Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rcKUL_tb-l8_j9p_hzLFtnnC_8Q.roa
File: rcKUL_tb-l8_j9p_hzLFtnnC_8Q.roa (raw, json)
Hash identifier: GnFHVwU/MbeomVEWmdPHaiU/0bjYXFa8QprFEYG4++U=
Subject key identifier: AD:C2:94:2F:FB:5B:FA:5F:3F:8F:DA:7F:87:32:C5:B6:79:C2:FF:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018672269BBF85845331A647C88A8423AAE1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rcKUL_tb-l8_j9p_hzLFtnnC_8Q.roa
Signing time: Tue 21 Feb 2023 04:06:18 +0000
ROA not before: Tue 21 Feb 2023 04:06:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:7225:bf1c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:72:26:9b:bf:85:84:53:31:a6:47:c8:8a:84:23:aa:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 04:06:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adc2942ffb5bfa5f3f8fda7f8732c5b679c2ffc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:ec:c2:49:ce:c6:aa:0b:8c:52:75:42:e1:
cf:45:6c:56:47:e4:f6:0b:1c:f7:29:4c:47:57:3b:
70:48:3f:79:79:cc:26:56:f0:a8:73:82:9b:c4:1a:
d2:1c:72:88:72:70:2f:59:0a:08:aa:48:92:6a:6a:
7d:ee:7a:7d:b5:3d:68:e2:26:9b:36:ee:d6:85:5f:
2b:c6:00:51:60:b7:dd:57:da:da:20:8e:8e:f9:6e:
e0:15:7b:2b:e0:4c:9f:02:95:e2:d7:bd:05:05:92:
1d:8a:f2:67:33:f9:1e:bb:ab:c9:a3:cd:a0:a3:24:
a7:80:1b:e3:29:26:08:ec:30:c4:6f:2e:ce:d0:d3:
2a:b8:fa:bf:b5:e1:0f:83:a6:7e:bb:d7:4a:2a:a4:
0f:22:2f:92:91:b8:89:43:c2:25:50:9d:61:aa:7e:
8f:98:52:05:93:50:99:ef:53:eb:2d:b9:72:9a:2a:
06:64:59:53:6c:ff:c1:cd:0f:fa:4f:ab:99:97:bc:
da:67:df:0a:2f:86:cd:57:d5:9c:7a:ad:ca:85:6c:
dc:67:ef:1b:d7:6a:2c:c9:36:43:a0:f6:6d:b5:c0:
db:e3:0b:7d:ca:f9:8d:b7:b7:48:60:29:7b:a1:bb:
e0:d1:c6:28:b3:0a:49:b0:f4:9d:2f:56:26:fa:71:
81:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C2:94:2F:FB:5B:FA:5F:3F:8F:DA:7F:87:32:C5:B6:79:C2:FF:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rcKUL_tb-l8_j9p_hzLFtnnC_8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:6c:b9:78:b3:9e:8e:06:32:28:98:c5:75:44:69:9b:b4:36:
6d:3a:f5:ca:30:d1:e0:2b:dd:58:74:4c:20:43:e7:05:14:3a:
e3:57:bf:db:32:5d:03:ea:1b:79:be:ad:68:23:e7:b1:60:5b:
f3:f4:26:ca:9a:2c:a2:78:5d:2e:17:1e:b0:98:82:92:29:b9:
1a:8d:3f:98:20:c9:25:ac:e1:36:83:1b:07:13:5c:92:c0:21:
da:a3:d6:fb:0c:b6:1e:74:13:17:12:96:bc:b1:ed:14:44:41:
db:49:e5:6b:df:71:13:36:a3:47:2a:5c:7a:41:ed:99:d7:1f:
2b:05:29:ba:1a:c3:76:12:ba:6f:ec:bd:53:b6:7a:bb:88:b3:
eb:a3:4c:d9:75:9f:ec:83:c6:de:8c:c2:97:72:02:76:d2:66:
3d:f1:0b:50:71:82:80:1f:4f:38:42:57:a1:c0:97:73:7d:cc:
34:40:52:a4:69:41:a0:b9:59:15:73:66:38:89:87:87:f1:80:
d5:75:b6:9a:ee:63:a0:0d:e0:ce:24:9e:2b:33:dd:1e:da:ed:
45:1f:33:74:6c:0a:ca:ca:e3:8e:38:68:9d:a6:bf:29:1d:48:
7f:72:ce:f0:85:00:c3:9c:46:c4:4c:ba:f9:cb:f9:a6:60:55:
c1:bd:75:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:23 2025 by rpki-client