Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kwidHw27LVkxuuzmJCt2L1pO-i4.roa
File: kwidHw27LVkxuuzmJCt2L1pO-i4.roa (raw, json)
Hash identifier: cEzQ+qW/mp+DJVgdi3Qo9VqlN5wluse0i5IMYJt2Qdc=
Subject key identifier: 93:08:9D:1F:0D:BB:2D:59:31:BA:EC:E6:24:2B:76:2F:5A:4E:FA:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864475AF4A4B130C0F980212AC7AF95C3A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kwidHw27LVkxuuzmJCt2L1pO-i4.roa
Signing time: Sun 12 Feb 2023 07:10:08 +0000
ROA not before: Sun 12 Feb 2023 07:10:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:44:75:af:4a:4b:13:0c:0f:98:02:12:ac:7a:f9:5c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 07:10:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93089d1f0dbb2d5931baece6242b762f5a4efa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:da:b2:c2:3f:9c:c5:c8:c3:38:43:ef:72:
33:1d:4b:96:fd:aa:72:93:5d:7a:14:5f:c3:da:fc:
0f:5a:d3:78:21:b7:ca:a9:1c:4f:3d:f6:2c:f7:34:
e1:ce:5b:e9:1f:b1:71:38:a0:42:d0:11:fb:1b:24:
b0:24:05:c3:7a:6c:dd:e7:5a:4c:52:34:f0:4f:ea:
b0:5f:e1:b5:71:3b:65:fa:6e:75:e9:81:d0:5a:44:
b4:f0:f8:48:e3:c5:ac:33:dd:24:16:44:b0:b4:17:
8b:83:a9:67:e4:bc:f5:d6:1b:aa:0e:ef:e3:d2:4d:
e4:a8:a5:48:b5:d1:53:5a:6b:49:c1:b2:b9:13:2a:
d1:63:c5:f1:79:46:10:38:df:cb:bd:60:bc:78:af:
93:40:9f:dd:bc:00:60:4f:41:22:af:32:fa:38:ec:
1d:82:92:17:c4:4b:4b:fb:d3:e6:2e:2a:43:f3:03:
42:cb:77:52:6b:28:4f:50:de:41:97:54:3e:59:2d:
92:b1:95:00:ab:6c:c2:a8:38:07:80:cb:db:6f:4c:
75:a6:b8:77:58:0f:cc:cc:d9:27:d2:8b:c3:26:39:
72:9e:43:0c:fd:f5:a0:0b:b0:4f:e5:b5:fb:ae:ec:
31:17:01:c6:cf:db:f5:2b:75:09:3d:48:2c:f5:6f:
c5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:08:9D:1F:0D:BB:2D:59:31:BA:EC:E6:24:2B:76:2F:5A:4E:FA:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kwidHw27LVkxuuzmJCt2L1pO-i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:6f:18:a1:d1:4e:f3:4a:43:a3:b6:15:23:7a:a6:6e:a3:6f:
33:09:0b:a6:1d:38:90:26:1a:97:6f:7c:58:97:40:14:9e:ef:
c7:c7:41:05:c2:75:40:94:74:b3:58:31:89:57:bc:7c:25:79:
90:b5:89:6a:e2:6a:6f:5b:ed:fd:3c:2f:47:19:1e:5b:b5:01:
e2:d0:6b:ed:29:93:9b:45:9f:68:10:d8:9c:76:94:bd:92:66:
15:be:74:2f:c3:60:59:b3:d8:cb:83:5f:5c:86:cf:fc:db:7d:
41:e4:ec:bb:3d:55:2d:b1:1d:30:eb:6a:6a:36:46:6d:7d:ed:
ee:39:ea:e5:f4:5e:7c:e8:fd:d8:f1:3a:49:95:66:22:90:e0:
c6:a5:4a:58:36:7f:c9:e8:ad:c1:58:c7:e0:dc:fc:ac:ca:22:
35:a5:4b:43:97:18:1a:aa:a2:51:14:d4:d1:fa:c7:97:e5:f0:
e1:71:d5:40:cc:1a:9a:ac:24:0d:c2:55:02:2b:78:48:84:a3:
7e:6c:70:0a:2e:a1:cf:83:7f:59:63:a2:71:28:cf:33:db:03:
5d:50:d0:de:c2:50:5e:5d:68:09:c5:fe:bf:ad:bd:05:3d:90:
52:26:ff:a7:9d:00:e3:b9:4b:e5:25:56:04:76:0c:4f:8d:8c:
52:77:a4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:20:14 2025 by rpki-client