Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sN_KMEQxL986f68bPgoRAjJQbic.roa
File: sN_KMEQxL986f68bPgoRAjJQbic.roa (raw, json)
Hash identifier: MMPQ6gkA5fv4nDhLJSTwKrVqSpqp9YMkSTJta+W+bdw=
Subject key identifier: B0:DF:CA:30:44:31:2F:DF:3A:7F:AF:1B:3E:0A:11:02:32:50:6E:27
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181D9DB192649AD783F7754241443BF8774
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sN_KMEQxL986f68bPgoRAjJQbic.roa
Signing time: Thu 07 Jul 2022 18:10:23 +0000
ROA not before: Thu 07 Jul 2022 18:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d9:db:19:26:49:ad:78:3f:77:54:24:14:43:bf:87:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 7 18:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0dfca3044312fdf3a7faf1b3e0a110232506e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:1b:ba:21:0b:df:b7:77:9a:7b:1c:30:25:
49:c9:f3:4a:69:85:c7:b1:bc:a5:64:3d:9c:15:8d:
43:48:d8:fa:c0:b8:d7:46:e9:76:2b:16:82:84:0c:
55:58:a4:76:3d:25:7c:e1:84:c9:e3:a9:8e:2c:d0:
91:f2:55:14:ea:4d:95:66:a2:bb:47:2a:76:fa:83:
30:60:ac:79:f0:c2:ae:86:b8:cd:74:1d:8a:d7:24:
8c:50:f5:54:60:4f:74:11:50:bf:0e:85:53:e4:96:
0a:a9:12:65:53:3d:55:27:5f:c3:d2:b1:82:71:34:
31:8e:4b:b1:86:71:b2:70:10:eb:89:83:98:4e:ff:
ee:da:b5:1a:28:dc:87:6a:65:3c:bc:b0:ec:51:6f:
df:10:fc:d6:00:1e:e5:69:b2:60:cd:fc:bf:2f:58:
d4:ec:97:b9:ef:ec:02:14:b7:37:8d:d6:8c:1f:b3:
c1:8d:8e:93:e6:4c:d4:bc:29:eb:7e:83:f3:b9:39:
da:f8:63:fe:af:37:d4:b8:ce:7a:01:6f:16:c5:30:
69:59:17:3d:6e:1a:5a:f4:00:e5:46:30:30:ec:bb:
76:fc:87:fb:ec:d3:cb:16:bf:69:ec:42:53:a6:3f:
26:b2:9b:c0:86:a0:02:77:f3:b5:fc:0b:33:44:c1:
e3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DF:CA:30:44:31:2F:DF:3A:7F:AF:1B:3E:0A:11:02:32:50:6E:27
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sN_KMEQxL986f68bPgoRAjJQbic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:b3:f3:1a:82:61:65:81:b8:10:1c:0e:77:46:a9:24:b2:7a:
3c:c9:e7:67:1c:5b:91:0d:6e:b8:29:68:66:7d:b3:50:40:0a:
e8:32:13:f0:7c:f6:fe:2b:98:fc:01:2e:ca:e9:01:60:5e:73:
ec:4c:36:26:de:3f:8d:7e:ba:d8:df:b7:3d:37:5c:d9:bc:0d:
21:b6:78:bb:aa:cf:7a:85:74:bf:68:5f:00:63:1e:0c:f1:ea:
20:b9:19:de:1e:ae:a0:12:f6:7b:7f:cc:ff:52:37:e0:ad:e6:
f6:f8:f0:9d:ce:0e:b1:11:67:84:1f:a4:c2:58:35:78:02:75:
57:49:ba:b0:7c:ac:8e:f2:91:19:5d:dc:83:25:a0:98:cb:10:
5a:a5:02:b9:40:5b:33:ac:1d:ad:1a:98:a9:f4:fb:a3:d1:ed:
05:8f:27:f3:59:bb:87:56:d4:9a:2c:0a:7c:39:b9:4a:7d:4f:
1a:3c:7e:31:75:39:76:54:58:37:cf:6d:45:ed:a6:22:43:c1:
c1:f1:00:37:f0:45:75:cb:c5:58:aa:ab:59:8c:4f:00:31:d3:
37:8a:54:bc:14:d3:8a:b0:5d:06:5d:de:2a:47:3a:c9:de:1f:
3e:58:a3:2e:aa:ab:64:ef:0d:03:29:0a:17:97:10:e5:54:44:
69:04:d9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:01:16 2025 by rpki-client