Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kpiNi9S-HSH0dezV2KMO0t9EPy4.roa
File: kpiNi9S-HSH0dezV2KMO0t9EPy4.roa (raw, json)
Hash identifier: +5k3FAgLgZGoJ636nU02PjKtFYd9ComrXlRt4u6/g0o=
Subject key identifier: 92:98:8D:8B:D4:BE:1D:21:F4:75:EC:D5:D8:A3:0E:D2:DF:44:3F:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6CE6949B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kpiNi9S-HSH0dezV2KMO0t9EPy4.roa
Signing time: Wed 23 Feb 2022 01:24:30 +0000
ROA not before: Wed 23 Feb 2022 01:24:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1827050651 (0x6ce6949b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 01:24:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92988d8bd4be1d21f475ecd5d8a30ed2df443f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:92:da:1b:4f:c6:1d:1e:f4:72:75:a0:2d:
e4:96:21:31:3f:89:d8:b3:a6:78:fd:4d:0a:24:44:
cc:42:bf:dd:c8:44:71:e0:83:6f:6c:91:d4:a4:34:
c4:0b:58:41:64:5d:01:ff:a8:b6:d4:0f:b0:80:29:
14:c2:55:35:d7:3a:93:f3:eb:8d:31:18:8e:f4:88:
44:59:87:72:83:0e:2f:b5:a9:01:e6:9e:d9:77:c5:
36:57:2b:49:63:66:c5:32:1e:b9:e7:51:77:fd:6d:
97:d9:7d:f9:0c:de:d2:af:70:90:03:2c:33:66:a4:
84:c3:18:1f:2d:4b:63:30:e9:ee:90:26:92:f7:19:
8e:0d:32:e8:b2:5d:2b:f3:5e:c1:48:9c:1c:fe:1f:
7f:70:a9:48:55:bd:48:5d:6a:51:60:01:22:a3:12:
e2:38:80:79:48:f7:3a:a9:84:df:33:97:ca:92:07:
6e:d1:85:6f:e0:d0:a2:da:3c:e8:26:ba:a9:83:b4:
65:0d:6f:a0:54:1d:90:16:5a:f0:63:8e:12:97:04:
8a:f3:22:86:74:f5:1c:7d:b1:a9:98:9d:8f:af:38:
43:0a:91:f8:8d:ac:cc:2a:a5:00:e1:0f:5e:2f:d5:
a1:5c:85:50:91:e6:23:81:b7:17:97:bd:8c:28:c9:
0d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:98:8D:8B:D4:BE:1D:21:F4:75:EC:D5:D8:A3:0E:D2:DF:44:3F:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kpiNi9S-HSH0dezV2KMO0t9EPy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:52:43:9e:dc:80:8c:ba:d2:67:ce:24:37:88:8b:56:bf:5c:
34:49:5d:fd:cd:df:b5:0f:89:46:e0:96:ee:78:a8:a8:9d:5c:
86:44:45:7c:79:3b:b7:03:70:5d:4e:a1:d1:3f:cd:a2:a8:15:
64:30:a9:21:01:b5:cd:3b:fe:61:04:61:70:35:6a:49:f6:a2:
9d:e7:65:e6:b3:49:f8:44:8b:ef:50:3d:85:a7:ca:b9:17:31:
c8:d7:f7:43:3a:fc:29:81:a2:be:bb:dd:63:5d:31:f0:97:20:
57:f3:b3:e4:3c:03:39:ea:54:44:6e:e8:15:0c:14:7b:75:77:
a6:7d:bc:34:41:c1:40:9f:01:e3:88:5d:e2:6e:c0:24:06:40:
c1:0a:f3:7e:a9:37:d7:ac:b1:59:b3:df:e0:9c:41:08:3d:a3:
a9:1d:b2:33:62:e5:0c:0c:91:ba:78:18:94:8c:5a:31:2f:ce:
ba:07:19:49:e2:7d:ee:d1:56:d4:85:52:89:d3:8e:43:ed:e0:
a2:b8:42:75:49:86:b1:82:99:d0:2f:bb:01:61:03:01:fd:9b:
81:90:59:11:3a:74:10:3c:66:d3:d9:9d:b9:51:18:fc:bc:84:
de:7c:3d:8b:07:43:6d:7c:c4:76:b5:b6:3b:10:31:30:90:70:
02:71:76:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:14:00 2025 by rpki-client