Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kv7_jhPoPo4MBoA7Py63A-X4j0w.roa
File: kv7_jhPoPo4MBoA7Py63A-X4j0w.roa (raw, json)
Hash identifier: 0GUfjHGydLZqOo+bQ5D2RvLEF4yeedZbHgowCXjP3f0=
Subject key identifier: 92:FE:FF:8E:13:E8:3E:8E:0C:06:80:3B:3F:2E:B7:03:E5:F8:8F:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872709592F3934F5BE9FD744E238E1B5C1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kv7_jhPoPo4MBoA7Py63A-X4j0w.roa
Signing time: Tue 28 Mar 2023 07:05:36 +0000
ROA not before: Tue 28 Mar 2023 07:05:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:2708:a50a/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:27:09:59:2f:39:34:f5:be:9f:d7:44:e2:38:e1:b5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 07:05:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92feff8e13e83e8e0c06803b3f2eb703e5f88f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7e:d2:43:e5:db:ee:43:e3:4a:0c:9b:b9:c3:
36:97:ba:b4:61:25:ad:b6:3c:c1:e6:70:bc:7c:f5:
b6:f3:2f:13:8f:97:ec:ff:37:a8:fb:8a:62:f3:4b:
eb:2d:3c:29:89:48:ce:fd:d4:67:25:5e:21:2f:7b:
f9:f3:b9:2f:23:4d:07:18:92:22:63:1b:50:0e:b2:
aa:de:45:9f:af:6b:76:44:34:4b:a3:bb:5e:16:9e:
29:a5:ee:f2:e0:88:b0:74:f3:fa:a2:46:d1:2a:2f:
46:d9:6b:b9:07:eb:20:2d:f9:fa:9d:aa:6c:08:5b:
1b:8c:01:cb:4b:fe:f0:dc:00:94:17:3e:ab:ad:ef:
93:e5:5e:41:f3:b3:5c:c3:14:e9:9c:2a:f4:ff:32:
06:dc:0f:49:79:4d:60:6a:00:2c:18:97:cd:4e:e5:
01:28:e9:d1:e9:2a:7d:35:bb:7c:21:0b:ba:98:bc:
59:2b:eb:08:04:52:60:e3:05:a5:67:21:f0:2c:9c:
b6:d8:57:5a:3d:8a:53:a5:db:ba:94:6b:b7:ea:e2:
86:25:69:c2:90:4a:be:e3:b6:5c:c9:4e:44:4b:74:
04:0e:4d:c7:6b:ad:37:a8:0f:03:0f:df:7e:32:b2:
db:3d:fb:49:d6:d8:4c:d5:bd:55:d1:0d:fc:66:aa:
39:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FE:FF:8E:13:E8:3E:8E:0C:06:80:3B:3F:2E:B7:03:E5:F8:8F:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kv7_jhPoPo4MBoA7Py63A-X4j0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:3d:2c:da:10:b1:1f:6f:99:0b:8d:17:36:0c:b4:d5:00:09:
9e:e0:22:b1:e3:1b:07:bc:90:12:2d:df:13:96:d4:c0:50:60:
7f:49:8a:e4:12:36:fe:d0:7e:6b:40:26:23:7d:af:b9:53:8b:
76:94:42:31:85:84:a0:a5:9d:ff:49:d1:7e:a9:c8:e3:bc:0a:
f8:d2:b1:6b:4f:78:89:4a:8a:8b:34:49:84:ce:72:7a:c7:61:
64:81:0e:db:98:0b:14:0b:97:1a:98:3d:91:01:dd:05:b4:ee:
29:22:6b:50:af:08:8f:3f:f1:76:01:4e:26:dc:ba:a1:e8:10:
3e:1b:72:83:c6:44:ca:b6:ad:2e:d8:f7:f7:26:46:51:30:cc:
12:8f:37:e2:bf:6f:a9:98:27:4e:46:df:bd:68:70:8c:e6:4f:
d8:06:73:e1:a5:b2:1e:22:70:1b:84:e9:51:52:3e:1b:76:6c:
80:d3:1d:e3:ca:45:5e:47:66:9f:e8:a1:ba:27:e7:83:ed:d6:
34:0b:b2:12:45:b6:e3:ad:7b:8f:23:66:4d:b6:43:21:27:5b:
a8:fb:e4:85:75:e5:89:7d:ba:77:bd:4f:da:95:13:61:15:cc:
5b:6b:7b:7c:16:3b:e4:dc:08:e5:63:c2:9c:97:4c:22:e6:fa:
a1:64:8f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:15 2025 by rpki-client