Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KWdiuTKUslZkxfeUA4zG8zCDMLk.roa
File: KWdiuTKUslZkxfeUA4zG8zCDMLk.roa (raw, json)
Hash identifier: pNvPuOAJNEv2HgxAF398LPu6kDkGzA3BK15Hkgv6trM=
Subject key identifier: 29:67:62:B9:32:94:B2:56:64:C5:F7:94:03:8C:C6:F3:30:83:30:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 71989F34
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KWdiuTKUslZkxfeUA4zG8zCDMLk.roa
Signing time: Fri 11 Mar 2022 12:04:52 +0000
ROA not before: Fri 11 Mar 2022 12:04:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:78de:af7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1905827636 (0x71989f34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 12:04:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=296762b93294b25664c5f794038cc6f3308330b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:21:a9:ca:52:ce:92:a6:f4:ae:bb:6f:16:
16:ed:32:08:c4:43:7e:6d:c7:f5:7f:57:7f:d8:0f:
65:b9:89:9b:05:11:5a:2d:10:13:e8:60:0f:4d:60:
44:eb:27:07:3e:19:86:d6:6b:d0:c9:45:d0:a1:9a:
ce:15:11:89:3e:16:c6:ae:d0:c4:4f:9d:04:70:16:
ea:bb:cb:b1:d6:44:cf:2d:7f:60:2f:b1:88:55:00:
44:2a:38:46:d0:1e:42:20:2b:74:24:9b:64:b8:76:
08:e6:a2:55:85:05:5e:38:30:56:68:ac:a7:a7:71:
d4:6a:86:3f:65:17:54:25:9b:97:d8:46:8d:65:3d:
45:4b:e8:35:c2:6f:0d:64:75:7a:6c:72:a4:5a:df:
c3:73:93:bd:3b:3a:05:4c:67:cd:a5:a3:26:12:13:
b3:ea:9f:74:62:7f:1d:d6:20:c6:79:71:02:20:e8:
e5:98:41:ed:e8:5d:41:76:3a:f0:96:08:92:d7:72:
10:2d:b0:b7:a3:58:9d:28:54:fc:33:c7:34:0a:6e:
bd:3f:2b:2b:83:66:9b:83:f7:b6:10:ee:c0:61:1f:
ba:a7:44:10:33:26:30:87:22:4d:c2:02:87:bb:db:
fe:79:98:9a:95:e7:42:70:da:a3:1c:b4:7c:15:82:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:67:62:B9:32:94:B2:56:64:C5:F7:94:03:8C:C6:F3:30:83:30:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KWdiuTKUslZkxfeUA4zG8zCDMLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:2d:09:d9:5d:ae:b0:1c:d6:e3:20:60:b1:18:ce:fc:ca:65:
ee:b6:96:78:02:27:cd:2b:db:1b:b2:cf:3c:6b:16:78:5a:3d:
4a:31:1c:4b:02:98:59:bb:c3:03:4a:87:0d:7f:6b:6b:20:76:
19:5d:6e:eb:aa:a7:36:db:05:aa:47:5d:d0:c6:93:b4:39:13:
66:33:35:0d:3c:5c:f5:0e:ab:db:e4:50:73:d2:81:26:58:03:
53:e2:4b:39:bf:56:99:3a:91:8b:ac:4c:6b:da:11:af:88:89:
88:99:2d:ad:ca:62:5e:fb:59:94:97:ac:0b:f1:24:a3:22:43:
b0:88:39:98:f1:2e:01:37:99:3f:91:32:d4:eb:b2:b5:8d:68:
63:77:15:3a:a3:45:9a:2f:5a:76:eb:89:8d:3d:60:06:0b:49:
6f:a5:55:3e:16:da:98:e8:71:55:30:0a:50:a2:f4:f9:ae:09:
34:a7:7e:6d:85:94:14:da:26:6c:04:3a:a1:d6:c2:ae:dc:63:
41:b8:5b:c8:f4:8a:68:db:29:09:f6:ce:2f:46:2e:89:cc:04:
e7:c1:e8:04:68:f5:d2:03:84:ee:62:97:cc:f1:40:25:03:04:
f7:8c:cc:63:4b:c8:0b:99:5d:21:b2:73:16:1b:8b:88:ca:cc:
02:5d:c6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:33 2025 by rpki-client