Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KlY-BywuqgQDinUDgTCbgnK_984.roa
File: KlY-BywuqgQDinUDgTCbgnK_984.roa (raw, json)
Hash identifier: FDTgJDF/zZ6bzw2IbCIsSaDq3xrPTOWQ6pP1IOE702M=
Subject key identifier: 2A:56:3E:07:2C:2E:AA:04:03:8A:75:03:81:30:9B:82:72:BF:F7:CE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01844E91354D408A9D164783EF075C5AFAFF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KlY-BywuqgQDinUDgTCbgnK_984.roa
Signing time: Sun 06 Nov 2022 20:10:49 +0000
ROA not before: Sun 06 Nov 2022 20:10:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:4e:91:35:4d:40:8a:9d:16:47:83:ef:07:5c:5a:fa:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 6 20:10:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a563e072c2eaa04038a750381309b8272bff7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ac:e8:5f:77:b7:26:c5:4c:9c:8e:54:97:61:
37:ed:a4:01:63:be:94:b7:ce:fe:d5:bb:5d:6f:71:
b0:9d:b8:84:41:80:b6:ba:27:38:77:a7:ab:4f:0e:
7c:56:5e:95:68:11:15:06:09:e9:5f:06:8b:24:cd:
b2:04:f4:1c:db:ee:05:9a:be:f8:6c:bb:59:99:17:
84:bd:aa:6a:23:2f:ef:a3:1c:91:6b:98:fe:9e:48:
30:41:36:e5:05:f8:58:fe:6d:e9:7c:24:02:1c:54:
b4:4e:2b:33:dd:32:3d:bf:1b:a2:a8:97:ea:79:28:
fe:f1:6d:d5:26:e9:eb:e7:a2:be:b3:fa:97:b7:50:
10:8a:a9:95:29:33:57:d0:67:cc:5a:ac:3a:79:f1:
35:89:ca:25:5e:41:2e:a0:b3:05:68:9d:5e:47:09:
85:aa:99:d4:0a:49:22:7e:1c:4d:d7:fe:a4:bc:af:
38:a1:61:2e:a9:7a:00:c3:bd:d6:11:9a:a8:6d:49:
f0:a7:65:8d:e6:71:73:81:cd:73:8c:92:9b:55:ca:
2f:72:2d:78:f7:bc:9b:da:cc:41:f8:7d:99:a9:10:
b4:ad:34:72:da:81:4a:f2:a2:60:9a:c3:a7:e0:dc:
95:07:81:80:f2:f3:99:3d:e7:b4:39:cf:15:18:42:
8f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:56:3E:07:2C:2E:AA:04:03:8A:75:03:81:30:9B:82:72:BF:F7:CE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KlY-BywuqgQDinUDgTCbgnK_984.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:d8:12:3b:3f:17:53:c9:08:4c:13:4d:ca:b3:eb:e2:d6:d7:
c6:de:fe:67:57:6c:65:90:b2:7c:eb:ca:0c:2e:3d:18:e5:4a:
f7:d9:d4:cc:c1:ea:15:2b:a0:93:19:b9:fb:61:26:3f:a4:29:
5b:ff:0e:3a:e5:30:f0:d7:a6:48:0d:07:a3:1e:67:f1:2f:f2:
33:96:ad:e8:75:75:39:fe:30:d8:6a:43:db:88:9b:b6:1a:5c:
fe:0b:06:8d:ed:f5:95:f5:4c:ba:c0:3b:a7:01:93:1c:e9:3e:
60:41:e3:be:6b:af:9d:f5:05:dc:39:1c:8f:ce:b3:f6:81:1a:
7e:04:74:0c:40:dd:6a:ef:03:d1:cc:3b:fe:04:a6:17:45:ce:
38:7f:22:88:d4:49:7c:43:63:ac:27:df:9a:98:91:6e:9f:f5:
95:40:8d:fc:72:2b:a5:d1:71:69:91:48:27:55:af:01:2f:15:
24:63:37:85:fc:30:f1:5e:47:a9:32:b8:cc:d4:fb:2b:83:a4:
4f:ef:91:0c:d0:ce:c3:55:a3:bd:cf:c9:43:1b:8a:46:af:2a:
57:9c:f8:3e:36:9f:c6:11:32:e8:db:3a:4b:14:6a:73:d7:b3:
6c:b7:3a:9b:8e:55:55:76:c3:80:e4:28:2f:4d:ac:90:36:2e:
80:ae:7d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:07:52 2025 by rpki-client