Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kzYjjwYIdLlOWG6_5xnhKv9beI4.roa
File: kzYjjwYIdLlOWG6_5xnhKv9beI4.roa (raw, json)
Hash identifier: wsoz2qO6DrVzox7nJsgJYFWc96g/a86zJ9tya4amgNo=
Subject key identifier: 93:36:23:8F:06:08:74:B9:4E:58:6E:BF:E7:19:E1:2A:FF:5B:78:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A78E79DDD5C89EA7A25A1147575B9A4B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kzYjjwYIdLlOWG6_5xnhKv9beI4.roa
Signing time: Sat 10 Jun 2023 23:05:12 +0000
ROA not before: Sat 10 Jun 2023 23:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:a78d:b427/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a7:8e:79:dd:d5:c8:9e:a7:a2:5a:11:47:57:5b:9a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 10 23:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9336238f060874b94e586ebfe719e12aff5b788e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b7:3c:b3:08:74:8a:3f:17:ac:c2:f4:63:3e:
61:7e:b3:b7:48:e3:3f:04:c1:54:5b:59:49:f7:8a:
8d:2d:7d:84:c5:0c:74:d6:87:2e:97:43:e2:ce:3c:
93:47:f3:b2:e7:88:de:49:26:95:e5:2e:2f:e4:c0:
7d:4c:a3:46:d1:8a:c2:f4:b4:c8:21:d6:a8:3a:8a:
87:63:99:5e:1b:30:c3:4e:d0:8f:12:d2:75:96:53:
54:87:fe:d6:a7:26:71:e5:60:ad:41:58:72:c2:84:
03:84:96:e5:67:ce:e9:8c:b6:3b:28:99:bc:e1:48:
0e:19:26:19:c9:e0:87:59:63:aa:a2:a5:a5:3a:05:
6c:4d:c3:52:ae:95:2f:47:f4:d6:d5:87:6d:e8:04:
e4:81:01:42:78:f7:f0:bd:66:6e:6a:f0:cf:c9:36:
58:cb:71:aa:6d:db:bf:7e:6d:76:c5:57:82:f5:da:
c8:d4:95:d3:72:a7:03:8e:12:02:23:c4:7c:92:a2:
90:9b:a7:3a:53:f7:ed:09:7b:5a:81:79:22:3f:fa:
4b:37:8a:ea:34:63:44:10:70:cb:59:9e:bf:79:51:
ce:a2:23:f2:44:ea:5e:3a:46:75:84:6e:ec:d5:04:
96:c2:90:5d:9f:46:62:60:44:11:4d:79:af:7c:f0:
51:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:36:23:8F:06:08:74:B9:4E:58:6E:BF:E7:19:E1:2A:FF:5B:78:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kzYjjwYIdLlOWG6_5xnhKv9beI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:5f:69:dc:49:c9:e2:b1:85:aa:79:03:95:22:55:3d:64:d5:
67:ab:8e:92:9e:88:fc:44:db:90:98:48:9b:22:f9:2a:8f:f7:
9e:aa:83:91:72:68:dd:2c:12:db:68:6d:d3:d2:74:32:92:7f:
56:a1:2a:af:65:a1:35:02:97:c5:9e:47:18:7f:5b:82:f3:ea:
f3:25:d1:41:10:8e:c4:4d:3d:a9:22:ef:bc:1e:c5:8b:50:ed:
f0:46:73:e3:85:32:d2:e7:05:b7:8b:cb:92:76:62:b5:36:96:
a6:6b:4b:00:ab:7b:14:69:7c:f5:42:2d:5e:ef:13:04:32:00:
c9:99:28:d5:6c:37:83:87:0d:29:99:12:04:60:f8:33:09:ee:
9c:9e:f5:b5:3b:33:35:85:80:a6:88:63:ff:e0:a6:67:f1:8f:
da:a9:42:cb:42:c4:ef:20:5d:d2:f7:27:10:a4:cf:91:c9:04:
72:17:90:cd:77:72:b3:4d:38:fe:74:ae:0c:26:6c:ae:ae:46:
b4:72:17:ae:0d:ab:f0:e5:c6:5c:2b:23:9c:6b:38:fd:b0:1e:
90:92:13:42:de:cb:7f:07:03:1f:e3:3d:9f:9b:29:52:c8:34:
0e:53:df:d9:10:f5:66:49:6a:36:df:94:7c:7e:8d:c7:63:9b:
68:9d:25:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 10:09:59 2025 by rpki-client