Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kvrej5O-KLTpFffw0IAoaEeldUU.roa
File: kvrej5O-KLTpFffw0IAoaEeldUU.roa (raw, json)
Hash identifier: UPmgHhIdVt358DqoHB7Np7Oz5ph17K8UuONDBkjtMD8=
Subject key identifier: 92:FA:DE:8F:93:BE:28:B4:E9:15:F7:F0:D0:80:28:68:47:A5:75:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856C937831F1F0B91E1602352A63587E55
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kvrej5O-KLTpFffw0IAoaEeldUU.roa
Signing time: Sun 01 Jan 2023 09:04:41 +0000
ROA not before: Sun 01 Jan 2023 09:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:6c93:1f4e/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:93:78:31:f1:f0:b9:1e:16:02:35:2a:63:58:7e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 1 09:04:41 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92fade8f93be28b4e915f7f0d080286847a57545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:1d:ef:82:c6:41:7c:98:3f:8e:00:cf:6f:
de:e5:7b:a6:af:c8:14:67:17:11:1b:3b:33:f5:57:
f1:db:a5:a1:ef:37:8c:1b:83:a3:3e:57:c3:fb:ca:
da:76:f3:ad:88:2d:ea:54:52:ce:6b:36:10:43:e3:
30:c1:c2:cc:e5:d2:ed:2a:59:e6:cb:8e:ee:1c:d8:
09:d8:c8:25:ee:79:d4:da:b0:42:84:56:72:38:1a:
1e:4d:5e:75:f9:65:6d:5d:ac:47:3f:dc:3d:11:44:
6f:a9:4c:d5:f7:a0:36:8a:ee:e8:c2:7b:24:9a:72:
9a:c9:06:12:d9:e6:3e:46:ac:9e:41:3a:34:92:9e:
24:4a:b3:6b:75:9e:42:1f:d4:e3:84:97:89:e8:44:
bc:86:b2:f4:b6:e0:87:f0:3e:60:f3:42:b7:5a:d1:
d7:06:d0:59:6b:c3:75:af:06:7b:1d:cc:06:ec:bb:
92:8d:46:86:06:90:4d:c1:46:8a:12:aa:a9:c7:eb:
8b:18:a4:27:ed:f2:54:56:08:67:03:93:03:16:1d:
a8:d2:81:92:fc:c3:24:b8:2d:cc:01:2c:5f:71:db:
ef:8a:eb:83:e8:27:95:82:8a:56:85:08:86:5d:18:
c9:89:55:e8:cd:89:ad:89:b7:de:be:df:85:61:2c:
13:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FA:DE:8F:93:BE:28:B4:E9:15:F7:F0:D0:80:28:68:47:A5:75:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kvrej5O-KLTpFffw0IAoaEeldUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:79:d5:71:0f:45:bd:0b:86:59:8c:6a:0e:57:4a:52:5b:ce:
c9:98:59:9a:09:4e:bc:ec:42:49:37:97:e3:b6:fd:fc:fb:f5:
39:af:a8:ce:dc:ad:86:2d:9c:5f:e7:51:a2:b8:7c:3f:81:93:
e5:e7:84:da:e8:63:74:2b:50:f7:f3:df:99:03:5a:e2:b3:cc:
57:b6:1e:37:87:93:d2:94:66:4a:e9:6e:8a:ba:ae:2c:d2:bc:
5d:9a:ca:12:28:57:3e:d8:bd:cd:68:c9:b2:42:bd:51:22:12:
71:29:41:d7:04:98:cd:b8:21:28:e1:4a:4e:fa:58:d6:57:f9:
1b:e5:0f:cb:71:3a:cd:61:89:c3:b7:02:05:53:67:43:fe:fb:
48:54:85:15:3a:41:d5:59:91:42:b5:cd:39:62:2d:cf:e9:6c:
11:f4:8a:26:ad:8b:1d:26:4c:06:3e:66:a8:49:8a:fe:0e:5a:
20:e3:59:73:7a:3e:c9:c0:51:00:5a:86:f3:49:7a:7a:95:a1:
b7:7c:d1:96:67:94:14:70:53:e6:38:33:88:1c:be:0c:96:d1:
8b:81:e0:ca:c7:b7:fa:b6:8b:33:fa:76:17:44:2f:39:dc:be:
94:eb:9b:08:6c:be:38:94:52:e5:93:d1:e3:c5:05:29:c9:8f:
cc:a2:0e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:04 2025 by rpki-client