Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kRHkYE5S3GavDYRdpb9_uz4xPVE.roa
File: kRHkYE5S3GavDYRdpb9_uz4xPVE.roa (raw, json)
Hash identifier: gL0+ZE6ddxoEACfWWV/KE9WFldGgRNhx+th5JNFdu6s=
Subject key identifier: 91:11:E4:60:4E:52:DC:66:AF:0D:84:5D:A5:BF:7F:BB:3E:31:3D:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184FD72A87C894416025ABC4F7360CC83FA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kRHkYE5S3GavDYRdpb9_uz4xPVE.roa
Signing time: Sat 10 Dec 2022 19:11:00 +0000
ROA not before: Sat 10 Dec 2022 19:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fd:72:a8:7c:89:44:16:02:5a:bc:4f:73:60:cc:83:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 10 19:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9111e4604e52dc66af0d845da5bf7fbb3e313d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:6b:39:65:1f:14:93:00:ef:6c:dd:8c:e4:
05:cc:6e:ed:ac:48:a3:f1:55:b5:0b:00:d3:db:eb:
71:0b:9e:b2:0e:cc:cc:29:2e:63:9c:b9:52:9d:e1:
d1:7c:3a:82:17:5f:7d:de:71:b5:f3:9b:4c:56:ca:
b0:37:a3:a9:0a:08:53:1b:9c:f0:c4:84:53:e8:ab:
7a:e8:89:32:1f:c7:ac:f9:f0:04:e6:3e:c7:98:1c:
db:9c:9e:e4:a5:c3:7f:81:ed:be:1b:39:c2:27:f0:
15:4b:5c:3b:b4:cf:da:bf:51:1f:7a:4b:7f:39:c4:
52:e5:b3:61:73:ef:17:56:e7:aa:50:04:72:b7:d2:
2a:d5:1a:82:2b:0b:80:ea:43:d4:e1:bc:7a:42:1b:
90:44:06:ec:4f:a2:62:c4:9f:74:41:67:60:a5:04:
3b:83:72:70:f5:77:ee:02:c4:2c:63:7b:a1:a7:5c:
fb:a6:85:0d:af:ea:36:2d:30:72:12:49:f3:78:ff:
0d:47:3e:07:e5:3d:a9:a6:71:45:50:31:e9:ee:7a:
36:35:c6:ed:f9:f1:2f:40:3d:37:28:aa:8b:c3:81:
04:13:98:b7:9a:b8:bd:cc:b7:9b:18:5e:64:d8:88:
15:8e:19:fd:d7:a8:3f:a1:10:8b:8c:2e:d6:16:48:
3f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:11:E4:60:4E:52:DC:66:AF:0D:84:5D:A5:BF:7F:BB:3E:31:3D:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kRHkYE5S3GavDYRdpb9_uz4xPVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:59:56:68:cb:8b:aa:71:f3:b4:0e:4d:42:88:7d:e2:0a:b3:
29:62:02:f0:9f:77:bb:8b:1c:aa:81:ff:e1:f2:b8:19:3b:84:
01:56:3f:94:e0:ec:d0:3a:cd:f7:45:cc:a9:f2:26:db:ba:bd:
6b:69:94:db:a5:23:92:11:cb:54:80:66:b3:69:09:34:10:32:
54:ac:77:72:18:f3:15:1f:bc:58:ba:d3:28:e6:cf:5d:37:cc:
98:f1:7f:90:bb:b6:2f:f2:6c:75:aa:b7:e6:26:81:6c:d6:56:
13:d1:28:24:9b:a9:d4:75:6f:52:08:ac:06:13:77:37:50:77:
f6:ba:6e:02:02:79:ad:87:f6:98:d5:23:d8:83:38:4e:25:66:
0e:72:c1:27:c6:4d:9d:8e:ac:7a:f1:84:79:0c:3d:44:c2:5b:
07:a0:7b:8a:64:94:c0:6f:4c:f4:fe:35:c4:fc:47:69:00:43:
03:90:80:cc:0a:58:81:8d:1d:c2:eb:8e:c3:3f:53:f2:a3:9a:
8e:71:5b:a0:51:57:8b:cd:74:53:6b:1f:a4:d4:70:e2:c8:8c:
5a:1c:51:e6:c4:e9:81:ea:a9:7d:1e:d5:ef:2d:f6:b3:a2:3b:
aa:15:82:94:d0:7c:47:04:79:21:6d:da:b0:f0:33:6f:e5:58:
cf:3d:de:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:14:11 2025 by rpki-client