Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kzxam7aHtFQtvWXrO5p-lprIjaE.roa
File: kzxam7aHtFQtvWXrO5p-lprIjaE.roa (raw, json)
Hash identifier: mXe0wdiNF4bQDyqb83kIy3GaUcJ//F05fGmd8XefWg0=
Subject key identifier: 93:3C:5A:9B:B6:87:B4:54:2D:BD:65:EB:3B:9A:7E:96:9A:C8:8D:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018325655CF91766C87F8BAE98CEFDD6C8C7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kzxam7aHtFQtvWXrO5p-lprIjaE.roa
Signing time: Sat 10 Sep 2022 03:15:43 +0000
ROA not before: Sat 10 Sep 2022 03:15:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:25:65:5c:f9:17:66:c8:7f:8b:ae:98:ce:fd:d6:c8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 10 03:15:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=933c5a9bb687b4542dbd65eb3b9a7e969ac88da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8b:29:4d:73:4c:61:6e:b3:53:63:90:23:bf:
80:da:02:a8:6c:3c:58:09:4a:4c:97:0d:68:50:de:
3b:a3:92:3f:ee:6f:c8:34:b0:81:e5:6c:9c:04:e1:
29:f2:79:35:a6:15:21:44:fa:66:67:93:3f:0b:38:
11:4f:73:42:85:65:f7:f0:e7:48:e0:1f:a5:55:8a:
ca:f5:84:e4:3f:90:d6:83:59:cd:ac:40:80:b4:e2:
9a:13:b9:9c:7b:87:e1:d6:7b:b9:76:06:86:d2:ba:
0e:48:23:4c:ad:d7:3b:8a:38:2e:de:8b:ab:af:ca:
04:fa:05:8f:4f:27:99:50:fe:6e:19:ff:84:36:ce:
00:fe:7b:3b:87:dc:84:e9:57:a5:97:c5:b3:eb:ee:
43:79:21:55:f5:e3:d2:d2:2a:7e:7e:b7:79:db:e6:
dd:b3:d1:f2:b8:9c:62:9e:68:9e:5b:00:d2:fa:6b:
ff:00:82:8d:af:a5:25:12:e0:1f:c0:92:b2:69:0c:
a0:13:3a:5e:18:32:56:6f:e0:4b:a4:89:c9:f9:6a:
f8:ea:a6:19:4c:4e:14:ae:42:51:6a:2a:82:aa:11:
a8:5c:21:68:f3:1e:b6:01:9e:b3:15:53:c7:17:67:
d1:5f:5b:57:e8:85:23:b0:2d:15:3d:6a:cc:d5:d7:
0f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3C:5A:9B:B6:87:B4:54:2D:BD:65:EB:3B:9A:7E:96:9A:C8:8D:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kzxam7aHtFQtvWXrO5p-lprIjaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:4d:53:d0:0d:41:e2:a8:ca:88:e4:a1:aa:f0:6a:f3:e0:79:
72:8d:62:93:c0:10:79:47:40:8e:44:7d:65:73:55:c2:1e:5b:
64:28:bb:eb:40:8d:98:d5:c4:f2:0e:ca:14:05:88:8e:bd:59:
af:09:af:51:df:b5:e1:1b:e2:be:9d:30:c4:14:4d:19:dc:ca:
aa:80:84:2a:cd:d8:30:25:28:78:14:c9:e2:b0:95:80:e6:7d:
ae:6c:06:63:cf:48:f5:fc:8b:39:45:c9:51:c9:1a:d6:fd:9b:
9e:d2:05:43:3a:f0:bb:5e:e7:5d:42:57:e9:6b:93:4e:f9:f2:
1f:90:6e:f6:f8:e8:81:b5:31:20:34:4d:10:bc:94:74:2f:a2:
1f:60:0b:d7:0c:fa:af:1c:0a:7e:f7:f9:07:90:6b:16:8c:5f:
4f:0d:51:90:f6:e5:74:f6:52:78:fc:24:60:29:58:82:47:c2:
a9:f5:03:44:2d:fa:f1:50:4d:25:b0:60:fa:b1:74:2e:4f:e9:
31:02:bf:fd:e0:32:e2:6a:4e:3a:8c:bd:ed:89:7e:ab:a4:dc:
be:dd:55:b0:70:2b:af:ff:f7:47:cd:6f:c2:1e:53:29:79:f9:
ee:83:9c:d0:03:42:84:97:95:50:27:dc:14:3c:38:29:3a:04:
af:3b:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:40:09 2025 by rpki-client