Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a8almQiiZWtRf7myWgv7lm8n_ks.roa
File: a8almQiiZWtRf7myWgv7lm8n_ks.roa (raw, json)
Hash identifier: 2vLzpKPkiGUEDpX0Lwbaj1aVCpZRHtMylkZkoFkobeU=
Subject key identifier: 6B:C6:A5:99:08:A2:65:6B:51:7F:B9:B2:5A:0B:FB:96:6F:27:FE:4B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186DAA556CA27DA9269A8A4AC5D6E1DF5DA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a8almQiiZWtRf7myWgv7lm8n_ks.roa
Signing time: Mon 13 Mar 2023 11:05:14 +0000
ROA not before: Mon 13 Mar 2023 11:05:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:186:daa4:7bb2/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:a5:56:ca:27:da:92:69:a8:a4:ac:5d:6e:1d:f5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 11:05:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bc6a59908a2656b517fb9b25a0bfb966f27fe4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:21:6e:d1:e9:97:ac:fa:1c:28:79:8b:7b:9a:
98:ed:0a:3c:18:27:b5:46:69:49:e5:57:68:59:e0:
f9:f4:e6:c4:a9:89:af:88:7c:75:0b:90:ba:13:54:
75:ee:fd:42:9c:a1:f5:01:62:65:7b:d9:ea:79:ec:
7f:05:25:19:7c:a8:17:07:2d:af:36:60:0c:2e:d3:
2b:d6:14:8b:e6:66:db:05:5e:96:bd:70:ce:e7:c5:
b1:76:95:aa:26:4b:f7:50:e5:f5:20:4b:93:c5:b5:
f4:76:13:c4:f6:a4:93:9b:da:bd:ec:00:b8:18:be:
26:65:b7:d3:b5:6f:e5:18:88:3e:bf:20:23:68:3c:
53:ef:e1:1f:5b:56:30:18:dc:35:41:cf:aa:0c:dd:
8b:23:8a:e2:cb:db:ef:5c:5a:71:94:f4:57:d5:b1:
9d:bb:93:84:b7:87:e4:02:7e:74:a3:52:7d:c3:8b:
ca:bd:10:a6:95:a7:95:6f:a6:3a:45:71:a8:77:70:
b2:ab:ea:79:96:4e:62:25:fa:b8:ed:a1:d8:55:c2:
0b:55:f4:cb:ea:77:89:95:ab:a6:e2:9e:7d:c2:86:
39:c5:3b:53:24:f8:72:91:f5:2a:ab:73:40:3f:ec:
ea:8d:05:4d:75:90:db:15:2e:8f:52:c5:f3:c7:e1:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C6:A5:99:08:A2:65:6B:51:7F:B9:B2:5A:0B:FB:96:6F:27:FE:4B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a8almQiiZWtRf7myWgv7lm8n_ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:ad:23:ec:2c:49:5b:0a:36:0e:f0:91:66:b0:57:5b:d3:ec:
c3:8a:e9:42:05:57:10:65:60:13:f7:76:fd:ac:7b:28:3a:fd:
06:ba:95:c7:26:01:a9:47:53:96:50:40:87:e9:0e:24:89:f7:
03:c7:3a:01:a6:52:07:e9:d9:fd:e0:b2:7c:d0:84:2f:b7:d5:
5d:16:a9:20:4a:ab:70:0d:d0:03:bb:14:dd:18:ef:91:02:e4:
19:78:39:69:1c:30:eb:4d:60:e0:1a:5e:85:73:3f:fa:cb:1c:
02:c6:74:d9:ec:84:23:ba:90:42:8d:a6:52:ad:c2:c4:76:b8:
8d:54:b6:be:5c:01:c2:ac:4b:9d:04:45:9c:31:9e:f9:94:61:
9d:5f:71:9d:b5:6a:2f:72:73:18:51:04:b2:d3:41:cd:9d:61:
8d:dd:0e:10:ec:15:39:a9:f3:23:4f:bb:11:cd:d9:0c:b8:da:
89:bf:d9:b3:d4:f8:e1:d9:64:91:9b:6f:3c:f4:ac:f2:01:d1:
75:ad:16:ba:17:ef:63:37:49:67:07:dd:d1:0e:48:34:18:da:
48:20:38:b7:a0:d0:23:47:2e:79:15:4f:20:5b:c5:3f:4d:8e:
c7:17:d5:94:32:cc:7e:d3:fa:4f:ee:27:9f:07:94:6b:eb:13:
05:c9:50:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:02:38 2025 by rpki-client