Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KLmeOnNh59vevqi-dODVuknvsuM.roa
File: KLmeOnNh59vevqi-dODVuknvsuM.roa (raw, json)
Hash identifier: 9TK0XcO1dHF9VjpiibNZciAnFxqkEGD3CH9Hu7Gcbno=
Subject key identifier: 28:B9:9E:3A:73:61:E7:DB:DE:BE:A8:BE:74:E0:D5:BA:49:EF:B2:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BD3F2008C2D8197070EF9FFAB4A168B4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KLmeOnNh59vevqi-dODVuknvsuM.roa
Signing time: Thu 03 Aug 2023 21:12:58 +0000
ROA not before: Thu 03 Aug 2023 21:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bd:3f:20:08:c2:d8:19:70:70:ef:9f:fa:b4:a1:68:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 21:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28b99e3a7361e7dbdebea8be74e0d5ba49efb2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:3b:8e:29:40:24:cc:c3:88:b6:26:fe:77:
74:0b:71:83:16:6d:1b:73:b0:c9:5d:ea:48:c2:d6:
d3:47:07:d4:bc:8e:77:c8:eb:28:88:6e:79:ee:38:
8a:5e:2d:fe:90:d3:a0:90:1c:70:e4:3d:5a:5b:27:
71:bf:fa:9f:aa:f1:a2:24:8c:e2:f8:bc:de:f0:0a:
59:aa:db:ec:50:48:d4:18:1f:b4:da:f7:67:e1:09:
43:16:1a:ab:7c:8a:81:7b:12:28:93:70:53:db:ab:
76:fc:27:62:e9:04:0b:ff:2a:28:89:a3:54:28:7d:
a1:af:88:5c:b4:55:82:8f:94:64:9a:cf:e3:1d:cd:
81:67:96:a5:26:0d:8e:86:1c:d3:78:9c:12:7f:8f:
7b:00:13:ef:ad:17:fb:6e:cc:1b:b9:aa:a2:fa:af:
b3:19:89:30:f1:b3:60:76:e9:fb:97:12:55:46:ae:
1b:ef:3b:36:3a:83:dc:99:ec:f0:7d:92:9b:2e:0e:
fa:87:43:82:4f:4b:f2:3c:7f:5f:23:c5:fc:8a:6c:
cd:10:ae:20:28:90:54:e2:3d:1d:e9:94:39:34:d7:
a2:7a:a5:d6:20:f6:86:9d:de:b9:37:dd:65:c9:03:
99:58:e2:27:df:dd:b0:82:08:95:cd:1e:a5:1f:90:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B9:9E:3A:73:61:E7:DB:DE:BE:A8:BE:74:E0:D5:BA:49:EF:B2:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KLmeOnNh59vevqi-dODVuknvsuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:f1:79:fd:83:d2:70:f5:a8:6f:e0:41:f7:64:19:b6:40:29:
be:2a:cb:67:94:45:47:6a:98:d5:11:d1:1f:6b:d3:27:a2:53:
4e:68:0d:16:4f:47:4d:00:08:54:6e:e7:f5:f8:b2:40:19:a8:
24:95:ed:ee:99:e7:d6:35:87:08:3e:dc:c8:d3:5e:f8:c9:d5:
98:5e:79:dc:cf:e7:5c:bb:5f:91:95:3d:17:17:a5:20:5f:26:
47:61:88:65:74:99:17:f2:70:82:de:3a:cb:be:f4:14:10:6b:
d5:39:de:66:3f:3c:44:0e:4e:42:df:0f:88:45:85:81:e0:c3:
6b:57:a5:09:95:d1:c6:56:57:0c:a6:fa:33:67:01:ec:49:24:
94:b5:33:10:d2:7b:3a:66:ea:fb:86:49:5c:5b:fc:d5:82:8c:
f5:6d:85:d2:0f:ac:ba:e8:7a:21:98:87:b4:fc:d7:e0:10:82:
77:a2:54:e2:57:7c:4b:02:00:d0:85:ee:45:f2:1e:1f:5d:e0:
dc:6b:d1:41:51:80:94:66:54:73:98:44:26:cc:36:ed:f9:fb:
90:05:60:e5:61:ee:ed:03:d9:33:68:25:9c:d2:b1:44:7a:d4:
b1:14:1e:77:90:73:fd:53:e6:98:42:26:03:74:ed:44:cd:c4:
34:39:2a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:20:56 2025 by rpki-client