Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KPkYUZNPX_EazrcfYSJ0FC-L3N4.roa
File: KPkYUZNPX_EazrcfYSJ0FC-L3N4.roa (raw, json)
Hash identifier: d4MQPeWBtmwMvpU78a+irlOlYnkyUUUmwM6uvr7LzXo=
Subject key identifier: 28:F9:18:51:93:4F:5F:F1:1A:CE:B7:1F:61:22:74:14:2F:8B:DC:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 771A65F0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KPkYUZNPX_EazrcfYSJ0FC-L3N4.roa
Signing time: Thu 31 Mar 2022 02:10:59 +0000
ROA not before: Thu 31 Mar 2022 02:10:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1998218736 (0x771a65f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 31 02:10:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28f91851934f5ff11aceb71f612274142f8bdcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cc:7a:e4:73:b7:d5:48:cc:50:28:a1:83:54:
d5:7a:79:ad:e2:34:6a:9a:23:07:e0:98:35:49:08:
17:fe:6e:87:81:5b:74:00:25:3e:e1:99:64:3a:da:
8b:2c:01:68:a4:c9:c8:33:c7:84:28:e7:c3:2a:d1:
d1:6c:25:3d:f8:be:8a:1a:57:e5:da:47:64:77:34:
c8:56:75:1c:ee:04:db:5d:be:8f:68:85:29:09:cb:
46:2e:4d:ea:5d:35:b8:6d:07:c3:d5:d4:49:10:3f:
3d:bc:f8:0c:ee:d2:75:b4:f6:75:c0:7a:e6:9e:f6:
3a:82:5d:f8:df:ee:b4:e1:96:b8:e7:a6:32:c7:3b:
e7:b0:bf:66:a0:08:e8:5a:ae:c1:97:06:d6:e2:78:
e8:a2:2a:3a:31:6a:3a:43:17:53:04:43:44:5d:ab:
7b:e3:e7:ef:19:e4:c9:5f:b4:8a:82:3b:92:bc:dd:
05:71:df:d8:e8:ec:4c:00:8f:c6:40:7f:9b:2e:e3:
01:ef:23:7d:93:dc:e8:6a:0d:c7:42:2d:22:7e:fa:
6a:c5:1c:15:f2:db:95:a9:be:e5:0b:34:d0:6b:cf:
69:d5:ac:25:d2:c5:f5:f9:32:88:58:ff:d1:78:19:
91:40:a5:a6:b7:a8:92:39:37:a8:14:cd:1f:5d:a3:
33:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F9:18:51:93:4F:5F:F1:1A:CE:B7:1F:61:22:74:14:2F:8B:DC:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KPkYUZNPX_EazrcfYSJ0FC-L3N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:2b:fe:3f:d3:71:51:c8:dd:11:4d:2b:a1:0b:73:7d:b9:5e:
61:d0:0f:6c:1f:dc:c7:3c:cc:b2:56:7d:64:60:19:b8:5d:ab:
36:84:03:b4:7b:f7:67:d3:33:99:9f:f3:6a:4a:b5:27:dc:e9:
19:d5:60:b3:fc:84:82:85:40:76:22:90:79:22:b0:b6:f6:46:
22:55:41:ad:b7:7e:78:ee:3b:58:de:da:95:77:7b:82:80:42:
77:00:af:e2:52:df:fa:1e:54:b7:1d:54:6a:69:5c:40:bb:ea:
a0:8a:8e:07:ac:b4:27:63:64:d8:ec:9a:5c:d6:90:e0:21:34:
c7:bc:da:7e:93:cd:ba:19:e4:fd:52:5e:2d:be:5e:3d:54:a9:
9c:e0:aa:00:67:28:26:06:f1:87:0b:05:6d:58:12:f9:23:82:
fe:08:10:6e:36:74:74:06:46:3f:eb:e4:d8:e2:4c:10:f1:f1:
7b:c6:da:62:79:30:65:2f:e9:38:bc:d8:b1:ec:0a:ab:38:37:
83:2b:eb:b2:35:1d:f5:4d:78:cc:27:c5:ed:06:5f:c0:37:b6:
84:51:13:a0:e1:ea:55:7a:a1:20:0e:fa:6a:8d:58:dd:b1:b2:
24:c5:7e:ad:84:23:b4:3c:a9:76:d0:f0:a1:90:99:05:2b:c6:
ce:13:3e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:32:50 2025 by rpki-client