Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ku-Ej4RNx3nMKMkRtgsh1CFBw04.roa
File: ku-Ej4RNx3nMKMkRtgsh1CFBw04.roa (raw, json)
Hash identifier: vD6Jzlwt1eOEShDEnTlJ9GbaaKn/mlsC0stOkjnoyYc=
Subject key identifier: 92:EF:84:8F:84:4D:C7:79:CC:28:C9:11:B6:0B:21:D4:21:41:C3:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018419CCA05BF7021A2E414AB4DC82C1D86E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ku-Ej4RNx3nMKMkRtgsh1CFBw04.roa
Signing time: Thu 27 Oct 2022 14:15:51 +0000
ROA not before: Thu 27 Oct 2022 14:15:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:19:cc:a0:5b:f7:02:1a:2e:41:4a:b4:dc:82:c1:d8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 27 14:15:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92ef848f844dc779cc28c911b60b21d42141c34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a1:b0:16:bb:40:6f:e7:05:89:ea:b0:e7:77:
6e:a6:d9:42:05:6e:83:e1:1f:e3:47:9c:08:e8:17:
25:51:f8:fa:19:71:6b:05:df:97:a5:fa:ba:2b:0e:
6b:2b:46:5d:11:39:4a:70:8b:c7:ea:36:fe:c3:6a:
ab:b5:f7:21:aa:06:a5:69:23:ff:c9:4f:85:62:15:
62:4c:d2:41:9e:e7:97:c3:a1:91:cb:4c:37:83:79:
3d:62:3e:75:eb:6c:18:da:8a:46:f6:85:42:ed:8b:
ea:2b:e0:75:5b:a9:00:c0:83:65:24:90:c2:af:d7:
5f:65:01:72:86:41:59:5e:ae:ed:0a:e2:26:cd:57:
68:3d:b1:7c:09:01:f2:b7:ff:ec:82:43:b6:1d:df:
20:81:0e:23:30:7c:5c:19:b3:0a:45:e4:3f:15:6c:
99:e5:50:06:6f:ce:3a:ac:a0:ac:06:71:bf:e7:8e:
9a:64:6b:57:19:6a:45:3c:40:d1:35:81:e3:b9:11:
a5:cb:5a:b9:33:be:d7:63:d3:26:e4:47:05:1f:f3:
70:55:6b:cc:79:29:b9:b6:de:01:69:bd:8b:92:e3:
97:f4:38:99:45:35:e8:59:61:ef:a5:35:ac:8e:2f:
e2:f7:53:24:59:d1:1f:05:79:d8:ec:ba:01:03:bc:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EF:84:8F:84:4D:C7:79:CC:28:C9:11:B6:0B:21:D4:21:41:C3:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ku-Ej4RNx3nMKMkRtgsh1CFBw04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:f0:d5:72:39:e7:6b:56:b0:2b:3a:33:22:5b:3d:f9:f4:b2:
bb:bc:3c:54:81:e8:82:b3:9d:41:40:c1:9f:e1:34:08:bb:9f:
81:7b:44:4d:ff:9e:52:3b:b7:e3:1c:c5:e1:92:e0:01:f0:ea:
f0:e2:8c:2a:7e:02:df:7b:ff:ec:f5:71:37:e5:af:93:2d:a1:
59:f7:f8:4e:fe:62:07:03:89:f0:8a:8d:6e:c3:dc:39:e7:ea:
b7:a2:97:a5:b5:7c:d1:a1:f6:85:50:3e:6c:d3:82:86:01:a6:
3e:81:d8:f1:e8:d2:0b:03:8e:f1:06:65:71:e3:0e:44:f4:a1:
bf:7c:16:47:0f:da:f0:59:fc:dc:9a:33:f6:22:d9:5c:89:d0:
3e:7e:2b:c0:eb:5b:be:74:64:91:74:ad:ba:c2:76:40:d2:c5:
06:11:4a:20:90:a6:47:68:1d:33:48:22:ed:ec:b2:6d:ad:f9:
d4:35:0f:db:c2:06:fb:91:55:0d:1f:f6:ab:90:fa:90:fb:cb:
77:7e:6e:b8:cb:ef:3c:0b:34:75:5b:e6:71:50:d4:b3:77:c8:
8c:84:6e:da:84:d8:2d:3e:c5:a5:ca:af:86:e6:94:ca:74:27:
20:86:0a:30:be:2b:5e:b6:fb:a6:55:28:8f:70:70:47:c4:86:
6c:2a:bf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:43:54 2025 by rpki-client