Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KaerIiLsJSn9l3yNla4vpYPU1is.roa
File: KaerIiLsJSn9l3yNla4vpYPU1is.roa (raw, json)
Hash identifier: gUVwS8ZJ+F6PtqKp5aavu/1wBn8LZXrUiB0xFQFuqHE=
Subject key identifier: 29:A7:AB:22:22:EC:25:29:FD:97:7C:8D:95:AE:2F:A5:83:D4:D6:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855E6E8FDF68EBEE127A4C0F83C1904CE7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KaerIiLsJSn9l3yNla4vpYPU1is.roa
Signing time: Thu 29 Dec 2022 15:09:42 +0000
ROA not before: Thu 29 Dec 2022 15:09:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5e:6e:8f:df:68:eb:ee:12:7a:4c:0f:83:c1:90:4c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 15:09:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29a7ab2222ec2529fd977c8d95ae2fa583d4d62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:d9:0e:83:cf:cd:fa:31:be:91:81:8a:21:b6:
00:8b:f7:eb:e4:e9:07:bd:85:a9:ff:22:ff:b7:dc:
10:f9:e6:68:88:e7:0c:56:4c:8c:ab:8e:da:80:09:
af:65:6b:9f:fb:7b:0d:b6:eb:7a:03:3f:77:1a:6f:
70:17:22:52:d0:fa:34:8e:62:41:67:0f:45:f5:b7:
b6:e2:24:44:b1:7a:91:5e:74:f7:56:e7:db:b8:ed:
58:d2:26:d1:2c:80:3c:1b:96:60:06:a8:a7:d5:52:
3b:1e:61:ef:1b:53:49:2d:68:52:6c:0d:2b:8e:ba:
76:29:ed:f1:9d:d3:26:2b:22:ba:5e:37:4f:af:58:
74:a6:53:cc:85:e9:44:03:98:a2:d3:0b:a3:d1:d9:
45:9e:91:c4:72:94:a5:38:dd:bb:ad:91:cc:8c:9e:
d3:9b:a4:3c:22:34:22:e0:a2:b1:c9:55:49:74:6b:
38:a1:5b:ec:9a:0b:54:5f:9c:f8:6c:5f:47:69:1e:
70:83:2c:35:ff:43:a8:18:bc:1e:33:b9:7d:6f:04:
ae:75:14:d0:3d:65:db:2f:1e:1e:44:ca:e0:15:07:
98:d7:6e:58:01:25:45:a4:c3:99:ae:dc:bd:55:d8:
c6:97:d0:02:99:4a:57:74:56:7e:2b:fc:97:19:62:
63:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A7:AB:22:22:EC:25:29:FD:97:7C:8D:95:AE:2F:A5:83:D4:D6:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KaerIiLsJSn9l3yNla4vpYPU1is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:49:2d:67:2f:9f:0b:4d:56:03:4f:f9:32:c4:45:a2:4e:5d:
8d:f3:dc:e7:6a:5f:4f:0b:6a:30:5f:3f:5d:37:b9:1f:ed:f3:
7b:fa:6d:5c:1e:05:12:64:89:d1:2a:5a:6f:57:ff:f3:66:09:
f6:27:62:1f:2c:6f:cd:c1:e4:f1:e2:db:ed:48:75:ad:98:e9:
01:d6:bf:df:a4:22:bb:c7:e2:d6:44:a6:07:a2:d8:f3:dd:27:
52:92:0a:c9:24:61:e2:4a:4c:fe:e6:9f:cd:91:82:c7:7c:4d:
05:28:04:f4:c2:df:12:ae:0e:ad:5f:ff:e7:b6:4e:cd:e8:60:
0c:7d:d9:7b:33:32:8a:73:15:52:3c:b0:91:00:5d:78:2a:28:
a6:2c:92:40:1c:56:a9:5a:68:e0:6e:c2:29:f7:9c:f8:48:70:
f4:bb:aa:aa:11:26:3d:1d:1a:c6:18:3a:f9:be:be:54:75:55:
43:be:71:16:0e:00:ba:83:90:8c:bf:8c:58:4e:2f:bc:3c:c3:
29:f9:9d:d0:0a:c5:d3:e4:c1:5d:37:1f:84:02:e2:f8:9e:e6:
05:a0:49:31:98:0f:2b:d2:24:76:92:91:b4:20:cb:3b:77:14:
68:1c:32:ae:be:f6:af:fc:6c:ff:67:ec:cf:7c:32:3f:2f:c5:
31:58:fe:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:08:30 2025 by rpki-client