Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KV7nNbKmQ92fvI614NG56inXYSE.roa
File: KV7nNbKmQ92fvI614NG56inXYSE.roa (raw, json)
Hash identifier: Qh4aamtcfI2b5nNmfoGL1hcwhYJ1Z1+jQ2ih5L9go5w=
Subject key identifier: 29:5E:E7:35:B2:A6:43:DD:9F:BC:8E:B5:E0:D1:B9:EA:29:D7:61:21
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5DB8C406CFDA414623667ECE69A75CBF
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KV7nNbKmQ92fvI614NG56inXYSE.roa
Signing time: Mon 04 Sep 2023 01:05:04 +0000
ROA not before: Mon 04 Sep 2023 01:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:5db8:b426/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5d:b8:c4:06:cf:da:41:46:23:66:7e:ce:69:a7:5c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 4 01:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=295ee735b2a643dd9fbc8eb5e0d1b9ea29d76121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:ed:21:9d:eb:5a:99:16:15:d3:10:e8:b0:
1d:95:e4:20:fd:80:1d:06:88:c3:dd:c8:d5:90:96:
37:44:d2:67:47:80:ca:33:23:c7:e9:84:23:fb:89:
9f:73:75:35:a0:0a:7b:d8:37:a0:ee:ca:87:1e:8a:
67:fd:a4:6e:c4:9c:24:d9:27:d6:e3:19:41:0d:06:
09:2b:d2:d6:0b:5b:78:7c:13:e1:bd:5b:43:70:4f:
42:7e:1f:6c:d6:b4:8a:38:53:ec:63:e0:1d:01:34:
6a:cb:37:4f:3c:f6:16:52:16:f7:6e:6a:cc:6c:42:
99:7f:c0:c1:a2:9f:5e:05:28:68:4f:72:d0:7e:3d:
14:4b:d6:f2:12:79:33:02:64:18:35:0d:75:c7:ac:
4f:9a:0e:4e:ff:86:80:21:2b:3d:72:09:a8:ce:df:
69:e7:ae:25:3d:1c:29:16:27:59:cd:6b:08:73:af:
a2:3c:e1:3a:a1:a0:e4:96:36:6d:45:1e:a1:0a:73:
f0:6e:c9:12:d4:38:47:18:7f:9f:d3:67:90:d4:93:
8c:80:f9:55:c9:7f:f4:8e:04:bd:d4:8f:26:4d:49:
55:3b:b7:54:e9:b7:83:14:05:0a:2f:b8:27:eb:c2:
2c:0d:4a:6a:60:00:2f:e5:65:15:49:ae:23:89:3a:
53:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5E:E7:35:B2:A6:43:DD:9F:BC:8E:B5:E0:D1:B9:EA:29:D7:61:21
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KV7nNbKmQ92fvI614NG56inXYSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:03:71:90:a9:7b:0b:40:4f:5f:d6:93:e1:7c:ac:03:fb:70:
08:98:7c:4f:22:80:29:88:ab:da:d8:ba:ab:0a:c9:08:50:51:
94:77:70:fa:b6:87:fd:e1:8f:8f:e1:77:98:08:e7:dc:22:4a:
e6:36:2c:b1:85:59:65:9d:95:22:cd:4c:42:6c:7b:a3:b5:ce:
8d:0a:42:35:39:57:21:cf:58:8e:3e:20:18:7a:44:94:3b:74:
42:73:a9:4a:c3:bd:d6:2e:a0:70:54:06:82:ba:1a:f9:f8:16:
be:62:40:3e:36:14:65:b1:34:e1:81:99:a4:7b:88:c8:61:a6:
27:51:e3:6d:2f:2c:32:43:11:87:b7:7b:b9:1f:12:74:4f:1b:
0c:05:e4:71:79:05:7f:8c:36:cd:bc:ab:67:4f:c5:a7:e7:f3:
d2:24:4d:33:b1:18:e5:e1:ca:0f:ea:e8:65:3b:6f:11:06:3b:
7b:73:77:f7:af:79:ea:b5:00:c5:31:56:6d:34:c8:87:7b:0f:
bc:b9:88:52:f1:23:2a:41:c2:52:2e:25:db:d9:29:d4:b4:39:
ef:4b:66:ac:b9:bd:bf:9d:ca:e2:c8:4d:3f:a9:79:ac:1d:77:
37:6e:79:f2:ce:5a:34:2e:c3:58:47:fc:cf:e3:d3:04:fb:0f:
0d:f0:b4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:32:31 2025 by rpki-client