Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/klNPtJC3SPWdoRYnDLkJbDdHifg.roa
File: klNPtJC3SPWdoRYnDLkJbDdHifg.roa (raw, json)
Hash identifier: IwJIsjN+Q7AMzYrHv7QZJhEX/HtP+f1RwKUSOT+kJBY=
Subject key identifier: 92:53:4F:B4:90:B7:48:F5:9D:A1:16:27:0C:B9:09:6C:37:47:89:F8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 80C25B60
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/klNPtJC3SPWdoRYnDLkJbDdHifg.roa
Signing time: Tue 03 May 2022 13:12:32 +0000
ROA not before: Tue 03 May 2022 13:12:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2160221024 (0x80c25b60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 13:12:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92534fb490b748f59da116270cb9096c374789f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a8:19:e3:42:8f:a5:5a:e2:21:73:79:c9:26:
97:a3:83:b2:5e:11:39:79:1c:cc:69:ed:cc:9a:a0:
c4:ca:9c:5e:47:01:ca:36:13:98:d3:00:35:53:36:
35:c7:7b:96:df:e2:16:df:fb:27:c2:ff:5e:01:a0:
4d:a7:49:d1:fd:16:bb:cc:f6:bc:90:59:ec:2d:71:
d3:f7:42:a7:f5:b9:3c:8f:60:50:ce:d0:88:00:aa:
72:89:74:d8:9a:2d:4b:1d:b4:9c:33:3b:b8:e1:7c:
a6:47:3e:bb:e6:27:4b:f6:9c:c1:73:bc:a9:9d:07:
1e:77:ab:5d:a1:d2:8e:15:e0:7f:ca:a6:13:90:1d:
02:b6:6f:1f:83:42:79:a5:75:3c:9d:b9:58:7d:52:
08:6e:02:20:03:2a:21:a5:ec:98:f9:6f:fa:fb:f2:
1c:a9:36:c6:c0:f7:25:11:16:7c:fe:cd:67:6e:4d:
1f:e4:77:42:3d:a8:1a:38:2a:e1:ea:2a:06:89:66:
db:80:1f:3a:33:a7:43:89:d4:3a:f9:12:e9:bc:d2:
a5:d7:23:b9:e0:e2:fe:3f:c8:a8:11:ae:e1:09:c5:
c2:5c:d0:8e:68:e9:5a:9a:91:d8:e0:c4:0b:71:d3:
7d:36:25:74:9f:9c:b5:6c:da:76:3e:1c:c3:4b:5c:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:53:4F:B4:90:B7:48:F5:9D:A1:16:27:0C:B9:09:6C:37:47:89:F8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/klNPtJC3SPWdoRYnDLkJbDdHifg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:0e:78:0a:57:a5:18:0e:0e:aa:5d:0f:2b:3c:64:d7:20:ec:
a6:d6:0d:0a:c8:61:ab:1d:74:e2:dd:32:9a:83:55:b2:12:2e:
4e:98:1e:38:99:d7:60:dd:a3:c8:7f:e2:aa:43:93:2c:6c:52:
17:a9:a7:b3:a5:23:01:63:97:7f:69:0a:ee:e4:de:d3:c7:c7:
79:45:91:c1:d4:ef:95:a8:cb:68:0b:44:8e:a8:b4:aa:a3:dc:
27:d1:c3:60:5e:ca:ba:06:67:60:2d:ee:29:fc:d3:ba:00:12:
10:71:0e:0f:ed:19:86:a5:ac:e4:01:ec:9f:12:69:d6:1c:61:
6a:e6:33:17:dd:23:ea:1a:aa:30:c4:23:08:85:08:5c:d8:0d:
66:d1:a7:16:d5:ad:0c:5a:be:92:63:1c:a0:9e:1c:65:64:92:
34:ea:93:7e:f8:46:d9:c9:de:0c:67:dd:ce:a7:08:87:72:f4:
b2:e0:7d:12:34:20:7a:5f:c1:9d:43:71:cd:6c:76:ad:48:6a:
3b:2d:69:2a:59:56:fe:6e:31:4a:de:af:eb:98:79:4a:1c:e1:
c4:f0:f1:5a:fc:55:d1:36:c5:b5:78:71:11:a2:85:20:38:00:
96:b1:03:d6:99:1b:b9:f1:49:46:a8:50:6f:a9:5e:5f:06:7b:
f2:c4:10:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:11:45 2025 by rpki-client