Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kwLnr4cJYgmnklTVKcojIMcNJV0.roa
File: kwLnr4cJYgmnklTVKcojIMcNJV0.roa (raw, json)
Hash identifier: QKfbrX15IyIZA8ZOkOP5bxe6UEIfIK0KmCbIRtlbN1s=
Subject key identifier: 93:02:E7:AF:87:09:62:09:A7:92:54:D5:29:CA:23:20:C7:0D:25:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181DAB8A7901071CA3CB16E523432D0994A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kwLnr4cJYgmnklTVKcojIMcNJV0.roa
Signing time: Thu 07 Jul 2022 22:12:23 +0000
ROA not before: Thu 07 Jul 2022 22:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:da:b8:a7:90:10:71:ca:3c:b1:6e:52:34:32:d0:99:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 7 22:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9302e7af87096209a79254d529ca2320c70d255d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:cf:73:8a:7a:42:a0:1d:3f:75:44:2f:67:
f6:28:ba:b4:33:61:bf:b2:19:4b:c5:74:cb:69:91:
2a:9f:69:d6:50:b9:32:e2:9d:78:48:30:2b:a0:57:
61:75:aa:5f:b8:6b:64:f5:1b:69:3f:11:ff:a0:26:
9f:e8:a1:aa:e0:a6:5d:6c:0c:47:59:60:80:e7:71:
0f:89:90:de:3d:d9:bd:66:e8:35:fc:fe:a0:70:4e:
e0:2b:72:4e:06:1f:be:fc:8b:e3:c9:4f:6d:8e:ee:
b1:81:3e:fa:14:bc:55:26:4c:d7:e3:96:9a:a9:14:
f8:d6:f4:d3:90:cd:36:47:c7:2c:4d:81:ac:fa:ae:
54:02:15:8e:6a:0b:de:68:72:b2:a7:f2:6b:9d:50:
76:9c:ec:b0:1a:fe:09:83:8d:43:11:9f:02:34:67:
f2:38:8e:cc:ba:d3:bb:62:61:07:b9:dd:4a:80:40:
22:50:be:ee:75:fe:d9:f0:2a:42:34:ef:dd:14:16:
e7:68:06:70:f8:29:fa:cd:ab:90:d1:1d:93:b8:d4:
9e:3d:a2:70:5a:ec:a3:de:e3:6f:91:a2:1a:41:f5:
0a:7e:cb:28:47:94:76:7e:69:98:16:cd:ae:ba:d8:
1c:40:3c:4d:af:5d:3d:ad:8e:0e:a4:97:2e:80:b2:
0b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:02:E7:AF:87:09:62:09:A7:92:54:D5:29:CA:23:20:C7:0D:25:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kwLnr4cJYgmnklTVKcojIMcNJV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:e0:32:37:28:a9:97:e9:aa:02:57:64:b7:64:85:9a:d4:5d:
44:6d:7c:6c:88:d9:ba:f5:71:6d:4a:18:2b:bb:77:28:7a:f2:
bd:fb:7b:60:06:c4:73:85:f0:b0:75:ab:8d:74:ef:71:fa:d7:
25:36:20:7f:06:9d:50:30:5d:b0:d4:0b:86:59:ca:67:7f:7d:
46:c9:01:53:b7:be:d7:aa:79:ae:bd:88:1a:9e:74:c6:1a:a4:
60:c0:52:a8:e4:39:35:f9:54:fe:e6:dd:3d:08:39:fa:cd:b6:
87:21:74:6c:01:dc:5c:a7:a5:e0:fd:97:cf:6e:ea:17:32:f5:
71:e7:53:15:c8:0a:a9:b3:47:a4:19:6d:f3:28:c0:17:ea:b5:
ad:58:8f:c9:22:dd:85:54:18:da:0e:eb:de:20:43:65:1b:5d:
46:d4:e3:ae:97:63:8e:e8:fb:4a:0b:1c:86:ed:49:50:03:d7:
56:2c:49:3b:e1:6e:c0:03:56:89:a2:bd:d0:4f:f9:9a:b8:b3:
46:33:a4:85:0b:01:23:91:88:cd:fa:36:a7:14:78:5f:4f:bf:
63:9f:10:57:0e:de:40:56:f7:32:11:57:8f:00:62:1f:ed:78:
79:65:26:73:fd:e0:fe:27:51:ab:d9:a9:5b:de:bf:96:08:5c:
60:56:8d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:59:27 2025 by rpki-client