Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kv4FXS-_jKQgUGG6WrKwQpp1cfk.roa
File: kv4FXS-_jKQgUGG6WrKwQpp1cfk.roa (raw, json)
Hash identifier: Xiu8ulv5Z+bXqeBbmc+qq6245rwtleSFLY0YjXOi48A=
Subject key identifier: 92:FE:05:5D:2F:BF:8C:A4:20:50:61:BA:5A:B2:B0:42:9A:75:71:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E00A27BC973154C939903CEC7E4D4692
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kv4FXS-_jKQgUGG6WrKwQpp1cfk.roa
Signing time: Tue 14 Mar 2023 12:13:27 +0000
ROA not before: Tue 14 Mar 2023 12:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e0:0a:27:bc:97:31:54:c9:39:90:3c:ec:7e:4d:46:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 12:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92fe055d2fbf8ca4205061ba5ab2b0429a7571f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:90:f1:76:0f:b9:bf:31:2f:1c:90:e2:e8:
30:2d:6d:c7:b5:e4:6c:ec:fc:c0:11:ba:fc:e9:77:
87:ee:f8:59:e5:9a:97:42:5c:b2:07:29:96:b9:8e:
9d:f0:7d:de:b6:00:44:c0:57:c8:a4:e0:c3:18:40:
c2:1a:b5:98:f2:41:69:cf:1d:61:93:51:0f:cc:0f:
0b:48:8b:31:c3:e7:db:3a:7d:22:7f:fa:a8:46:f7:
d6:46:19:31:55:dc:da:2d:e7:72:6b:06:7f:96:be:
f8:04:9f:45:0d:66:bb:99:ff:57:be:17:6d:0d:b8:
54:69:49:04:1b:7c:28:6b:4a:dd:10:99:7e:df:f7:
a8:89:7d:3d:35:cc:ad:de:68:8f:a9:e7:07:50:fa:
ce:bb:cb:b2:47:1b:85:98:ef:ae:2d:e0:3b:0c:24:
63:8e:81:ce:f7:c6:2a:5c:a5:be:80:cb:04:67:10:
56:10:d1:c2:fd:2f:af:b7:a5:c4:72:a7:64:5c:fc:
49:8e:e3:60:2b:1f:38:57:83:a5:24:d3:03:e2:ec:
ce:de:42:22:e4:34:ab:bd:47:c8:fd:39:3d:cb:7a:
b6:d3:52:c9:e5:38:1f:eb:6a:db:7c:4d:ba:42:1d:
47:51:c1:cf:94:ad:5e:0c:43:b1:67:29:af:9b:cf:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FE:05:5D:2F:BF:8C:A4:20:50:61:BA:5A:B2:B0:42:9A:75:71:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kv4FXS-_jKQgUGG6WrKwQpp1cfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:db:ab:39:73:98:79:9a:a0:76:f9:1a:58:1a:9a:55:3d:f7:
24:8c:bf:e5:89:2e:cd:f5:e4:14:52:7f:b7:49:38:f4:10:31:
b7:8a:11:15:5f:90:39:f7:3c:ed:89:d2:4e:9a:04:18:89:9e:
1f:bb:cf:c7:62:27:c3:1e:41:a2:49:82:6a:78:83:97:8c:a0:
1b:07:46:39:51:19:cf:ff:71:90:44:54:30:25:01:aa:be:9d:
d3:ab:ba:ab:33:c2:7f:c1:91:c5:ca:7c:97:6e:17:16:67:ef:
4f:f3:13:6a:db:c1:e9:cb:39:38:7a:c6:c4:9f:0b:3d:4f:c8:
81:1b:00:17:79:d8:db:ff:f9:ba:d6:d4:db:ec:28:29:4f:3b:
dd:3b:f1:c8:1a:62:16:3c:32:e7:af:08:58:c1:db:e8:a8:91:
9c:d0:66:9e:14:21:37:18:6b:f4:51:1d:29:a1:fe:55:6d:b0:
c2:d3:3c:07:10:2f:54:04:46:f9:01:42:48:05:e8:c4:db:11:
70:38:d8:93:ec:ab:f2:b4:16:97:e9:74:01:ad:9b:61:a3:ff:
c7:bd:26:58:91:42:66:9c:af:38:72:8b:67:fc:7f:da:5b:d1:
f4:f2:6d:a1:b8:02:1a:c6:3f:92:8f:8c:05:78:17:49:87:ac:
6d:0c:97:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:46 2025 by rpki-client