Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KDGH9bCp2LjMv6Ny8jkYS-8nUPE.roa
File: KDGH9bCp2LjMv6Ny8jkYS-8nUPE.roa (raw, json)
Hash identifier: O5yb4BlNiI/nHJKFf5fDtUVWfv/RXyLMwunnTq5A73A=
Subject key identifier: 28:31:87:F5:B0:A9:D8:B8:CC:BF:A3:72:F2:39:18:4B:EF:27:50:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FFC62EE9100878F34D16A376B0DA086C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KDGH9bCp2LjMv6Ny8jkYS-8nUPE.roa
Signing time: Wed 16 Aug 2023 19:15:25 +0000
ROA not before: Wed 16 Aug 2023 19:15:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ff:c6:2e:e9:10:08:78:f3:4d:16:a3:76:b0:da:08:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 19:15:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=283187f5b0a9d8b8ccbfa372f239184bef2750f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:19:3e:c6:17:b2:b8:30:c4:c4:6d:c6:76:
e6:23:49:31:c2:48:10:a1:0f:27:5f:70:bc:1d:ff:
39:f2:71:1a:4d:02:21:8a:15:5c:af:9a:53:3b:f3:
e5:84:fe:d9:f7:4f:32:40:8b:0e:51:3a:1e:ec:c3:
4c:fb:b3:b6:45:de:bb:8a:4b:2f:b2:e7:40:62:08:
5a:96:c0:7a:f0:bc:c6:6c:85:74:1e:06:46:02:dc:
e5:56:bd:5d:fc:a2:ab:c2:99:a0:f3:b7:9b:bc:64:
c9:04:e5:f0:b6:c0:ce:87:f8:2c:7b:5e:88:00:75:
93:a1:b8:db:73:c8:63:53:bf:e7:c2:07:3d:d0:09:
b2:e7:f3:6b:20:66:30:99:01:2a:29:5f:dc:a7:4f:
de:c2:5a:3b:56:75:f8:3f:13:c5:7b:09:07:2e:64:
e3:eb:b9:6c:7f:cd:f9:77:f9:8e:4e:fd:db:2f:d4:
17:5c:5e:fd:3c:38:d5:e2:c9:21:be:81:b4:d0:59:
56:4e:9b:43:f8:44:a6:9b:c7:01:63:18:72:ed:a2:
61:37:35:5d:0a:73:73:98:d1:32:df:15:d2:e1:e2:
17:e0:83:64:87:57:c1:af:34:fd:4a:2f:5a:c0:76:
05:2c:d1:15:e9:93:98:cb:d5:0d:92:63:f7:4c:21:
84:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:31:87:F5:B0:A9:D8:B8:CC:BF:A3:72:F2:39:18:4B:EF:27:50:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KDGH9bCp2LjMv6Ny8jkYS-8nUPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:08:be:0f:99:f2:0e:c8:3f:47:90:7a:71:1d:83:d3:5d:7c:
f2:38:d7:40:20:5f:e5:ad:f5:55:6c:9c:5b:2f:4e:cc:53:03:
3d:d8:78:ac:5d:95:f3:2f:c7:1e:5c:3b:ef:42:73:94:bf:88:
36:44:9d:b3:09:49:c7:d0:1a:dd:f3:49:b1:c6:b6:b4:27:39:
1a:36:2a:4f:a1:c4:f9:fb:e9:f5:90:0b:7f:3e:9a:de:bf:fd:
7d:e5:b7:8a:bb:d8:62:80:93:51:56:a3:2b:7d:e4:0c:ce:1f:
8f:ca:ac:e6:70:0d:90:fc:c0:3a:cd:fa:c5:6d:0a:0a:c4:1e:
d9:8a:c6:62:8f:24:d0:0f:8c:69:c7:2b:28:7f:b8:eb:db:cf:
24:ce:6f:b4:cd:cc:2a:88:28:5f:4c:58:fd:be:b9:ae:c0:a3:
75:b8:31:22:5e:34:6d:a2:2d:54:27:73:8d:04:26:d1:3a:6f:
4f:97:7c:58:db:83:dc:fb:f7:ed:dd:f5:27:d3:83:96:42:e8:
49:b7:01:2d:76:a1:91:ed:ed:7b:a5:0d:fb:4e:25:0a:a8:35:
4a:a9:77:67:94:74:f6:40:bc:7a:3b:ac:48:3b:3c:43:2b:e4:
4f:d1:f2:1d:1d:e2:89:cd:20:67:e0:3c:a7:e6:4c:cc:f4:a2:
38:f6:aa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:56:23 2025 by rpki-client