Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kr4caNnGNZlGBKcmlAJDKYcVryw.roa
File: kr4caNnGNZlGBKcmlAJDKYcVryw.roa (raw, json)
Hash identifier: Xk/0ENA1FVuP1cc8wv317KMlmj4LL4MFrSALnmzm5dE=
Subject key identifier: 92:BE:1C:68:D9:C6:35:99:46:04:A7:26:94:02:43:29:87:15:AF:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01825C8D0A9F3F51002DCC3D8F10DF0910C5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kr4caNnGNZlGBKcmlAJDKYcVryw.roa
Signing time: Tue 02 Aug 2022 03:15:23 +0000
ROA not before: Tue 02 Aug 2022 03:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5c:8d:0a:9f:3f:51:00:2d:cc:3d:8f:10:df:09:10:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 03:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92be1c68d9c635994604a726940243298715af2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:76:60:1e:aa:1a:c2:a3:df:e5:a1:50:77:30:
cf:a7:fa:31:66:87:f4:ab:d7:2b:ac:bb:9c:99:32:
af:3f:7b:ce:24:2e:bd:47:2e:87:e1:4f:ff:10:1b:
38:92:61:33:8d:94:71:8b:4f:29:d4:5d:00:7d:47:
b8:95:4e:99:3e:85:e7:71:4a:d6:94:09:db:af:91:
d1:5c:bb:8c:e4:34:9e:60:5e:08:79:6b:8a:cf:df:
26:42:4b:79:1a:1e:e8:ed:a5:8a:9d:85:61:4c:a5:
25:82:61:0f:fd:a1:20:59:fd:7c:99:d3:53:13:ae:
f2:2e:fe:5f:01:36:9e:10:7b:93:51:b1:c8:06:e1:
16:26:1a:45:b5:72:ce:92:50:ad:5c:4a:ba:03:45:
d0:55:54:82:5e:cc:fc:c5:f0:9b:ab:04:08:fa:49:
a0:57:75:43:cd:2a:2d:ea:f2:3f:39:32:fd:85:62:
2e:5d:87:9f:93:6a:a2:cf:87:76:9a:0f:b9:d5:23:
64:fb:a9:47:fa:03:ca:36:80:a6:26:a5:b3:13:bf:
bc:a1:61:8b:6e:a9:f3:09:38:eb:f1:ca:c8:c7:a6:
56:76:92:0d:f0:6d:e1:4f:0a:a6:e0:e1:b5:61:56:
05:e5:f3:9c:9b:7d:01:56:00:a9:40:51:24:65:a3:
ed:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BE:1C:68:D9:C6:35:99:46:04:A7:26:94:02:43:29:87:15:AF:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kr4caNnGNZlGBKcmlAJDKYcVryw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:99:44:5a:c5:77:c8:3f:aa:64:cc:71:e6:a1:d0:08:a4:be:
f6:3b:89:8c:06:8d:04:d5:4e:f1:f8:83:d8:85:8d:af:d5:5a:
ff:37:36:b0:c4:43:cb:60:bd:dd:e7:05:1a:2e:68:94:80:ac:
1e:56:00:34:9e:64:f2:69:04:cf:a2:c1:e5:26:50:de:f5:4b:
dc:ec:21:5c:5c:64:9a:e7:38:b4:58:61:8f:7c:8c:7a:f9:64:
82:6e:9e:19:a3:43:2c:26:ea:8a:70:74:46:98:24:8f:7e:25:
45:64:5e:c1:32:ae:5e:3f:c9:18:72:e4:cc:c0:d6:79:80:f6:
2e:dd:0e:22:9f:5b:64:e0:af:5a:43:32:56:9f:73:6f:1a:ef:
2b:33:0f:96:55:c4:57:03:1e:0a:15:ea:b4:b4:1b:ac:fb:dd:
f7:4e:a1:99:bc:01:23:47:ca:87:31:f7:f7:d9:80:af:f3:d4:
8b:dd:d8:a3:87:ef:ed:90:29:50:10:32:d4:a9:40:6f:22:a5:
db:df:6d:29:ca:6b:f9:88:10:ab:b1:9e:36:f7:90:a3:08:b5:
64:09:d7:7b:aa:aa:47:fd:05:5d:fb:94:fb:21:0c:ba:a8:74:
fc:c9:21:be:d0:42:1b:91:fe:6d:40:9b:68:2f:b3:e2:d2:46:
72:8e:1a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:07:11 2025 by rpki-client