Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-GIi57LGR3q8FKM0H_lURRmXw7U.roa
File: 1-GIi57LGR3q8FKM0H_lURRmXw7U.roa (raw, json)
Hash identifier: OPx3aWj2DAYQ1iCYMfqTGfL3jLczpVU5OlkzUCchkTE=
Subject key identifier: F8:62:22:E7:B2:C6:47:7A:BC:14:A3:34:1F:F9:54:45:19:97:C3:B5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D361E302D51EBEF6E831CF3465FB866F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-GIi57LGR3q8FKM0H_lURRmXw7U.roa
Signing time: Sun 12 Mar 2023 01:14:13 +0000
ROA not before: Sun 12 Mar 2023 01:14:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d3:61:e3:02:d5:1e:be:f6:e8:31:cf:34:65:fb:86:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 01:14:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f86222e7b2c6477abc14a3341ff954451997c3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:3e:aa:29:be:b4:e4:36:87:7f:aa:47:f3:
cb:33:21:a8:ee:37:51:a2:1e:26:01:0c:95:46:bb:
9b:48:30:c3:81:c6:28:3c:f1:a8:25:5e:8a:b5:91:
6d:24:4a:df:ee:3d:33:2d:90:9e:fb:24:40:57:ea:
5a:c8:8b:47:22:bb:6c:c6:df:00:d6:b7:1a:8c:a9:
9a:de:57:7e:54:82:c8:f8:c8:9a:21:de:d3:6e:e4:
1f:41:97:a0:b8:4c:10:3f:3e:19:3a:8e:e0:88:b8:
93:e8:89:b9:37:33:8d:0f:80:9c:90:22:5a:7d:25:
8e:c7:1e:31:6a:02:d5:a2:10:10:66:93:36:e1:1b:
94:8a:8b:b4:65:ea:fd:50:6a:c1:fe:0a:4b:88:36:
01:2f:35:9e:ec:99:52:e9:a0:d3:48:53:06:57:da:
06:ae:6a:45:f2:4d:20:d5:78:46:ea:19:87:83:34:
61:f2:6c:eb:bd:dd:7c:72:a2:ee:d9:8d:f5:bb:a8:
8a:60:5f:d0:2f:46:f8:55:77:14:b3:ed:2a:f2:f8:
2f:58:0b:36:b5:c7:87:f1:e7:e1:a5:1d:c5:c7:16:
45:0b:99:03:39:15:17:50:45:b4:c8:61:e2:eb:39:
b7:4f:c0:7e:54:38:63:3c:60:b1:ef:e3:c7:f3:29:
ec:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:62:22:E7:B2:C6:47:7A:BC:14:A3:34:1F:F9:54:45:19:97:C3:B5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-GIi57LGR3q8FKM0H_lURRmXw7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:a2:5e:92:22:83:f7:81:7f:15:7b:0c:2e:40:17:50:cb:36:
b6:98:1c:57:fe:cd:30:0f:53:9c:2f:b4:cb:36:63:27:58:cc:
24:47:02:96:5d:a8:b7:30:a5:1d:98:8a:e6:14:cb:46:a7:90:
61:19:5f:51:ed:30:92:03:cd:71:e3:55:d2:c8:82:b2:ed:de:
b6:eb:43:f0:5a:c8:12:90:ce:90:dc:41:d5:33:cf:f1:d0:d4:
cf:e0:4d:63:4e:af:78:ee:e6:b3:0e:8c:a1:1a:42:31:18:70:
7e:a9:a2:cf:ef:bd:f8:e4:7f:c8:55:64:85:01:10:d4:7c:17:
94:d8:b6:2d:6d:66:56:f2:89:fb:f7:11:2b:ae:40:97:a0:9b:
b2:3b:88:7f:48:ed:cb:ec:dd:42:93:d5:7f:7a:f6:7c:67:e9:
ea:63:45:46:5e:66:a5:b4:58:e6:c2:2d:6e:12:f0:2a:a7:46:
13:fb:b0:30:69:29:d6:b4:64:5b:3f:24:31:cb:4d:31:88:f2:
88:fd:e6:c2:60:e2:18:da:77:8c:c0:68:77:9c:24:44:5d:58:
c4:b5:2a:86:4f:ec:02:78:aa:f3:8b:4c:e4:f1:83:7a:2b:df:
a8:58:4a:bf:6e:4b:32:04:d7:a7:a7:53:0f:5a:94:46:97:f6:
d9:3b:49:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:58:57 2025 by rpki-client