Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1GuoQdBMLRXZAgWNgpKkKrbsZmc.roa
File: 1GuoQdBMLRXZAgWNgpKkKrbsZmc.roa (raw, json)
Hash identifier: 1EGPwr42BGA46fhtK9zVkN8T4Jz1XtgX7HU529wxfEs=
Subject key identifier: D4:6B:A8:41:D0:4C:2D:15:D9:02:05:8D:82:92:A4:2A:B6:EC:66:67
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886AD8AD219FEEE5592DDEDC0C19052FE4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1GuoQdBMLRXZAgWNgpKkKrbsZmc.roa
Signing time: Tue 30 May 2023 04:09:24 +0000
ROA not before: Tue 30 May 2023 04:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6a:d8:ad:21:9f:ee:e5:59:2d:de:dc:0c:19:05:2f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 30 04:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d46ba841d04c2d15d902058d8292a42ab6ec6667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:24:b7:08:23:97:84:f7:82:30:c1:b0:50:
38:38:75:2e:f8:3e:ce:48:04:1b:16:9e:a8:cc:31:
e1:21:f6:15:bb:6c:89:4b:47:d2:d3:f9:a9:bf:e4:
cf:e3:67:02:00:64:f2:78:8e:03:4d:02:8d:36:36:
89:54:9f:5b:7d:23:53:ce:18:b5:7f:99:3d:63:26:
67:82:12:94:73:6e:a6:75:72:55:8a:c5:7d:a3:b2:
99:d4:1b:76:e2:6b:3f:b9:47:43:59:4c:eb:6a:ac:
2a:5f:4d:44:c5:df:2a:60:5e:91:e2:58:37:50:bb:
ef:5a:64:e0:90:c2:99:4d:7c:34:0b:de:54:4c:70:
74:53:aa:c0:46:0c:d8:c6:b9:b1:a7:53:a7:33:71:
06:d3:4c:83:27:27:32:fe:a0:1c:70:b0:05:0b:a9:
cd:b9:d4:e7:55:8b:bc:3e:cd:c2:ec:69:1b:8b:ed:
f3:29:b5:15:ba:a3:25:38:57:82:3b:94:b0:d4:04:
b3:56:0e:32:a6:42:ef:88:ea:46:d9:29:3e:1c:bd:
1b:cf:2c:15:6e:f0:9d:e4:8a:f0:a5:00:7d:93:cd:
b7:00:f9:00:2e:6a:1c:a9:4a:3e:f6:78:49:ca:e7:
d3:b4:49:66:d5:84:e4:ea:66:02:0a:87:68:94:58:
f1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6B:A8:41:D0:4C:2D:15:D9:02:05:8D:82:92:A4:2A:B6:EC:66:67
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1GuoQdBMLRXZAgWNgpKkKrbsZmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:20:7b:51:dc:3b:ee:06:04:c4:7c:4c:a1:e3:f3:a3:e9:c3:
aa:01:ae:bb:c1:b4:27:02:47:c5:bb:c8:26:af:73:be:36:71:
9c:b5:5f:de:e7:79:cc:29:26:cb:20:a3:cf:9d:77:5d:68:c3:
94:b8:a6:99:0f:23:3c:17:23:f3:8f:59:31:04:41:90:52:77:
01:7c:04:fa:fa:38:42:0b:36:4b:bf:4f:60:1d:c0:a9:5a:68:
13:12:cf:cf:0f:1f:40:36:dd:44:45:bc:41:87:c8:bb:02:a5:
96:81:d6:87:21:92:00:4d:7e:6a:a8:de:22:1a:74:ed:01:a4:
26:0f:49:ca:da:47:a1:49:6f:a3:b4:46:d2:aa:fd:98:0e:87:
8f:04:ca:ab:fb:22:7e:d5:b7:97:df:ce:d9:e9:00:85:9d:71:
74:16:be:84:1c:bb:9d:ba:da:1a:01:aa:81:07:eb:76:c8:65:
64:ef:7c:89:ff:4a:3c:ca:50:11:6a:7e:d2:59:c0:28:83:9b:
56:98:64:3b:91:8f:1a:fc:a6:73:e4:cb:18:1d:61:38:c0:0b:
3b:2c:3c:69:0a:df:47:25:48:3b:75:c5:75:40:13:1e:07:b4:
2f:cb:cb:ce:eb:7c:36:45:8e:71:59:ad:4f:51:ab:d7:7c:32:
b0:d0:d3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:44 2025 by rpki-client