Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kvsBkFLG_W0_KJ3VmQ7X_1G2nAA.roa
File: kvsBkFLG_W0_KJ3VmQ7X_1G2nAA.roa (raw, json)
Hash identifier: x2UgXqzpObYAdYnAaf7+bUfaT0Gk8N5SwtVqpBEUgak=
Subject key identifier: 92:FB:01:90:52:C6:FD:6D:3F:28:9D:D5:99:0E:D7:FF:51:B6:9C:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885E2FB4735DEB9CE4AC92E340F11EA66E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kvsBkFLG_W0_KJ3VmQ7X_1G2nAA.roa
Signing time: Sat 27 May 2023 17:09:24 +0000
ROA not before: Sat 27 May 2023 17:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5e:2f:b4:73:5d:eb:9c:e4:ac:92:e3:40:f1:1e:a6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 17:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92fb019052c6fd6d3f289dd5990ed7ff51b69c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:22:2d:de:b3:d2:18:7d:cd:0b:bb:c1:ec:41:
61:11:99:3b:84:6a:04:ab:2d:5d:3f:76:e3:0a:d8:
d5:92:52:df:49:5a:ef:bc:e4:eb:71:41:9a:47:68:
d4:27:5c:b2:40:25:48:62:f8:48:98:2c:a6:75:22:
ff:02:30:86:9c:df:bc:53:d1:27:ea:8b:f8:37:90:
28:20:ce:9a:d0:84:4f:c5:6e:00:49:a5:d0:3f:dc:
ec:6f:ef:44:c7:84:dc:72:f8:30:a9:0b:da:68:a5:
33:0d:92:86:e0:01:5d:fa:98:be:d1:40:39:5e:af:
ba:32:c8:6f:a6:61:98:17:d9:d6:94:4a:44:bd:9b:
29:3b:49:b5:25:29:e1:4e:98:8c:97:c6:d0:30:56:
71:51:75:f2:7e:a3:2c:4d:10:2a:fa:9a:05:47:27:
71:6f:ea:f1:8a:41:0e:57:98:87:fb:9a:f6:46:24:
1a:2e:81:8f:50:fe:00:6b:fb:63:5f:5f:e8:b9:b5:
7f:72:49:ad:e5:76:9b:e2:ed:cd:4d:b9:e5:57:44:
37:4f:5c:31:c0:15:c3:d4:71:c9:5d:6c:79:9f:37:
dc:e4:47:29:54:cf:b5:19:21:e0:2a:3e:4e:64:5d:
40:df:8d:92:96:e7:77:e0:05:c1:ec:6c:16:fd:ba:
00:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FB:01:90:52:C6:FD:6D:3F:28:9D:D5:99:0E:D7:FF:51:B6:9C:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kvsBkFLG_W0_KJ3VmQ7X_1G2nAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:aa:cf:45:d7:b6:56:c4:6a:11:b4:19:59:07:b7:5c:67:52:
db:49:07:19:c8:19:8f:eb:f1:df:60:0c:24:66:13:bf:f5:65:
a7:9a:4d:8d:4d:72:96:1a:c4:7f:1a:11:32:3b:1a:de:9e:af:
ca:6b:a2:58:91:a9:cc:20:9a:00:fd:ee:8d:5e:c2:1d:a7:02:
a5:6e:4b:97:c4:93:3e:ca:fc:2e:7b:f0:ae:9e:50:13:a3:86:
da:62:00:82:63:ad:15:7e:b0:d1:9e:0a:35:88:d7:e7:21:75:
41:87:f3:76:aa:fc:d5:61:f3:09:aa:16:76:2d:17:d6:ba:92:
c4:62:c8:bd:6b:63:53:fc:1a:e9:93:2c:11:3b:29:fc:c3:f2:
e5:3f:57:f9:06:3b:db:8b:8b:d4:35:b7:f7:b8:5a:be:74:3d:
c0:38:fa:4c:f2:8e:cf:f1:fc:e0:87:4c:86:eb:60:c8:a2:1d:
58:4f:9e:29:2a:ca:06:4a:ce:ed:4d:9a:6f:77:db:be:2b:0e:
de:94:64:65:16:8d:1b:a2:90:3a:26:82:ca:c3:4c:91:a5:e8:
0e:c1:21:f9:77:21:79:2d:38:9b:e7:61:f1:58:e4:a0:bb:f0:
1a:f7:8e:3e:a7:0d:b7:45:1a:fe:ca:ba:80:75:56:db:41:4f:
1a:3f:af:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:27:00 2025 by rpki-client