Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KpNcQ4iioGWPmIpnsXtnm6eqeVg.roa
File: KpNcQ4iioGWPmIpnsXtnm6eqeVg.roa (raw, json)
Hash identifier: FfbIHs9U7/OTL4Mq/myDrUrhIHBfHA8hP6nWYuA0ha4=
Subject key identifier: 2A:93:5C:43:88:A2:A0:65:8F:98:8A:67:B1:7B:67:9B:A7:AA:79:58
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A08840DAD7051D894781219CC447B0CC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KpNcQ4iioGWPmIpnsXtnm6eqeVg.roa
Signing time: Thu 02 Mar 2023 04:15:29 +0000
ROA not before: Thu 02 Mar 2023 04:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a0:88:40:da:d7:05:1d:89:47:81:21:9c:c4:47:b0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 04:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a935c4388a2a0658f988a67b17b679ba7aa7958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fc:52:d0:71:2f:00:36:84:49:10:ec:ed:9a:
84:17:61:9a:1d:18:8e:2c:e8:d1:e7:8f:9a:ba:23:
dc:cd:32:ec:50:9c:c7:e8:10:54:1d:ee:5a:20:18:
27:4f:84:21:93:73:bc:b3:bb:db:83:c3:86:37:64:
58:d9:80:64:e3:29:ed:3a:65:af:56:4f:21:f9:ee:
f9:aa:ad:ef:8e:1f:a9:0d:ca:ab:11:ba:f8:6c:2f:
d1:c1:32:42:e2:fa:3d:bb:82:87:71:12:bf:a1:7a:
a8:a8:57:88:33:e8:a0:ea:f0:d5:28:61:f0:e3:b5:
fb:da:b9:e7:43:9e:f3:2a:f0:44:32:ba:15:07:17:
45:97:b9:bd:08:05:53:92:10:7b:1e:91:7b:45:7b:
44:36:da:9b:5e:54:cb:6c:1f:c6:07:19:ef:10:43:
6b:f3:56:4c:0b:40:1e:ae:1e:9d:dc:25:eb:5a:9e:
46:94:ca:f3:a2:b2:bb:32:dd:48:4e:18:85:e4:05:
8e:66:24:69:8c:96:97:75:af:dd:50:48:ae:73:a9:
72:c0:0b:8a:11:33:5b:cd:8d:37:bc:1c:86:61:e9:
40:d1:d1:4b:e0:1b:fa:ec:2b:0e:9b:c7:fa:a8:ca:
8a:b2:71:1e:b6:61:09:d0:de:f9:a8:39:a2:b6:f9:
0e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:93:5C:43:88:A2:A0:65:8F:98:8A:67:B1:7B:67:9B:A7:AA:79:58
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KpNcQ4iioGWPmIpnsXtnm6eqeVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:3b:c0:f3:1a:e3:16:13:e0:6e:46:ed:f1:14:38:e7:e8:03:
58:c3:22:5c:d3:50:89:64:bf:2e:ac:db:f7:91:20:ae:7b:79:
35:4e:f3:c4:ec:5a:e2:87:f3:ed:b1:79:9a:27:9d:16:98:ff:
e0:c7:cb:ef:62:d1:81:4d:06:40:b3:4f:0a:e1:af:17:a8:aa:
84:44:bf:8d:90:18:5d:78:36:11:43:41:8c:59:c5:92:2e:d7:
5e:2d:14:16:51:56:59:cb:e0:80:e1:0d:b1:7c:9b:b4:71:c5:
8e:84:d9:93:d3:17:ea:eb:30:4c:99:37:fd:5d:db:f8:93:1c:
da:e6:74:4f:e2:c1:72:20:46:22:8a:3d:f3:6a:54:fd:d6:ee:
b3:02:4d:07:5b:bd:73:21:6c:a7:1b:3a:e8:19:76:e2:66:f5:
53:88:c2:49:12:17:53:64:f0:4b:d6:f5:5c:2d:c5:9d:9b:52:
e7:40:97:bf:58:26:d5:03:07:8b:80:4b:94:ec:bb:ff:f3:1c:
bd:0d:14:cb:fa:fc:ba:a8:14:af:7d:cc:9e:53:e3:dd:0d:ad:
78:4f:e6:7d:ac:92:e5:50:f6:0c:1e:22:4f:6e:e0:f1:a5:2f:
92:ec:65:fe:7c:32:13:5b:69:38:7f:63:70:48:03:fb:1f:0a:
0c:c7:fd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:52:56 2025 by rpki-client