Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KnufMDb_FYRasie0hEZ-uhAbdtk.roa
File: KnufMDb_FYRasie0hEZ-uhAbdtk.roa (raw, json)
Hash identifier: 2mQJpO36AEkskSOuVCo5/wxwTAuY5EBAWQ7+GtNmzTE=
Subject key identifier: 2A:7B:9F:30:36:FF:15:84:5A:B2:27:B4:84:46:7E:BA:10:1B:76:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018332B16686595ABA6783CF63F906058E2F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KnufMDb_FYRasie0hEZ-uhAbdtk.roa
Signing time: Mon 12 Sep 2022 17:13:50 +0000
ROA not before: Mon 12 Sep 2022 17:13:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:32:b1:66:86:59:5a:ba:67:83:cf:63:f9:06:05:8e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 12 17:13:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a7b9f3036ff15845ab227b484467eba101b76d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:60:12:9f:23:4d:52:ae:ad:96:19:25:4a:
d3:95:28:9a:08:4b:2c:fe:cf:54:7b:c7:a2:a2:44:
71:57:da:fc:ad:a2:47:fc:8d:85:f6:5e:8c:03:8d:
b8:8c:bb:a6:51:64:d3:25:43:3d:5f:64:ea:53:27:
e5:4d:9f:1a:a7:ef:6e:20:96:63:39:6f:2b:e0:ec:
de:cb:63:71:ca:c9:32:9a:7f:19:3a:c1:0b:cc:14:
77:bf:a9:df:37:e2:5d:73:12:26:92:cc:7f:bc:0c:
28:f2:87:71:fd:df:63:92:99:49:91:c3:c6:67:fa:
e5:71:d0:6f:96:4f:3c:e7:0a:14:fb:2c:dd:53:4e:
88:b7:ed:ff:fe:e8:3e:85:f9:d8:57:c6:19:82:d6:
66:64:3e:d8:2f:84:9a:2c:a5:bc:a8:b4:a6:3f:19:
86:b1:52:fb:28:41:c0:2a:09:93:23:cd:09:65:38:
34:b4:83:bb:aa:b4:6a:e8:1d:e0:13:34:75:1c:43:
e2:5c:37:4f:5e:2f:42:a1:f5:44:6c:9f:46:bd:0c:
55:ac:59:48:58:41:76:f4:a7:5b:ee:92:cb:ca:5a:
f9:a8:1e:92:b4:b4:3e:ca:48:ce:cd:43:8d:a1:0a:
9c:4b:5d:2e:38:42:3f:d6:85:1f:87:e8:f1:31:3a:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7B:9F:30:36:FF:15:84:5A:B2:27:B4:84:46:7E:BA:10:1B:76:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KnufMDb_FYRasie0hEZ-uhAbdtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:84:a2:eb:66:b8:8d:9e:07:c4:28:76:68:63:e9:b3:96:0d:
ce:2e:19:e0:b0:1c:e8:9c:37:20:af:06:a1:6e:f8:1c:76:1f:
0a:cc:93:95:37:f9:58:8a:99:57:99:28:e9:61:ea:26:b1:07:
1a:be:af:6b:bd:a2:6d:2a:3f:32:6a:28:74:7d:61:36:49:30:
49:b9:a6:66:f8:ab:f4:68:3c:94:10:72:76:dc:60:9b:46:d4:
ea:1b:8f:33:e5:31:eb:81:f3:4f:d9:58:f3:31:9b:fb:69:42:
97:32:dd:55:2a:df:7e:ed:7f:fc:6f:17:08:a0:5b:f6:7c:a4:
3a:ad:ce:07:e0:6a:04:c6:5b:dd:66:3a:eb:87:40:61:1c:40:
34:a5:80:6d:f8:6f:45:f0:ff:27:4d:c5:a8:b1:15:8c:f7:89:
4a:be:9d:cf:30:3b:63:52:12:a1:d2:f3:da:68:6b:ae:a8:b2:
73:3f:95:dc:27:49:67:7e:77:a0:f5:9c:3f:4d:e9:00:37:77:
97:10:f2:9e:db:35:dd:0d:ac:b6:db:e8:93:d3:cc:8d:a3:5c:
61:f0:c0:42:36:cd:cd:3b:81:4c:80:ec:47:23:b1:56:f6:e7:
b3:ce:9b:49:cc:e4:ca:3e:27:3a:6a:ab:15:00:3d:36:12:b7:
c6:6b:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:15:40 2025 by rpki-client