Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KrG2cg6uIlkjJokGo6QUcxKluoo.roa
File: KrG2cg6uIlkjJokGo6QUcxKluoo.roa (raw, json)
Hash identifier: WDooav4zjDYolUsFJErBN7LC1YkCku5o3bxgv+CHIEA=
Subject key identifier: 2A:B1:B6:72:0E:AE:22:59:23:26:89:06:A3:A4:14:73:12:A5:BA:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852E27ED514457DD8AEC20F4C7104AA0D8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KrG2cg6uIlkjJokGo6QUcxKluoo.roa
Signing time: Tue 20 Dec 2022 06:10:46 +0000
ROA not before: Tue 20 Dec 2022 06:10:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:27:ed:51:44:57:dd:8a:ec:20:f4:c7:10:4a:a0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 20 06:10:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ab1b6720eae225923268906a3a4147312a5ba8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:8d:23:00:b7:c6:8b:55:57:28:b6:27:07:
aa:fe:60:3f:88:b6:fc:51:8b:87:59:a0:e1:99:7b:
e2:84:7e:9b:2d:6a:2d:7b:bb:bd:29:ad:55:b0:92:
33:62:02:7f:28:1d:0c:f9:30:4d:17:fd:b5:f9:e2:
d9:47:89:39:15:43:07:7b:48:f0:fb:f3:09:e5:0a:
5e:54:66:0d:67:1d:ad:a2:94:1f:12:e0:ef:ba:cf:
2a:a6:32:d6:e5:53:e7:62:a3:96:8d:d4:13:f1:1d:
59:4a:a1:f5:18:34:86:4e:e7:a9:a9:83:f2:2f:13:
ee:9f:8b:51:b4:fe:05:20:ef:c0:db:61:a6:d9:d1:
37:e6:bd:10:b7:db:95:fa:64:91:d4:47:61:23:28:
2d:e6:56:39:22:7c:2e:7c:08:1f:20:2c:83:3c:6a:
f1:e8:9f:25:b4:fe:55:2f:25:49:26:24:69:98:12:
f2:94:ac:0f:d2:e6:04:cb:96:c3:65:41:71:f1:a6:
db:aa:8f:70:4d:d4:9e:38:5a:4d:19:55:3e:8a:c6:
bd:1f:1e:91:d9:65:11:ee:91:ed:df:51:3c:3a:aa:
c1:9b:43:6e:b6:b6:1a:b1:f7:5f:ca:3e:31:4d:1f:
3f:b0:a7:33:73:68:e8:0b:77:0a:0c:c5:87:28:ed:
dd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B1:B6:72:0E:AE:22:59:23:26:89:06:A3:A4:14:73:12:A5:BA:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KrG2cg6uIlkjJokGo6QUcxKluoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:9f:48:56:54:da:ef:8e:04:ba:82:ef:59:0e:31:b4:37:9c:
40:7c:f5:35:57:43:d2:08:9f:11:b7:51:15:95:93:0f:c9:ae:
20:ac:79:a7:88:1c:69:7d:14:ea:21:57:fd:16:01:0e:5c:82:
ff:c3:54:d0:33:25:65:c7:1e:f3:35:56:66:24:43:21:a2:4c:
31:49:02:ee:e8:d0:c7:2a:55:5f:52:f8:8c:b2:eb:ed:b3:7c:
23:f3:17:b3:78:0b:f9:97:35:ef:4d:71:86:f4:99:84:34:ca:
73:f9:c9:7c:d0:34:5e:9f:14:a8:ff:75:ce:1e:b8:e3:43:fc:
27:ff:8d:5f:a5:ff:b6:54:28:fa:18:2d:0b:ec:72:4c:e3:c3:
e5:d2:71:c5:de:d9:48:d5:65:7b:1a:12:9a:71:17:dd:85:b6:
b5:3a:db:da:9e:1e:24:b9:33:6b:2b:1d:38:a0:7c:ca:d3:4c:
80:c1:92:3f:2a:02:94:0e:b3:90:3f:55:16:86:cd:80:eb:24:
3a:0f:be:d0:fb:fe:4b:d4:d6:a6:4a:1f:a5:26:77:e9:0f:79:
05:9e:b9:64:2c:7c:2b:62:3c:8a:14:36:29:8f:1e:70:af:74:
86:bd:81:b7:73:9f:fc:10:5b:fc:a4:d3:72:b7:33:45:82:e5:
4f:61:a6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:58:23 2025 by rpki-client