Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/krNox7I6ORzP31Pe3g4RENKVEjY.roa
File: krNox7I6ORzP31Pe3g4RENKVEjY.roa (raw, json)
Hash identifier: d01mfkNuD9TskzVwqczoa2paiFh6Krx+ooYik/DYzA0=
Subject key identifier: 92:B3:68:C7:B2:3A:39:1C:CF:DF:53:DE:DE:0E:11:10:D2:95:12:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01877BCFFEE3118457D0D807B93DB68FD607
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/krNox7I6ORzP31Pe3g4RENKVEjY.roa
Signing time: Thu 13 Apr 2023 18:10:41 +0000
ROA not before: Thu 13 Apr 2023 18:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:cf:fe:e3:11:84:57:d0:d8:07:b9:3d:b6:8f:d6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 18:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92b368c7b23a391ccfdf53dede0e1110d2951236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:99:d7:37:6f:8d:f7:a5:1e:ca:87:0e:cd:
de:90:fb:b9:9a:82:f3:8f:1f:6c:15:d9:2d:6e:21:
b2:cd:62:19:40:c8:64:35:7a:3e:79:2a:13:18:25:
52:8c:58:c1:12:74:a2:21:e0:0d:ff:ba:bc:67:20:
d5:d6:59:55:14:f9:08:fc:ca:60:16:2f:1e:1a:05:
e0:bf:b0:88:d9:51:23:78:e6:0c:23:88:14:68:57:
24:e4:b0:d0:70:7c:e1:43:a5:5b:68:b7:5a:38:dc:
ae:69:1a:2a:92:ee:98:d4:9b:6d:ca:77:da:89:e7:
a0:d8:6d:88:08:a8:1a:06:2b:b0:70:60:a5:3a:58:
6b:ab:b2:12:f9:66:d1:7c:00:01:86:58:92:f2:90:
0b:a8:b5:b8:f0:70:a3:b8:8e:79:92:4e:cb:e2:34:
6b:8d:34:a1:97:43:9d:f9:ee:92:06:2a:01:aa:7b:
34:95:d3:1e:1e:df:cb:63:9d:58:ff:59:8d:34:ac:
98:ef:de:31:b7:0b:f1:23:c6:92:0e:6e:49:65:b9:
cf:63:fb:6f:a1:dd:63:4c:0e:01:55:5e:86:b7:c6:
85:ee:8b:ae:f5:d8:84:5a:e5:cb:ea:44:47:06:6a:
09:7a:07:52:63:2c:f9:4a:44:9c:47:cd:f5:30:f2:
ba:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B3:68:C7:B2:3A:39:1C:CF:DF:53:DE:DE:0E:11:10:D2:95:12:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/krNox7I6ORzP31Pe3g4RENKVEjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:dd:00:8b:85:88:d5:4d:09:a3:57:e8:41:b8:7f:6b:10:51:
d1:23:e4:9f:97:7e:bb:c4:33:0f:5a:6c:74:10:1e:c3:ee:f5:
a0:2e:7d:c9:2f:9c:74:44:9d:4c:34:49:39:d4:2b:fa:6b:a3:
03:87:75:f0:7b:27:11:69:d7:05:a7:4b:92:3a:75:e0:9f:34:
f9:1a:da:95:eb:2b:e3:ce:26:b2:99:38:ea:63:6d:18:05:f8:
1f:c6:c4:20:a1:d7:d1:f2:96:6c:34:42:c3:47:32:a1:79:c6:
cc:6b:18:8e:08:cf:c5:ad:19:09:5f:0a:65:05:e1:3a:f5:f8:
25:08:0c:1b:4e:22:c9:54:73:18:9c:f2:e4:cc:38:16:a7:66:
6e:9b:fb:ab:74:af:8c:b8:f7:a0:ed:7f:b6:f3:61:5b:21:3b:
bb:14:03:d5:3c:b8:9c:a2:ce:69:8b:e9:58:f5:56:6b:1e:8f:
81:79:d0:9a:ec:d8:55:19:ae:e4:c4:7b:83:91:a9:ca:e1:66:
a9:86:52:1c:4a:23:14:da:36:b5:90:74:fa:b1:b5:71:32:65:
aa:fa:dc:04:de:16:a9:fe:bd:36:da:d4:9f:ae:5d:75:ee:f7:
78:f8:d0:b0:8d:f2:04:08:8e:86:ec:ff:e9:2a:3b:06:e9:4c:
24:00:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:44:59 2025 by rpki-client