Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ktz5ONhDJLSJET4ISOZz61PiHAc.roa
File: ktz5ONhDJLSJET4ISOZz61PiHAc.roa (raw, json)
Hash identifier: +PqBIaSOUH2jZ6Ic3dAxzVwobB6SyRYTweeeWi2kCJM=
Subject key identifier: 92:DC:F9:38:D8:43:24:B4:89:11:3E:08:48:E6:73:EB:53:E2:1C:07
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 802FB130
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ktz5ONhDJLSJET4ISOZz61PiHAc.roa
Signing time: Sun 01 May 2022 16:12:23 +0000
ROA not before: Sun 01 May 2022 16:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2150609200 (0x802fb130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 1 16:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92dcf938d84324b489113e0848e673eb53e21c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:dc:5b:7a:71:ef:c0:29:63:0d:e8:82:a0:
53:14:72:ce:2d:23:82:5d:19:9e:71:74:f6:a9:71:
f9:39:cb:65:6c:f7:23:47:95:59:e4:8f:d3:4e:3e:
c9:34:34:43:28:92:18:2f:38:ff:8a:a4:5b:b1:bb:
06:dd:9a:e9:4e:be:8d:dd:fc:02:3a:a5:e7:77:de:
a7:95:6f:c9:8f:b6:9a:f1:9e:c1:32:7c:fe:cb:bf:
db:7a:2d:40:1b:6c:e7:61:1c:5c:58:55:31:74:fa:
b2:84:ba:6f:6a:c0:6e:a5:95:f9:7c:b1:b8:c4:9e:
aa:b1:3d:90:25:ee:4a:ae:da:4e:b4:90:e6:ec:e7:
08:69:4a:a6:43:ed:5d:93:26:78:e0:4a:ec:1f:40:
bd:bb:a3:77:0d:14:6d:9d:3b:6e:54:f0:42:64:41:
5b:ba:3d:73:a1:5b:99:9c:b3:c0:47:78:70:0a:36:
fa:3e:f8:00:56:18:5a:88:66:e7:17:f7:3b:1f:9a:
e1:d4:50:e7:63:c1:92:61:07:e6:92:f1:82:35:90:
fd:b9:99:f5:4d:de:b7:ca:e9:c0:36:cd:85:31:e9:
db:dd:93:8e:e1:83:91:a4:25:3b:06:53:d1:4c:70:
40:0c:a2:76:6b:51:8b:5d:21:97:ea:d0:86:8b:7b:
b1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DC:F9:38:D8:43:24:B4:89:11:3E:08:48:E6:73:EB:53:E2:1C:07
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ktz5ONhDJLSJET4ISOZz61PiHAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:cf:b2:99:07:86:88:18:59:8e:51:8c:d9:d3:61:bc:8a:58:
a4:7a:33:05:03:d6:fb:ec:b4:e2:f3:2d:b4:d0:75:ba:77:ac:
6f:0a:b0:47:df:e6:8c:fd:cb:ef:3d:5c:74:83:3d:22:93:b5:
79:84:c2:69:15:73:08:dd:89:48:ab:d4:5d:23:4c:be:58:ca:
05:c0:83:f6:69:c1:d7:15:34:bb:e8:7b:5f:07:b7:6c:73:3d:
65:87:07:7a:4c:2c:16:74:0d:f7:c9:31:00:77:f6:ea:39:6f:
41:8a:86:44:3a:82:d6:17:ae:e3:02:16:f8:88:e9:81:31:1f:
d7:4b:8e:56:8d:6b:50:cb:f1:fc:40:6b:32:e6:e0:26:61:38:
8a:20:6b:d0:da:aa:da:f5:58:6e:0f:3e:d6:db:96:46:b5:dc:
93:04:40:78:42:c8:9a:68:d6:60:60:54:22:b8:fd:a0:84:ff:
eb:fa:03:c3:a2:12:ea:69:f9:65:08:b6:6f:52:19:88:5b:b9:
f7:65:d1:8e:13:d4:c4:03:15:e3:38:25:68:47:38:4f:88:e2:
69:d8:b5:cb:75:4f:e7:5f:1a:1f:65:f2:90:71:ae:78:2b:c9:
97:06:75:2c:a2:dd:ce:5b:34:a4:26:bc:d9:8c:88:3c:01:7c:
f0:46:3a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:40 2025 by rpki-client