Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kwfrAktqERIJOCRTtM6Wii3Pi00.roa
File: kwfrAktqERIJOCRTtM6Wii3Pi00.roa (raw, json)
Hash identifier: F6ffb9FFqhNyUqSygMcLlHtNbsnfg06JEEd7Qz9mJn4=
Subject key identifier: 93:07:EB:02:4B:6A:11:12:09:38:24:53:B4:CE:96:8A:2D:CF:8B:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185CAD1EDB9E899F25C6A5CD1102B6D7D31
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kwfrAktqERIJOCRTtM6Wii3Pi00.roa
Signing time: Thu 19 Jan 2023 16:17:13 +0000
ROA not before: Thu 19 Jan 2023 16:17:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ca:d1:ed:b9:e8:99:f2:5c:6a:5c:d1:10:2b:6d:7d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 19 16:17:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9307eb024b6a111209382453b4ce968a2dcf8b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:54:66:b6:f3:e7:0e:45:96:84:90:72:77:a1:
3d:61:f6:46:45:92:e3:b4:17:c3:a1:00:0c:9b:e7:
f9:2c:fa:03:57:65:1f:6a:b7:16:8a:43:c8:96:a3:
8c:8e:11:9c:ef:36:91:d4:71:7e:62:0f:2b:58:3f:
5b:f6:74:6d:3f:4b:73:eb:24:3c:4a:89:7f:24:1e:
17:43:a7:b3:f4:0f:74:54:84:2b:6a:db:68:43:c3:
8d:84:04:8e:5a:1c:3d:ab:05:9f:e3:64:d1:ad:6e:
bd:ad:4e:53:26:d5:d2:03:cf:eb:b1:56:7e:c0:89:
8e:a1:8a:af:65:65:4c:bf:cc:ac:f7:d1:bd:9e:71:
d2:16:03:d0:bf:f5:b6:94:fe:d3:5d:d8:21:63:14:
e7:0b:3e:f0:ea:a4:db:c8:53:c6:a8:6d:7b:78:43:
8c:7e:1a:ef:2b:b6:64:30:80:31:ae:c9:c3:bc:8f:
c8:21:30:4d:43:53:19:a4:ac:b9:50:b6:63:05:92:
c0:bd:1f:6c:5d:cb:09:7f:40:61:51:73:1c:9f:71:
fa:c5:9c:55:c2:e0:97:d2:17:f1:1e:9a:38:43:d7:
81:40:38:1b:f6:ef:60:f8:3a:43:ed:1f:36:72:3d:
af:40:13:73:82:0c:a2:b2:5a:31:a4:f3:e9:87:2d:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:07:EB:02:4B:6A:11:12:09:38:24:53:B4:CE:96:8A:2D:CF:8B:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kwfrAktqERIJOCRTtM6Wii3Pi00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:4b:9e:25:0f:ac:19:25:51:25:2c:8d:9f:bd:cf:48:0e:cb:
8d:c2:bb:bc:87:72:c8:78:23:85:4f:a8:b6:37:1c:2c:93:35:
74:30:a6:4b:2b:d0:11:eb:79:4d:54:8d:56:da:77:64:54:f7:
df:24:85:07:47:59:fe:ec:5a:ff:ab:2b:06:b3:a4:20:97:5d:
33:cc:6b:05:32:45:53:c5:fc:c1:cc:7d:03:0c:84:e6:d3:a3:
60:1d:ab:c8:8e:e9:30:6f:e2:d5:e9:b0:0a:43:2f:96:95:6b:
9a:a1:ac:5d:f2:39:e7:53:35:d1:d3:eb:28:4f:fc:7a:37:80:
13:e2:8a:94:f7:d6:e9:52:48:ac:b3:27:d3:c0:37:ea:46:6c:
19:c0:6f:2a:33:66:44:b7:e8:b9:8c:39:19:62:81:2d:96:8c:
8f:9c:b3:39:52:3f:a9:ef:e8:77:96:49:86:f1:2f:a9:7b:41:
b3:1c:84:4b:f2:d0:b2:24:68:b2:bd:94:c2:ab:40:db:12:4a:
87:80:a2:51:a9:84:53:71:91:2f:f8:b3:e4:5b:9b:33:c6:0c:
f5:94:ff:a7:50:72:67:96:45:de:48:d1:da:19:10:c2:ff:23:
7c:5c:44:7e:90:44:5b:35:93:0f:b3:0a:57:f8:6f:f5:8f:a9:
89:1a:3d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:05:03 2025 by rpki-client