Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kldGLU-p35frIZzRjNbrgT48tAA.roa
File: kldGLU-p35frIZzRjNbrgT48tAA.roa (raw, json)
Hash identifier: 3WbaxmWfBr5GRhBJyvjerjVYmGjw4umKU+DWIt0wriI=
Subject key identifier: 92:57:46:2D:4F:A9:DF:97:EB:21:9C:D1:8C:D6:EB:81:3E:3C:B4:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185635D14E4501F6128AB003BCEE383F5E3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kldGLU-p35frIZzRjNbrgT48tAA.roa
Signing time: Fri 30 Dec 2022 14:08:42 +0000
ROA not before: Fri 30 Dec 2022 14:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:63:5d:14:e4:50:1f:61:28:ab:00:3b:ce:e3:83:f5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 30 14:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9257462d4fa9df97eb219cd18cd6eb813e3cb400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:91:a9:79:bd:5a:0d:08:40:91:dc:b8:1d:06:
54:63:2c:53:ad:4e:8f:64:17:56:11:dc:69:1a:02:
c5:eb:f8:0a:3d:6c:9f:e9:24:9f:07:af:06:ee:4c:
75:d9:44:1a:1a:e5:7a:94:8a:2e:c6:63:4a:88:ce:
d0:b3:a7:52:b3:8d:e4:60:a1:3a:df:e9:7d:f5:9f:
41:f6:df:67:10:c7:a5:9c:82:2a:ec:09:d8:2d:df:
93:66:57:c1:3c:27:23:96:96:43:37:6b:89:8c:2f:
cd:86:95:77:7a:1e:94:75:37:22:0f:9d:b8:94:cd:
5f:51:7e:d3:79:f7:16:88:25:1d:29:03:5f:03:b0:
41:a3:22:bf:31:7c:7f:3a:fd:a9:bc:0a:ba:73:c5:
65:cf:e7:95:c3:08:1e:6d:89:5a:9f:ca:5f:ea:25:
78:85:d4:d6:ce:80:35:96:e3:1d:3a:7f:80:ed:8c:
4b:f9:72:b9:2a:35:f3:42:33:9d:10:20:04:e3:86:
be:13:26:3a:ea:20:f3:c4:28:08:db:72:b7:6c:f9:
97:ce:4c:e5:a4:a7:00:b5:1f:c3:3d:32:84:2d:94:
18:4c:16:f3:ea:50:71:8e:39:37:aa:05:f0:dd:81:
1e:ae:cc:9d:b9:80:d6:81:76:81:4b:f1:e5:c2:eb:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:57:46:2D:4F:A9:DF:97:EB:21:9C:D1:8C:D6:EB:81:3E:3C:B4:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kldGLU-p35frIZzRjNbrgT48tAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b6:02:23:92:07:5c:d4:41:f3:3d:85:91:78:93:03:fa:ef:6d:
cf:be:13:c5:58:fe:1e:51:1c:a0:ad:38:52:6b:89:5f:35:4e:
c1:6b:40:ba:e9:18:62:6f:08:1f:7e:3f:23:77:b1:d1:7c:2f:
c3:68:e3:24:c3:95:67:4e:12:00:7e:12:aa:a3:bb:5d:aa:93:
21:8b:41:b7:55:62:dc:fb:46:d4:73:c9:12:1a:17:d4:1f:f6:
c8:d6:7f:27:83:10:05:c8:57:b7:68:4a:11:39:7f:49:81:a1:
c4:08:0f:a6:2b:5d:0c:de:05:68:d4:14:01:80:94:21:65:59:
a9:d0:dd:68:f8:c9:0c:03:e0:9c:72:06:e5:c6:c7:1c:04:de:
3d:60:e2:4e:0e:37:b3:1a:a3:15:00:a4:1f:5a:2a:5f:17:76:
ed:12:a2:f8:f9:c5:47:fc:c5:17:54:ba:a7:0d:b6:f5:a1:00:
22:17:a7:e3:8a:1d:36:ae:f2:fa:cf:64:22:51:f6:08:43:ac:
37:c8:10:39:cf:77:9b:5c:98:8b:57:d1:2c:13:12:d7:7f:ed:
e2:32:e5:17:f2:d7:4d:80:0c:98:0e:1a:4a:24:ea:34:1c:3b:
b8:12:90:82:f3:f9:5f:b3:28:be:28:7d:51:51:a3:23:42:10:
76:84:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:16:47 2025 by rpki-client