Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KlCB-hK2W2ufTewqBEST7XDODhA.roa
File: KlCB-hK2W2ufTewqBEST7XDODhA.roa (raw, json)
Hash identifier: CFKj6+H6Hwfcz9jO/76X5POFkyvS2rMYRUaeBltv7Zs=
Subject key identifier: 2A:50:81:FA:12:B6:5B:6B:9F:4D:EC:2A:04:44:93:ED:70:CE:0E:10
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D0473984F794C2B59A51F6D38680FB0BB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KlCB-hK2W2ufTewqBEST7XDODhA.roa
Signing time: Sat 13 Jan 2024 20:11:40 +0000
ROA not before: Sat 13 Jan 2024 20:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:04:73:98:4f:79:4c:2b:59:a5:1f:6d:38:68:0f:b0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 13 20:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a5081fa12b65b6b9f4dec2a044493ed70ce0e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:18:a4:8f:8b:a7:d0:c6:8a:6b:e3:e8:c3:
68:e8:77:52:c2:7d:e2:c9:5a:58:54:6f:5a:91:89:
bf:2d:e4:e7:1b:00:bd:ff:4b:5c:77:7a:ca:bc:82:
a0:3d:ae:b9:e9:90:56:92:a8:01:27:b9:bc:d8:5e:
96:a1:5d:6e:81:55:a2:a4:d7:cf:a5:8e:25:78:5e:
d9:11:37:ef:fc:06:d9:67:62:b8:a5:ff:d3:2b:ee:
d3:3f:8c:a9:78:fc:24:9c:dd:f7:c3:11:d9:4f:ea:
2b:d8:f0:58:54:65:02:89:42:b3:63:40:f7:1a:d9:
4e:85:bb:40:f5:87:71:8c:01:d7:7a:8d:26:8a:44:
3a:b0:cd:c2:af:5b:66:bf:0b:7c:59:01:29:75:79:
b6:bd:52:cf:45:8a:fa:92:f0:81:4e:58:81:f2:b5:
b2:d1:d8:95:ba:cb:cc:3e:76:12:60:92:52:75:40:
8c:0d:33:5a:d0:94:cf:8f:7b:0f:b6:ea:1a:e8:1f:
40:86:2f:45:21:bf:9d:2d:01:c9:ee:ff:ee:3a:c3:
70:25:20:59:96:83:1a:99:2e:23:ab:22:7c:13:e8:
74:f4:6d:82:0e:3b:fa:f6:a7:f9:b3:f0:fe:b6:6e:
da:57:0a:0e:0d:3b:5f:f1:3a:55:1d:29:be:27:44:
d0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:50:81:FA:12:B6:5B:6B:9F:4D:EC:2A:04:44:93:ED:70:CE:0E:10
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KlCB-hK2W2ufTewqBEST7XDODhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:cf:7e:b7:93:31:be:e2:59:2e:ab:c4:2e:92:c2:a6:df:c3:
21:20:b6:de:b3:80:6d:6d:3a:15:8f:b0:b0:b0:35:6c:d1:28:
ec:22:bb:28:50:2e:46:01:33:bf:e7:2d:f6:3b:39:4b:26:1b:
37:06:72:cd:c3:61:ae:e8:35:ee:a8:51:d1:43:ba:46:39:41:
09:2b:df:a1:ac:70:18:e8:cd:f8:c5:71:7a:8d:f3:1a:bc:62:
ba:22:69:b2:36:6f:48:32:40:bb:99:ad:1a:85:92:4a:ee:83:
33:f3:c0:fd:55:8d:2f:c3:ab:ac:78:7c:1b:3b:24:73:ee:a5:
e6:4e:46:d4:79:38:d7:3e:3f:6a:81:1e:fa:1f:f4:72:b2:10:
09:f4:d7:0d:b7:b9:ab:13:59:98:3d:89:75:56:f5:b1:2d:5a:
ed:59:b6:c2:79:4a:e3:5d:f1:f8:eb:de:1a:23:10:29:8f:a2:
af:24:fc:f4:3d:78:e5:09:87:b7:b6:0c:dc:81:78:5a:5c:d6:
2c:f8:38:9e:98:3b:9d:15:96:b6:ee:51:1b:11:81:d7:17:af:
aa:57:35:dd:b1:03:e8:e6:1e:2f:77:de:53:1f:87:3f:45:c6:
45:64:9f:76:87:a5:4a:fa:cf:e0:92:00:d4:8f:30:a4:e5:6f:
a0:cb:b6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:45:05 2025 by rpki-client