Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kvbLyNeTUj33kgzNNfYSLU57qnk.roa
File: kvbLyNeTUj33kgzNNfYSLU57qnk.roa (raw, json)
Hash identifier: LMrSpVGQFBKeeaQslE0Bb7m9f2eMSUpSLCauECUOE4k=
Subject key identifier: 92:F6:CB:C8:D7:93:52:3D:F7:92:0C:CD:35:F6:12:2D:4E:7B:AA:79
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 735047AA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kvbLyNeTUj33kgzNNfYSLU57qnk.roa
Signing time: Thu 17 Mar 2022 19:13:27 +0000
ROA not before: Thu 17 Mar 2022 19:13:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1934641066 (0x735047aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 19:13:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92f6cbc8d793523df7920ccd35f6122d4e7baa79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:b1:96:fa:c8:2b:2d:a2:6e:a7:7e:b2:1e:
8e:ce:86:bf:9f:06:78:5b:dd:5c:98:2f:01:ed:80:
6d:b7:a1:16:89:8d:89:79:94:1d:76:5a:fc:55:35:
51:df:ba:79:cb:83:75:04:b8:4d:f2:fc:a0:0e:25:
6c:56:f3:87:43:db:b3:6f:35:22:40:96:55:1a:1d:
3d:0b:a2:a9:0f:6a:3a:9c:53:1e:48:97:b9:05:1e:
6a:a7:d0:c9:3c:7b:42:3d:9e:4a:82:a4:71:44:30:
11:16:9a:c1:f2:ab:13:ea:48:40:19:00:91:37:54:
b5:db:12:be:cb:78:79:82:ad:0e:a0:6e:a7:ae:da:
18:6c:4c:c9:96:2a:b8:b6:27:d2:41:74:73:6f:b3:
d9:b9:11:4e:64:4c:eb:21:8f:5a:f4:8f:67:a7:9d:
78:93:31:b6:4a:8e:a3:34:f1:76:d6:ef:18:28:14:
c3:40:a9:d7:97:ec:7f:65:82:78:a8:e0:a2:14:cc:
61:51:d9:95:4e:a5:e9:7d:0f:0c:88:52:88:1e:bb:
68:bc:2a:0f:dd:a2:b5:52:e8:3e:f0:62:10:05:a0:
e1:1d:30:65:82:51:cb:6d:c8:19:20:dd:bf:b3:88:
1a:34:87:18:ae:ad:e1:3a:88:55:f8:a7:ae:98:8a:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F6:CB:C8:D7:93:52:3D:F7:92:0C:CD:35:F6:12:2D:4E:7B:AA:79
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kvbLyNeTUj33kgzNNfYSLU57qnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:ec:77:1c:1b:5b:4b:f3:4d:f4:f8:d4:45:39:fe:a2:62:02:
7e:b4:bd:fe:75:01:a4:a8:c5:73:f9:0d:51:a6:93:3e:17:a4:
9e:ae:ae:bb:30:a2:5a:52:4e:6c:eb:0e:db:34:88:8f:be:23:
85:67:98:2b:2f:9e:b2:49:2d:56:02:20:f5:ce:6c:3e:ec:b2:
37:9a:9c:fd:be:2a:9b:11:af:7b:0a:6a:84:c6:ae:36:11:73:
40:20:43:02:90:74:93:99:58:cd:6f:0f:48:5f:01:24:db:b2:
b2:9f:76:a7:43:04:dd:31:ba:d8:1f:8b:fd:71:c9:92:af:fc:
b1:1f:c7:cd:9d:5c:0e:09:23:a2:62:3c:94:81:32:a2:67:b8:
dd:c1:c0:cc:a5:7f:92:99:e8:b1:7e:47:8c:00:e8:69:90:d3:
7b:60:4a:00:d7:f7:15:26:9d:78:b1:c3:df:f4:a4:18:1d:cc:
7a:1d:9e:e9:bd:f5:8e:45:47:c2:4c:21:bc:17:e1:ea:c7:b3:
49:e6:a3:9c:15:38:cf:70:87:29:de:d6:cd:47:1d:15:77:50:
77:3e:20:3e:47:2f:d2:4d:8d:d0:d2:1a:20:3e:61:42:11:77:
62:50:31:0d:4d:dc:db:cf:dc:93:3e:bb:d5:e7:95:e8:8e:a7:
d9:76:79:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:06:44 2025 by rpki-client