Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kstv3Px9GD9HEbtXy2g_x2gzhSI.roa
File: Kstv3Px9GD9HEbtXy2g_x2gzhSI.roa (raw, json)
Hash identifier: fuUDiVhUbk1hZ/xgSEXfCm+eLQBdOFzlQppcmX1GTLI=
Subject key identifier: 2A:CB:6F:DC:FC:7D:18:3F:47:11:BB:57:CB:68:3F:C7:68:33:85:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018733F2ACD21648692A60260AEEA16DF899
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kstv3Px9GD9HEbtXy2g_x2gzhSI.roa
Signing time: Thu 30 Mar 2023 19:15:54 +0000
ROA not before: Thu 30 Mar 2023 19:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:33:f2:ac:d2:16:48:69:2a:60:26:0a:ee:a1:6d:f8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 19:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2acb6fdcfc7d183f4711bb57cb683fc768338522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:90:86:d0:27:83:96:ac:01:b2:97:f0:44:cb:
f0:0b:f9:a0:90:2e:be:f2:46:b1:0c:44:e6:d6:1c:
3b:0f:94:b0:d3:8b:71:13:8b:49:d2:c7:09:31:0c:
27:c9:14:44:17:95:dd:64:89:38:31:89:01:d5:67:
e8:b0:7f:1e:a4:06:ef:b1:0d:89:7e:4f:12:b1:b2:
95:64:6c:e5:17:1d:f3:7d:36:21:3e:6c:6d:5f:00:
43:87:d9:16:4c:25:aa:e0:87:60:41:bb:02:c8:4a:
ea:5b:27:95:43:c4:9d:aa:22:c6:a1:00:64:2f:4d:
45:1b:42:f1:33:ef:0a:05:c5:c0:54:5d:00:a9:d5:
5e:d8:1c:8b:48:7a:cd:8a:85:34:42:f8:74:13:a3:
67:38:62:dd:c6:dd:01:84:22:69:a6:3f:fe:6a:aa:
d8:cc:ca:db:49:cb:3a:df:81:a1:62:70:f5:f1:1b:
0c:da:2e:7c:40:e3:8e:a4:31:f8:0a:9c:98:50:1b:
b9:fb:bb:fc:7c:41:c6:af:c1:95:ab:03:03:16:7a:
cb:cf:3a:e4:1f:8d:c6:ce:64:b0:05:0a:88:22:4d:
56:25:bb:a2:8d:a7:18:72:20:de:75:f8:77:fa:ee:
5b:ce:b4:91:ec:d9:eb:72:5e:fe:5c:57:4b:3d:32:
47:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CB:6F:DC:FC:7D:18:3F:47:11:BB:57:CB:68:3F:C7:68:33:85:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kstv3Px9GD9HEbtXy2g_x2gzhSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:1d:81:47:e4:4a:4b:e0:62:34:49:a1:ba:35:67:b2:c5:7b:
4d:60:c9:57:6e:e1:2d:2f:c4:93:6e:ae:ea:11:4b:c2:c0:df:
93:8a:cc:6c:c6:ac:bb:37:9d:de:5b:fe:a3:67:6a:37:a1:3f:
d8:48:27:c8:db:77:27:65:62:fa:4c:ef:87:00:9e:d9:69:63:
cb:86:89:b2:b3:05:96:a4:7a:cc:a5:6b:ac:9b:13:d6:cf:e7:
ea:d0:84:70:f3:5c:50:ae:78:31:a8:57:3a:02:ce:d9:fc:d5:
ca:34:da:4e:8a:ab:40:2e:bb:fe:af:dc:5a:d9:33:9e:e9:b8:
31:11:b6:55:dd:09:02:ab:35:6a:e0:d1:33:91:8a:33:2c:73:
1f:d8:0e:19:8d:b8:13:2d:22:d4:3c:91:2d:2d:c8:e6:d2:d5:
bb:93:1e:45:13:37:14:2e:3e:85:21:f4:2a:a3:03:58:b6:bd:
56:4f:cf:b0:49:f6:8c:4a:cd:fd:ad:0c:f8:9b:c5:f2:9a:fd:
d9:57:87:b8:89:78:9b:ee:5a:7b:a2:44:19:3e:a6:23:8d:93:
e4:ea:4f:d1:59:67:dd:20:64:5b:aa:44:2f:05:79:a5:5a:a6:
bf:ae:a1:a9:0a:22:7d:81:0c:17:43:de:36:2f:e5:83:72:7c:
67:f9:a8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:20:29 2025 by rpki-client