Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K592hKwQtso_vmJXPq3Q_ktx2Hg.roa
File: K592hKwQtso_vmJXPq3Q_ktx2Hg.roa (raw, json)
Hash identifier: Tw/mr9+2L3nv38GQGBvkV/zg6IjatOJb1yFSg0GTmkY=
Subject key identifier: 2B:9F:76:84:AC:10:B6:CA:3F:BE:62:57:3E:AD:D0:FE:4B:71:D8:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896E11CACF9A1652ED229CB87F9F42F4E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K592hKwQtso_vmJXPq3Q_ktx2Hg.roa
Signing time: Wed 19 Jul 2023 12:13:26 +0000
ROA not before: Wed 19 Jul 2023 12:13:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:11:ca:cf:9a:16:52:ed:22:9c:b8:7f:9f:42:f4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 12:13:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b9f7684ac10b6ca3fbe62573eadd0fe4b71d878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:96:49:a1:a0:d1:5e:1f:91:9f:53:fa:63:e8:
9e:c4:d6:cd:df:24:3b:1a:0d:cb:ee:18:a2:b4:39:
d8:4d:d4:8b:f8:63:c1:b7:30:08:e8:7c:5c:fc:0f:
82:31:f1:5d:97:83:e0:d4:b8:1e:29:5c:73:b0:1f:
79:e9:14:71:e4:0c:6f:ad:ef:a7:7f:7c:39:a9:ed:
13:f4:f2:6b:26:f4:77:9c:e8:e9:64:2c:94:b1:5b:
aa:15:6d:4c:fe:e9:da:88:26:1c:db:05:15:3d:61:
57:40:78:23:c0:3b:54:d1:09:8d:6d:1a:81:e2:a2:
2c:92:b1:71:2e:11:41:a2:2e:43:1a:0b:f1:92:08:
ec:7a:68:2b:ed:96:9d:a6:8a:1d:92:5e:4f:c7:ab:
5b:0a:0f:36:1c:a0:17:a4:10:c1:45:0b:aa:75:6d:
57:30:93:5a:b9:6c:92:2b:7d:13:03:42:7b:b7:70:
4a:40:95:4a:59:4f:a0:7d:a4:f0:c8:6a:70:85:e0:
be:80:df:73:68:f7:74:30:9d:e1:63:95:f3:89:07:
de:50:78:0d:4a:f9:b5:fc:db:df:dc:f0:e8:f5:89:
66:6a:50:56:f1:b7:ac:78:26:87:ba:18:e5:50:b6:
50:7b:6d:8b:ef:48:cc:81:0c:d3:a1:48:91:6c:2d:
36:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9F:76:84:AC:10:B6:CA:3F:BE:62:57:3E:AD:D0:FE:4B:71:D8:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K592hKwQtso_vmJXPq3Q_ktx2Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:4f:c8:3f:94:77:e1:0e:7e:8b:78:89:ea:99:e2:43:09:14:
aa:5a:9b:c9:f5:9f:ae:8a:b5:df:53:4e:44:4f:fa:97:40:c0:
2f:8b:f8:7c:d2:ad:9b:50:33:43:e3:63:f1:83:28:b2:4f:56:
d6:ac:6a:bf:b6:9b:15:56:e1:38:c6:34:59:3b:d7:7c:9f:56:
c0:4c:da:1d:39:54:74:8d:b6:5e:21:21:d1:63:2c:36:1d:cf:
7d:b7:2d:ac:2b:7f:88:14:34:b5:5a:83:30:e3:e3:fd:c6:6e:
20:66:2b:3f:89:74:ef:76:ec:37:0b:20:82:3f:b7:39:fc:6e:
40:5d:ad:96:2c:0c:6f:13:6d:3f:78:71:1a:f8:56:99:a6:1e:
d1:5d:81:af:dc:22:d2:8b:c0:bc:e2:7f:ba:48:ee:68:59:03:
05:11:39:60:f5:0a:d9:16:95:fa:a5:ad:fc:b6:1b:c3:e8:8a:
79:5c:8f:ef:38:d8:c7:28:26:fc:9f:b8:18:6d:b4:21:c1:e5:
d7:e6:55:87:87:64:4b:1e:c2:44:d2:a9:b1:e8:6c:17:ef:64:
8d:49:0a:8f:7e:82:e4:32:ad:bc:ec:7b:3b:2b:12:ee:f0:fa:
87:c7:19:d4:79:f9:42:10:e2:77:b0:e1:3a:97:4a:b4:66:1e:
3a:d4:e5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:15:39 2025 by rpki-client