Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kkNEPEyNgyzyebxg1Mc2fN8jyUY.roa
File: kkNEPEyNgyzyebxg1Mc2fN8jyUY.roa (raw, json)
Hash identifier: 2QgsB7ZoAvAHnyMtN/sBrgPtSKl7mSPffW6oI4jDURQ=
Subject key identifier: 92:43:44:3C:4C:8D:83:2C:F2:79:BC:60:D4:C7:36:7C:DF:23:C9:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018574896DBFBF019F10CF2A72E7B9F5BC2D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kkNEPEyNgyzyebxg1Mc2fN8jyUY.roa
Signing time: Mon 02 Jan 2023 22:10:41 +0000
ROA not before: Mon 02 Jan 2023 22:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:74:89:6d:bf:bf:01:9f:10:cf:2a:72:e7:b9:f5:bc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 2 22:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9243443c4c8d832cf279bc60d4c7367cdf23c946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:e9:4b:39:f9:ed:27:90:85:5c:09:9f:16:
e3:67:f3:1c:ba:9b:a0:1f:37:43:45:e5:af:1a:d4:
05:de:0c:0f:5f:1d:6e:e7:2c:6c:13:00:dc:67:cb:
8e:8f:1f:a1:03:9f:66:13:b3:ef:f0:10:46:96:12:
b1:7b:d9:ea:eb:4c:e5:06:be:9f:c9:6a:40:11:ca:
a7:55:4d:f6:d7:97:cb:a4:df:4c:3e:96:66:90:82:
9f:73:30:06:d5:96:32:3c:d6:29:b4:f3:73:9c:ac:
2e:6b:1b:7b:4c:dc:54:c6:be:dd:2a:a9:86:e4:64:
28:b4:11:f4:c2:dd:8a:96:1a:0b:e7:5c:ba:5d:1f:
c1:e1:3a:66:a0:f7:cb:d5:dd:00:98:74:eb:df:16:
e7:90:7b:63:ce:ed:85:7b:85:85:17:62:1a:45:cd:
1b:a1:5f:99:be:4d:d7:57:9a:15:5a:0e:16:76:ce:
8b:e3:a5:35:f9:ab:06:84:8c:f8:e8:01:c4:fd:2a:
6e:5a:a1:6d:cb:c2:8a:4e:ce:d1:c3:4f:99:68:ed:
3c:4a:25:82:46:e3:28:fd:a7:82:62:b9:11:70:a9:
0d:19:bd:02:f2:94:e1:35:91:e1:8d:88:68:f1:ad:
26:00:c5:7e:8e:b0:2d:7c:bd:57:33:c4:34:9f:d2:
96:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:43:44:3C:4C:8D:83:2C:F2:79:BC:60:D4:C7:36:7C:DF:23:C9:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kkNEPEyNgyzyebxg1Mc2fN8jyUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:cd:a1:c7:b1:80:99:0e:89:b5:86:b7:f5:e7:5b:01:82:f9:
62:66:21:d5:e3:fb:8c:f5:e4:d3:57:73:c2:2b:9a:dc:bf:19:
12:7b:dc:72:9c:ff:0d:89:32:ae:f7:86:45:44:da:a7:29:e9:
83:c6:04:b8:60:5a:be:f9:2d:91:94:3d:12:14:c5:75:a7:fb:
da:b9:3b:4a:78:2b:05:21:68:6b:0c:d9:75:24:69:a4:ac:a0:
42:26:e0:eb:ef:b1:cb:84:cb:99:8d:e6:e4:51:bb:89:a5:be:
9e:0e:ed:c5:84:6e:c2:f7:e7:8b:3c:aa:14:22:de:b3:aa:9c:
38:d5:d0:20:8f:bd:e0:7b:06:10:9e:a0:2d:4d:ed:03:25:8f:
a3:2b:45:89:01:9f:40:15:7b:e3:2b:17:03:a0:60:fc:4b:8f:
00:7b:cd:c5:49:e5:ab:54:1d:1d:44:eb:03:c1:e2:f8:6a:26:
ad:09:55:78:a5:fc:53:ea:40:34:82:5f:aa:c8:de:6f:3d:8b:
b4:6e:9d:35:19:33:18:53:7f:b5:ca:e3:27:ec:36:90:61:ed:
85:b1:84:cf:e8:a7:b6:3f:44:93:a8:b1:9c:54:c1:40:11:bc:
61:ac:f0:a2:19:d7:f3:bc:32:36:1b:fc:e7:b9:01:7a:52:f8:
86:c3:66:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:23:23 2025 by rpki-client