Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ktZnfHo8kv3M6BAjSI8Ko870Dck.roa
File: ktZnfHo8kv3M6BAjSI8Ko870Dck.roa (raw, json)
Hash identifier: j+pDbdiAOwiA6cKCUuuz88BGd+iyPBKdYjb/qeniadc=
Subject key identifier: 92:D6:67:7C:7A:3C:92:FD:CC:E8:10:23:48:8F:0A:A3:CE:F4:0D:C9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188371F66E6AB8E7252985ED6427147372C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ktZnfHo8kv3M6BAjSI8Ko870Dck.roa
Signing time: Sat 20 May 2023 03:06:24 +0000
ROA not before: Sat 20 May 2023 03:06:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:188:371e:bcf9/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:37:1f:66:e6:ab:8e:72:52:98:5e:d6:42:71:47:37:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 20 03:06:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92d6677c7a3c92fdcce81023488f0aa3cef40dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:ec:5c:e5:24:99:b9:c5:1f:42:7f:61:89:
d3:a2:93:f8:84:57:eb:47:71:27:30:f0:0b:ae:eb:
ab:90:cf:ee:a4:0b:90:24:75:db:f6:35:73:57:c8:
fb:6b:ce:ff:09:01:23:2e:25:b2:e3:3c:4d:8e:d5:
64:cf:8c:9e:c7:27:47:97:79:14:48:19:f6:4e:4b:
23:36:89:9c:66:10:e7:ce:10:57:68:e6:b0:60:25:
57:3d:82:1e:fe:62:35:45:c8:82:cf:a4:79:8e:92:
b8:45:ae:c6:37:2f:46:cf:0e:e5:1d:0b:83:aa:a9:
db:49:07:25:51:53:64:0a:ae:e4:45:3e:ec:f5:0a:
7f:43:64:1b:b7:c1:3b:f5:21:fb:90:12:81:53:c0:
7a:a1:1e:6f:51:e6:73:e1:da:68:6c:13:ab:9d:0e:
fa:e8:c0:16:fe:1e:39:ad:67:d7:a3:8c:b8:8a:d5:
91:43:b4:a3:21:c4:3f:1c:12:60:dd:c8:de:1a:d8:
74:bf:ea:f3:84:33:ed:b8:0a:fa:d6:a5:0c:34:0e:
8d:da:08:fe:2a:95:05:9b:98:bd:dd:67:30:00:40:
b6:46:e3:f1:7f:5d:3f:78:5e:83:77:69:59:36:37:
da:cd:93:24:bc:41:96:e1:00:c0:a6:04:e5:93:ce:
0a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D6:67:7C:7A:3C:92:FD:CC:E8:10:23:48:8F:0A:A3:CE:F4:0D:C9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ktZnfHo8kv3M6BAjSI8Ko870Dck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:10:9f:ad:50:aa:d7:bf:dd:db:98:88:65:bc:4f:5d:2c:7c:
7f:c2:c8:ec:1d:65:79:10:ff:43:3d:0e:aa:0a:41:b3:e4:6e:
c4:8a:dc:6b:ca:8d:15:27:a1:d2:fc:17:bb:84:8a:e2:58:db:
da:1d:c3:17:c0:b0:1a:5e:10:48:80:db:89:f2:a0:6d:eb:d7:
ba:44:32:c2:a6:61:51:1d:c1:e0:bd:ec:91:d3:9b:7a:22:69:
d0:6e:db:a1:e3:cf:30:36:1d:da:b3:aa:93:49:ed:82:e2:61:
80:fe:67:43:f6:c2:86:fe:7b:c7:00:a6:93:9c:45:3f:23:7c:
87:38:02:1a:1c:89:15:ac:a3:6a:80:cc:20:f1:6a:8f:3a:5f:
3f:f4:a2:ad:7a:08:67:26:c8:d2:3b:c4:16:1d:91:9d:11:6d:
3a:31:b8:75:7e:04:3a:ae:cb:9b:ea:95:fe:f2:b2:e1:6b:39:
7e:d6:e5:76:e4:f8:5a:ca:17:57:3e:f4:6f:3e:92:20:33:a5:
fd:df:cd:83:0b:94:91:f6:b3:96:51:ac:d4:ed:07:71:83:d5:
5a:f2:a9:13:82:41:73:bf:ee:3f:67:f0:c4:37:b5:3a:b3:1b:
04:78:3d:10:20:e1:05:e9:5a:fb:fd:e9:28:ec:dd:31:2f:3a:
0d:da:3b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:52 2025 by rpki-client