Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kPc-uGEOYwsiEu850qzz9-Z95sA.roa
File: kPc-uGEOYwsiEu850qzz9-Z95sA.roa (raw, json)
Hash identifier: 1u1h+i45bMxjAHOIlcOAJ0E6FOe/KX4kU556vfDeIl8=
Subject key identifier: 90:F7:3E:B8:61:0E:63:0B:22:12:EF:39:D2:AC:F3:F7:E6:7D:E6:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183D9743AF406DCE86C9D3E9939092017BA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kPc-uGEOYwsiEu850qzz9-Z95sA.roa
Signing time: Sat 15 Oct 2022 02:23:36 +0000
ROA not before: Sat 15 Oct 2022 02:23:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d9:74:3a:f4:06:dc:e8:6c:9d:3e:99:39:09:20:17:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 15 02:23:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90f73eb8610e630b2212ef39d2acf3f7e67de6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b7:78:c4:73:8a:7f:0e:32:13:05:e6:4d:56:
73:b6:fa:a5:2e:47:7d:53:26:cf:9a:cf:57:5d:24:
8f:74:b1:54:94:52:a1:3f:c3:25:3e:fb:e7:33:91:
34:9f:5e:26:d1:af:03:4e:83:73:a9:1d:d9:56:85:
59:c1:45:55:34:4b:1d:61:31:59:37:b4:5e:e1:d5:
0f:28:8c:84:20:67:26:2e:f7:da:da:2d:72:a7:b8:
a4:c4:50:ca:53:ea:2b:a0:6e:75:6f:a7:b0:d9:08:
ab:eb:f1:58:0f:56:b7:93:02:3c:51:f5:d6:84:c1:
48:d2:fa:ab:20:a2:8a:20:95:22:32:a8:94:bd:14:
2b:d8:3f:b8:d1:fc:d7:a5:da:be:8b:e4:11:93:af:
14:24:ad:00:ff:9d:41:32:18:9f:9a:47:55:9f:b8:
34:39:c8:86:55:be:1f:1b:05:59:75:54:13:5a:52:
2c:5a:f2:04:98:40:3d:7f:c6:be:48:3c:e2:da:19:
36:26:1e:6a:9c:73:c9:dd:27:eb:b7:a4:41:2f:b5:
db:e4:7c:46:9a:6d:b7:bb:79:eb:a5:2d:84:bf:af:
1b:da:47:73:07:a8:52:0c:66:bf:99:15:23:57:5f:
3c:31:2b:a1:86:68:9d:e2:58:8e:6d:a4:4d:b3:f5:
14:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F7:3E:B8:61:0E:63:0B:22:12:EF:39:D2:AC:F3:F7:E6:7D:E6:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kPc-uGEOYwsiEu850qzz9-Z95sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:d6:62:fc:70:4a:34:11:a1:14:6b:d4:3d:ac:b2:63:58:07:
42:dc:6e:47:db:38:0c:3f:3c:aa:7e:7c:74:2d:42:bb:84:72:
e9:6e:7c:41:ca:43:85:4e:5c:12:95:17:df:66:40:21:12:02:
e8:ff:29:4f:da:f6:ea:f9:43:58:66:55:46:c8:49:81:2f:95:
e6:0b:79:d2:a8:ce:b3:b5:60:8f:1e:ab:cb:72:31:ad:6e:c7:
17:1b:e2:c2:7a:41:e0:a0:eb:75:d2:f3:ee:f7:d2:a7:29:a1:
90:58:fa:33:ab:1d:15:8b:32:f4:e3:83:81:7d:68:6b:32:11:
0c:87:12:5f:47:fa:de:7b:08:da:88:07:e9:d3:0b:28:92:49:
d8:7e:12:91:a4:d3:9f:4c:09:75:11:d6:f1:d6:d6:7a:e8:22:
a8:9b:03:52:9f:42:40:df:a6:8e:9c:f7:73:67:45:1e:8a:b7:
bf:a5:58:4b:2c:89:4c:f9:58:0a:33:95:94:58:50:fc:b8:50:
ef:28:86:13:85:c6:6e:49:96:39:4b:6d:bf:57:b7:c9:e5:07:
69:74:9a:f8:22:6b:30:22:8f:10:f4:7e:db:88:0d:80:67:7c:
5a:45:66:b5:1d:ff:30:2b:ee:3f:c5:29:13:9f:e6:f6:ce:f9:
f5:6a:77:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:03:45 2025 by rpki-client