Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rKREg7bbxsLuGsgmFj7MIGCDrow.roa
File: rKREg7bbxsLuGsgmFj7MIGCDrow.roa (raw, json)
Hash identifier: sJaHA+Fn/+ZILGPhABZ/ZHg7svHgCY9DysMDzPMG3wU=
Subject key identifier: AC:A4:44:83:B6:DB:C6:C2:EE:1A:C8:26:16:3E:CC:20:60:83:AE:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182BFAD829D720810EFFF280962710C5C70
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rKREg7bbxsLuGsgmFj7MIGCDrow.roa
Signing time: Sun 21 Aug 2022 09:13:15 +0000
ROA not before: Sun 21 Aug 2022 09:13:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:bf:ad:82:9d:72:08:10:ef:ff:28:09:62:71:0c:5c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 09:13:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aca44483b6dbc6c2ee1ac826163ecc206083ae8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:85:13:70:cd:2a:a0:6e:f1:4b:67:9f:b4:d9:
f5:d1:10:20:5c:02:55:e0:2c:ae:b8:8b:4a:9c:75:
7e:af:64:e2:3b:86:ae:1c:06:ff:f9:8c:db:61:ce:
92:4b:2d:ad:9b:c6:f6:a9:ef:74:36:74:77:ed:d0:
6a:10:db:5c:2a:0c:cb:e9:34:05:62:5e:a9:99:81:
c2:06:09:5a:84:44:76:eb:a7:a9:4e:3a:1c:08:7e:
ab:55:0d:9a:6f:92:8b:ff:e6:e8:1e:d5:e7:ae:a5:
30:ff:75:2e:7e:8e:9e:44:57:e7:29:c9:ed:b3:fc:
bc:27:13:bd:ed:26:33:61:06:89:54:ac:14:b1:28:
b0:5f:77:4d:1a:dd:34:ef:0b:70:04:f4:3b:7c:ac:
94:7d:45:a5:77:ce:c8:df:d2:b1:c0:d0:ec:26:ee:
23:34:7c:ff:ee:53:a9:22:b7:5c:62:ba:ea:a6:1f:
94:32:b5:26:cf:c9:da:ac:31:eb:59:fb:94:b6:5f:
3d:87:f0:7d:8e:c6:77:00:85:82:ba:a1:09:b4:1b:
3b:f4:98:35:2d:64:6f:d9:02:40:92:e4:a6:74:fc:
9c:17:1a:fa:25:c5:36:f3:4d:51:c9:35:6f:49:9a:
48:d5:8c:9a:3c:76:e1:d2:de:2d:1d:c6:83:2c:6a:
70:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A4:44:83:B6:DB:C6:C2:EE:1A:C8:26:16:3E:CC:20:60:83:AE:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rKREg7bbxsLuGsgmFj7MIGCDrow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:40:fc:c1:4e:9d:b4:86:14:8c:24:c0:10:f1:75:6a:c0:b8:
de:8a:73:1b:d6:16:bf:a5:0a:b8:d0:06:ad:74:2e:65:a2:31:
7a:c9:76:58:da:7f:fc:25:3c:1b:9d:d7:db:d6:9f:3b:be:24:
2c:1d:20:78:b9:bc:70:2a:98:0b:e1:44:27:a8:c0:02:f5:46:
a1:6e:f6:51:d6:ff:16:4a:5c:d5:a0:a0:8e:c8:83:7d:f0:df:
59:d4:da:4f:66:c9:2b:7c:9c:7b:25:34:5b:8c:1b:be:fe:be:
27:72:67:42:a5:ad:38:0c:2d:25:ee:55:67:7a:01:37:95:bf:
a4:77:f9:2c:ab:94:6e:b1:9e:0a:c6:37:58:e2:a0:e0:2c:9d:
9b:fd:76:e1:16:c1:53:b1:4b:08:2b:d6:b3:4e:cb:05:4b:5a:
ba:99:e0:8f:d2:8d:12:9b:8a:e1:1c:88:cc:44:21:e6:db:6b:
a6:e1:1e:e9:52:4f:73:c2:15:64:d1:10:b6:b8:d7:06:c5:4a:
53:29:85:29:c9:9b:17:9c:3e:e3:e2:cd:75:35:0b:b5:6a:41:
ad:92:56:b6:0a:31:a1:09:64:32:15:e0:7b:43:43:8b:20:3c:
4d:23:8f:1d:b5:d1:1b:31:fb:82:ef:f4:f2:01:06:71:67:c4:
1a:55:04:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:50:10 2025 by rpki-client