Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kh5wY9-l0AgDMA0YGoNPdVq65pQ.roa
File: Kh5wY9-l0AgDMA0YGoNPdVq65pQ.roa (raw, json)
Hash identifier: wgO/9SE3tGGix8ibWbmr4V525qvuelHVkPBzvEmaH3s=
Subject key identifier: 2A:1E:70:63:DF:A5:D0:08:03:30:0D:18:1A:83:4F:75:5A:BA:E6:94
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A98AF28E9D65DE06A3365ED8D0A7A932
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kh5wY9-l0AgDMA0YGoNPdVq65pQ.roa
Signing time: Fri 03 Mar 2023 22:15:00 +0000
ROA not before: Fri 03 Mar 2023 22:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a9:8a:f2:8e:9d:65:de:06:a3:36:5e:d8:d0:a7:a9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 22:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a1e7063dfa5d00803300d181a834f755abae694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b0:96:1d:d3:75:af:1d:58:e1:7f:e0:cd:16:
88:32:b3:6e:63:48:ef:7e:f2:9b:22:6b:7d:bc:69:
e7:c4:fb:43:44:d3:c1:95:18:86:d0:db:b2:78:bc:
8b:51:9b:ee:5a:e6:52:f1:16:a3:a2:f3:59:94:9f:
72:e8:42:5d:be:a7:2d:82:b1:a5:e5:cc:4e:18:1e:
73:d0:27:68:01:2e:5b:51:ce:6e:ee:89:99:63:08:
c9:5c:26:04:aa:64:e6:d6:73:2f:65:0c:2f:44:f8:
cc:65:ca:1a:02:16:57:34:ba:bd:fd:c4:39:17:e1:
b3:82:1d:71:f3:b6:d7:57:66:99:e3:ff:6f:74:1b:
34:e6:a2:2e:cc:11:5f:a9:e5:ec:dd:75:9c:3c:cf:
f6:9f:2b:d0:15:dd:2d:a3:b1:de:8a:ff:49:25:a8:
d8:3b:fc:77:06:4a:11:86:60:5a:b0:4b:b8:5f:80:
f6:b8:2b:a0:53:22:6f:8a:14:b1:d8:eb:ab:a0:c3:
25:ee:91:08:c2:2c:ad:72:c3:58:6f:f8:37:08:b7:
f9:d9:31:4a:8a:9b:8c:a1:05:39:84:b5:a3:fe:27:
3f:2b:e9:5b:d5:d0:3f:29:fe:32:20:bf:bf:96:97:
87:86:63:e7:e2:c6:82:c8:e5:5c:36:ef:92:9a:7d:
b9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1E:70:63:DF:A5:D0:08:03:30:0D:18:1A:83:4F:75:5A:BA:E6:94
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kh5wY9-l0AgDMA0YGoNPdVq65pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:a0:a6:43:61:fd:65:05:a4:79:53:ff:6a:ea:c5:09:e2:e7:
c6:ff:91:a2:0e:d0:3f:dd:13:5c:78:b0:e2:30:5c:f6:04:3c:
96:01:95:dd:b7:a8:db:ce:7c:a1:6e:b5:8c:5a:d9:29:20:25:
c1:a8:95:45:88:f4:fc:d4:c0:90:2b:0b:ed:07:25:76:e6:0b:
ef:7e:c4:86:93:3d:a2:fd:de:b7:e3:cb:c7:86:e1:62:31:01:
9b:e3:6b:c2:9b:9e:80:c5:b7:77:85:f2:4e:35:a4:5e:d0:6b:
01:01:9e:5b:b4:06:04:d0:b6:cf:df:d4:5b:2e:dd:54:be:3d:
63:50:95:76:f9:65:61:d8:f5:4f:4e:e4:5d:b5:15:c9:c1:8c:
2b:45:9f:20:89:ed:71:26:2a:39:5b:84:40:1f:28:ff:39:ce:
75:ad:46:26:d6:77:bf:6f:b0:0c:1c:ac:23:a8:a5:d5:20:f6:
1c:6a:39:b3:ad:66:d4:36:d7:15:03:d5:68:f9:96:56:40:d6:
28:c3:fe:c6:6d:b7:19:c0:25:3d:95:42:6c:f5:f4:e0:a5:f7:
61:84:d4:30:2d:f5:36:8e:43:61:25:06:2b:42:99:41:fb:26:
53:04:40:0a:e6:86:d3:aa:1d:12:6b:a3:14:e3:e4:93:99:a9:
7f:1b:b4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:25:51 2025 by rpki-client