Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kwZZchkrZBewn5w_O4JEkFvt-9E.roa
File: kwZZchkrZBewn5w_O4JEkFvt-9E.roa (raw, json)
Hash identifier: QEpI086MDPLZ8TleZ5vc6vVJRmn181P86oHbLbqYSI8=
Subject key identifier: 93:06:59:72:19:2B:64:17:B0:9F:9C:3F:3B:82:44:90:5B:ED:FB:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186428835C06E1CF344C299593DA00CDE82
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kwZZchkrZBewn5w_O4JEkFvt-9E.roa
Signing time: Sat 11 Feb 2023 22:11:08 +0000
ROA not before: Sat 11 Feb 2023 22:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:42:88:35:c0:6e:1c:f3:44:c2:99:59:3d:a0:0c:de:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 22:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93065972192b6417b09f9c3f3b8244905bedfbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a0:5f:1f:30:60:13:e4:d9:d2:62:94:2b:25:
60:9a:e4:1d:51:f1:4c:a5:47:fd:32:83:e7:82:b3:
d8:76:6b:aa:0c:1f:ba:31:08:09:82:b6:51:cd:0c:
f5:de:bd:71:41:21:b2:cb:2d:f7:5d:d7:b4:c9:e7:
28:99:2c:0b:c0:e4:6c:0c:ca:0b:e2:8e:58:25:c2:
63:b8:08:ab:7e:b2:b2:bb:34:04:64:73:1c:59:eb:
3e:ff:9c:a8:3a:a8:9a:23:be:58:6f:3a:41:42:84:
f3:b4:32:07:5d:bb:ac:3a:b0:25:44:d4:62:57:e3:
d2:01:2f:69:55:09:7f:a9:aa:50:fe:27:b2:03:6a:
52:f0:56:7b:b8:f4:ae:3f:12:df:93:6c:4e:20:51:
05:9e:df:be:81:c4:5f:1a:a0:36:91:43:ee:c1:35:
1b:e2:d9:a5:ea:29:b4:eb:6b:35:34:30:14:2d:e8:
8f:b3:15:8a:59:87:52:e3:6d:69:78:76:7e:25:4f:
a1:a9:5c:03:4f:60:f4:e5:83:5b:2e:f8:0f:82:41:
c3:08:25:32:76:e5:a0:65:38:db:df:59:29:b8:e9:
b7:79:b1:5f:3b:4b:ba:0a:76:57:43:13:17:d2:31:
34:f6:d3:30:38:5e:13:a2:47:bc:2e:b4:97:15:23:
87:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:06:59:72:19:2B:64:17:B0:9F:9C:3F:3B:82:44:90:5B:ED:FB:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kwZZchkrZBewn5w_O4JEkFvt-9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:dd:35:b5:0d:a5:e7:a9:ee:bb:9e:e0:7b:fc:91:d8:50:f5:
40:f2:94:ce:3e:c7:8e:43:0f:87:c7:4b:60:00:b5:ec:c6:c3:
c6:db:a3:c6:0c:00:f8:19:89:9b:39:f2:90:51:3c:34:98:b3:
bd:f4:17:63:30:71:22:69:42:8e:34:0f:0d:8c:b7:7d:cd:30:
a5:f8:2e:70:4b:76:41:82:50:65:c2:47:91:f3:4f:3e:c5:dc:
9d:14:57:43:0b:87:17:cc:16:ff:6f:ad:50:5f:87:c8:81:74:
b4:9b:f5:40:1f:c2:d5:08:8e:0b:1b:a7:b0:e8:7f:b5:f5:19:
de:d1:2d:a5:92:19:29:44:9e:b5:9d:51:95:be:19:bb:b5:1d:
ec:4d:58:0d:a9:09:1a:3b:1c:19:87:6b:ac:2e:4f:b5:a5:03:
44:77:08:83:87:bb:af:84:2e:fd:17:1a:c5:0f:29:0a:87:59:
fc:38:a8:b6:94:51:93:2d:2b:f7:43:16:66:ad:57:5a:1e:d3:
a8:0e:c1:79:1c:80:78:a8:57:69:5b:78:74:bd:a5:8a:4f:52:
9c:cd:ec:b7:df:ce:3b:14:d1:03:d5:f7:69:6d:cf:52:03:d2:
98:db:1b:07:4a:e2:69:35:91:05:5b:dc:73:09:df:0d:c5:a1:
5d:c5:58:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:16:01 2025 by rpki-client