Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kyhQyovi03Spn7_91THS22lloS0.roa
File: kyhQyovi03Spn7_91THS22lloS0.roa (raw, json)
Hash identifier: h36c7okPIy1xe0mBImGuFQ2n3fTxc9YrGIUeTjD4/j4=
Subject key identifier: 93:28:50:CA:8B:E2:D3:74:A9:9F:BF:FD:D5:31:D2:DB:69:65:A1:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183173DB4215B73F54944744A8BC7DD633E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kyhQyovi03Spn7_91THS22lloS0.roa
Signing time: Wed 07 Sep 2022 09:17:43 +0000
ROA not before: Wed 07 Sep 2022 09:17:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:3d:b4:21:5b:73:f5:49:44:74:4a:8b:c7:dd:63:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 7 09:17:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=932850ca8be2d374a99fbffdd531d2db6965a12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a6:6a:d1:ea:1e:d8:36:8b:74:3c:4a:0f:9b:
98:a1:db:a7:0f:f8:ef:f6:66:65:49:c5:cb:1e:a9:
1c:bc:25:82:fb:6c:8c:ab:65:ac:f9:49:bd:88:bd:
29:43:3e:f0:71:b6:dc:ba:aa:e0:04:67:1b:82:d5:
ee:f5:04:ac:8e:ba:17:91:37:ac:f4:7b:b7:39:ff:
20:e0:10:a2:b3:3c:8b:e8:30:cd:28:d6:b1:d5:8d:
0e:43:67:3d:31:e3:07:5e:ee:cd:4f:10:e7:d4:2c:
da:72:9a:31:ba:29:ef:00:f0:47:b7:c7:69:77:e7:
dc:fe:b4:e4:c0:28:e3:dc:ce:38:fa:de:21:a0:cd:
5f:65:9e:61:12:e6:38:7c:94:da:71:9e:b8:47:03:
1e:3d:02:66:af:f1:d9:27:75:da:56:6e:8a:c9:17:
b6:cc:cc:11:80:50:cc:a2:3f:38:25:90:7d:c0:8d:
13:ef:72:9f:0a:e9:c0:22:d0:ba:ca:21:47:a7:01:
6e:b6:58:83:6d:c9:8f:23:8a:3a:51:af:ca:78:56:
58:30:a3:84:85:dc:5a:82:be:cb:3f:b1:35:77:89:
5b:98:00:f5:a1:f1:7b:bd:c1:9b:5b:70:38:1a:e1:
3a:28:65:de:be:29:a1:b6:f5:fd:59:63:37:74:84:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:28:50:CA:8B:E2:D3:74:A9:9F:BF:FD:D5:31:D2:DB:69:65:A1:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kyhQyovi03Spn7_91THS22lloS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:b5:0e:27:1d:c3:0d:4f:f4:71:4a:57:30:b0:6b:8d:0c:4d:
77:85:cb:d7:ae:c6:04:11:5f:7f:d2:f7:82:35:48:77:e4:6d:
6e:c2:90:ec:4a:78:ec:0f:49:5d:91:a0:83:d0:75:80:d8:36:
8e:61:41:db:86:1e:24:d9:72:27:56:22:96:f0:a4:ba:11:7e:
36:d5:1f:25:8c:c8:e0:54:f9:43:12:06:5e:38:0d:f9:a7:b7:
48:8b:ca:1d:46:d8:61:9c:38:8a:d7:a2:63:da:a5:01:11:fb:
96:56:c5:77:bd:a5:fa:6a:cc:58:15:4b:27:2e:e3:f1:38:4a:
d2:52:fd:8a:e7:ba:5d:d1:4f:9f:f4:83:d1:0a:7c:51:4c:fa:
09:96:49:66:f4:a4:d0:e1:eb:2f:06:24:2b:0e:31:95:69:87:
07:da:a1:27:1e:dd:ba:ca:0a:a8:cc:2e:8d:81:65:fd:2d:03:
88:d8:1f:d7:30:a4:56:2d:a8:e0:51:da:07:ce:dd:c5:20:8a:
66:17:5a:15:81:91:af:d1:a2:65:41:1d:91:8e:c9:72:05:e8:
61:13:b0:e5:97:c5:00:89:4d:13:ea:f6:07:07:fa:4d:6e:9b:
06:9b:52:bd:7a:44:99:c1:4b:1f:29:bb:9c:52:c4:4e:6c:6c:
6d:3b:01:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:43:37 2025 by rpki-client