Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kswl2uI6XDP8kUc-fYPbeLwuziQ.roa
File: Kswl2uI6XDP8kUc-fYPbeLwuziQ.roa (raw, json)
Hash identifier: gb1mfx3FxiRiCCBZeKaIxtsM7gI7JJNfUzNHULz8l2c=
Subject key identifier: 2A:CC:25:DA:E2:3A:5C:33:FC:91:47:3E:7D:83:DB:78:BC:2E:CE:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182DF00D33290586DF2C4405BB81CB6A222
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kswl2uI6XDP8kUc-fYPbeLwuziQ.roa
Signing time: Sat 27 Aug 2022 11:12:29 +0000
ROA not before: Sat 27 Aug 2022 11:12:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:df:00:d3:32:90:58:6d:f2:c4:40:5b:b8:1c:b6:a2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 11:12:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2acc25dae23a5c33fc91473e7d83db78bc2ece24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5d:f5:07:8a:5e:50:25:0a:4a:bc:49:7c:2d:
ab:c0:1a:09:48:32:8a:ee:bf:ac:12:b4:d6:1a:e6:
33:ca:2c:1d:fe:a1:47:a8:3b:14:13:90:d4:19:04:
e8:88:44:a1:29:0b:06:23:cc:0a:c3:64:a8:d2:d9:
9c:c3:76:29:02:c4:e1:84:33:33:e1:9f:e7:bd:77:
9a:8a:79:76:ff:98:c9:95:11:a4:7b:00:c6:1d:83:
e7:af:be:99:e1:80:5f:7a:af:c4:cf:6b:54:38:3d:
81:17:f1:78:a2:ca:7a:54:d0:a2:55:c6:23:e1:d0:
06:5e:3d:23:59:5b:ff:80:d8:61:a6:1b:9b:61:4c:
39:c8:b2:8e:85:26:02:39:97:78:dd:71:b2:12:13:
09:40:70:c2:24:46:36:4e:10:6d:a8:e2:38:94:5b:
80:23:85:e3:e2:36:75:7e:df:19:aa:03:bd:8f:8d:
e3:d7:81:4c:ec:d3:cf:3e:3a:9d:35:0d:ae:ec:80:
c3:9a:09:88:e3:20:88:6c:6a:93:1e:06:48:43:ec:
f8:f7:50:6f:02:49:74:d8:36:f2:e9:86:f0:fa:ff:
67:59:86:e3:99:ca:95:cc:77:f2:63:b9:f8:53:87:
e0:d5:d9:5f:cd:55:b5:66:84:e5:51:66:ad:2d:64:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CC:25:DA:E2:3A:5C:33:FC:91:47:3E:7D:83:DB:78:BC:2E:CE:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kswl2uI6XDP8kUc-fYPbeLwuziQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:9b:da:a8:73:2c:f5:0a:2f:88:10:e1:2f:b7:18:46:06:27:
03:c6:47:a2:b7:86:ee:7f:2b:5b:3e:45:91:92:42:0f:03:c2:
3a:7f:cf:8d:c5:d5:f6:ab:b6:ff:12:44:7d:77:9f:53:09:4a:
52:b9:8b:11:96:98:56:ef:d2:2e:0c:d1:75:b4:7f:e5:f5:32:
d2:9e:83:27:c7:3a:fb:de:04:f1:4e:a7:c1:50:e8:90:9c:83:
50:5c:d0:50:00:80:b0:52:fb:23:02:34:46:d5:f9:df:bd:fe:
3e:34:09:ad:d8:26:c1:6b:69:d3:f6:fe:04:33:d2:8c:53:ee:
0b:f6:c0:e7:81:c5:fa:9d:0f:e5:0b:57:2c:85:20:1b:e5:a1:
f2:f2:50:7b:0f:3a:52:74:28:41:01:5e:f2:1b:df:7d:ff:bd:
96:6c:b5:e1:eb:8c:e6:a3:f9:c2:d6:64:d2:fc:ea:6b:e8:dc:
36:a3:8c:55:30:e6:8f:0c:f1:fb:e5:c3:7b:fc:1f:eb:96:4c:
09:48:25:d1:ee:06:d4:72:57:8c:c5:c1:a7:f3:3a:57:89:f1:
e6:aa:87:49:99:c9:9c:c8:1f:82:21:9b:e4:ad:33:b4:61:11:
82:d3:eb:06:2a:43:85:1a:a5:46:90:0a:46:b0:13:b3:32:12:
1f:5c:dd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:21:26 2025 by rpki-client