Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-gXxOG221vxZSrUOgkC4qzjR9Ug.roa
File: 1-gXxOG221vxZSrUOgkC4qzjR9Ug.roa (raw, json)
Hash identifier: H2ohf7lRJC86cVSXWLI6uuc98C6ubFhWjj2Olnu9HQU=
Subject key identifier: FA:05:F1:38:6D:B6:D6:FC:59:4A:B5:0E:82:40:B8:AB:38:D1:F5:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182C91E80E01FD2FD58C373DD7DADD0B9A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-gXxOG221vxZSrUOgkC4qzjR9Ug.roa
Signing time: Tue 23 Aug 2022 05:13:15 +0000
ROA not before: Tue 23 Aug 2022 05:13:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:1e:80:e0:1f:d2:fd:58:c3:73:dd:7d:ad:d0:b9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 05:13:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa05f1386db6d6fc594ab50e8240b8ab38d1f548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:53:44:30:49:33:7b:5e:8b:48:c2:94:af:fc:
cd:38:9e:aa:97:e8:cb:79:ca:2a:83:59:48:5e:da:
bd:4f:70:bf:d3:3d:c1:c8:d0:07:38:ff:9d:b3:66:
55:c0:aa:61:b4:03:c5:d3:06:d0:ed:89:34:5b:d7:
89:97:18:0d:9d:59:49:b9:9f:f1:7a:65:01:53:05:
81:d3:df:b8:a4:0f:46:92:08:67:f1:12:8b:12:0e:
38:b8:48:ae:a3:41:ed:68:2a:0a:cd:bd:ff:ab:9e:
62:af:36:96:97:77:e3:1e:6a:4a:07:08:1a:76:9a:
31:e1:f2:78:2b:cf:58:5d:0a:c6:ed:2f:84:ce:61:
8f:31:60:71:e2:81:4b:3c:89:f3:50:dd:69:1d:1d:
4b:c1:3c:9b:d1:c3:56:b6:a9:11:b9:ba:13:5c:19:
8a:28:c8:10:66:fb:1b:fa:d4:60:f8:8d:0e:b2:3a:
56:6a:39:69:e3:90:91:5b:92:54:c7:81:49:93:f7:
e4:65:1b:02:bb:fa:31:b5:5b:9b:81:5c:4a:87:14:
73:d3:d3:4e:1b:6c:9d:79:e0:b7:2a:cc:90:8f:28:
df:91:bf:1d:6c:d4:e2:d9:1f:84:7a:fc:b2:c3:89:
15:e7:6a:c1:38:de:fd:c9:1c:8c:7c:47:6b:e1:81:
ca:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:05:F1:38:6D:B6:D6:FC:59:4A:B5:0E:82:40:B8:AB:38:D1:F5:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-gXxOG221vxZSrUOgkC4qzjR9Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:56:77:be:34:d0:86:27:21:0e:17:14:6c:7a:4c:33:3b:a1:
d8:43:c1:3a:08:22:67:94:10:fd:da:b9:aa:ae:30:b9:ee:4a:
31:99:d0:d2:d8:62:87:eb:b9:2a:a1:11:ac:93:fa:5d:b7:21:
e1:42:0a:d9:68:93:a9:d0:0a:bd:25:a2:ba:4b:b3:99:6f:45:
6d:30:89:40:4c:dd:79:a7:d6:0b:2f:cd:c8:e8:73:8c:2d:5c:
bf:3a:47:dd:0f:e1:67:72:51:be:b7:61:28:16:72:eb:68:ba:
d3:c9:dc:4b:28:7b:98:1a:67:36:28:33:84:36:45:7e:81:25:
72:1a:90:7c:10:b2:c5:14:65:7b:8d:9f:fb:3d:1d:10:2d:6b:
16:ac:13:61:34:15:41:c1:35:7e:e2:20:8f:e4:c3:f3:20:7f:
9d:a3:d9:c6:49:0f:dc:db:21:33:8d:47:d9:cc:27:bb:f4:01:
8a:30:e7:cf:09:df:54:97:70:f5:33:46:99:f3:1d:ff:91:38:
9d:b7:a5:53:12:75:93:22:5e:0b:60:d4:2e:f2:7f:7f:fc:38:
3a:d9:82:42:73:04:72:7e:5c:0d:69:c6:8c:cf:89:d0:36:b3:
06:e6:09:f5:e0:ac:e8:b2:8c:ce:58:23:08:0d:79:6a:96:5f:
99:1c:a2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:59:20 2025 by rpki-client