2c:
3c:c2:81:58:63:5b:cc:1a:fe:73:dc:0c:8f:95:c7:cb:eb:d5:
07:8c:df:67:bf:59:c0:06:d2:ea:81:cb:e1:75:61:c2:0b:11:
e6:a5:b5:53:06:ff:d3:25:e2:93:21:c7:49:72:23:07:dd:49:
63:19:b4:c2:68:de:91:64:6f:fb:7f:55:fa:f1:d5:4f:be:3d:
c9:5b:4b:e2:e8:25:2b:df:38:a9:4c:ed:ca:b1:77:24:11:61:
72:0d:a9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:17 2025 by rpki-client