Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ksOKkiJuLXA-VKU9iZix59n2HxA.roa
File: ksOKkiJuLXA-VKU9iZix59n2HxA.roa (raw, json)
Hash identifier: 2xEdNtEiH+Ue7RItYHIUPjDO7tuYvz7qppoc4HW0OtY=
Subject key identifier: 92:C3:8A:92:22:6E:2D:70:3E:54:A5:3D:89:98:B1:E7:D9:F6:1F:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851B7E8681379D9C9477451E521EB85DDA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ksOKkiJuLXA-VKU9iZix59n2HxA.roa
Signing time: Fri 16 Dec 2022 15:12:34 +0000
ROA not before: Fri 16 Dec 2022 15:12:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:7e:86:81:37:9d:9c:94:77:45:1e:52:1e:b8:5d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 15:12:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92c38a92226e2d703e54a53d8998b1e7d9f61f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cc:e6:8f:41:9f:9b:0c:e8:89:7f:66:71:08:
48:55:19:62:22:32:4e:df:19:8c:e5:64:ea:61:de:
c6:71:e8:86:6a:ed:78:70:12:5b:86:97:fa:21:21:
dc:86:c5:59:bf:09:a5:34:5f:17:13:b4:68:16:be:
1f:91:ed:55:07:19:a3:f1:cc:91:f1:94:82:ed:6b:
fd:50:7d:90:08:17:19:a4:32:65:71:7e:68:56:9f:
db:83:22:de:93:17:03:52:0d:8c:4a:35:61:a4:33:
b0:9b:23:6c:91:1d:c9:34:08:e2:d7:f3:05:53:8a:
fb:e8:eb:df:49:13:83:7e:98:50:c4:5e:cd:a8:66:
f3:d2:82:da:12:1f:8b:72:a7:98:ae:e5:32:c1:f9:
fc:6f:c7:1d:42:7f:af:cd:8a:12:cb:3f:9e:24:fc:
13:35:67:d8:32:00:d1:17:54:b7:e3:3f:d7:17:d6:
de:fe:22:5e:d6:b9:76:40:a4:64:70:21:23:7b:72:
54:97:b6:58:98:20:84:dc:a3:11:dd:96:ae:99:83:
22:c8:15:ca:4f:45:99:be:c7:99:fa:78:6e:99:05:
f3:2d:66:28:c9:bc:f9:0c:e2:57:5a:6a:4d:3e:b2:
27:ca:d7:29:50:69:3b:8b:d2:9c:18:90:3d:21:8b:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C3:8A:92:22:6E:2D:70:3E:54:A5:3D:89:98:B1:E7:D9:F6:1F:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ksOKkiJuLXA-VKU9iZix59n2HxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:16:d0:9c:9b:07:05:b7:4d:1d:74:dd:1e:fa:e0:52:bd:5b:
69:20:67:f0:bb:d2:b5:23:00:a9:e3:16:3f:e6:e1:d6:6c:10:
4a:f9:55:23:94:2b:c7:58:9a:90:3f:f1:bb:fe:ae:de:b7:37:
57:88:3a:18:8a:ba:8c:b5:0e:dc:ca:98:08:e3:81:1a:f1:68:
30:a1:6b:53:38:23:26:f0:96:5c:40:db:29:b8:e7:50:e6:fa:
0e:54:24:69:43:cc:73:18:83:18:82:8b:26:09:30:7d:7a:8a:
d3:84:58:0b:f1:7a:e1:7b:34:4a:d0:73:a1:95:47:a1:93:aa:
34:b8:b5:75:8d:1e:86:0d:8b:9b:d1:a8:2b:67:d3:94:1f:d3:
ab:5e:5c:99:c0:f4:e6:86:aa:57:75:24:b0:ea:b1:89:a1:72:
5c:6c:04:22:ad:18:c9:26:52:96:38:21:99:36:7f:0b:e0:07:
ae:05:26:e4:ce:b9:d2:da:d5:7a:97:99:97:70:59:d3:e6:02:
51:c6:82:20:d6:ae:15:bb:cf:4a:1e:38:29:e7:14:67:00:42:
7c:21:bc:28:09:af:cf:0c:cc:e3:07:b8:94:34:7a:15:7b:be:
3c:55:41:61:ab:cd:df:d3:7c:00:42:4c:11:dc:4a:9a:94:b3:
ac:8f:a5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 00:17:52 2025 by rpki-client