Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4GvGh1lmZoSYu3zfNcwyZo3mlEU.roa
File: 4GvGh1lmZoSYu3zfNcwyZo3mlEU.roa (raw, json)
Hash identifier: rMvHGSE29ZELZsT5CrRu9e5qYE9f1BcHuRRVsTEXDKs=
Subject key identifier: E0:6B:C6:87:59:66:66:84:98:BB:7C:DF:35:CC:32:66:8D:E6:94:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01824ED08060830C87AE968C9F0A6C05B113
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4GvGh1lmZoSYu3zfNcwyZo3mlEU.roa
Signing time: Sat 30 Jul 2022 11:14:23 +0000
ROA not before: Sat 30 Jul 2022 11:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4e:d0:80:60:83:0c:87:ae:96:8c:9f:0a:6c:05:b1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 11:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e06bc6875966668498bb7cdf35cc32668de69445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:13:e2:f2:6d:13:ef:c1:3d:aa:2e:02:4d:
2d:fb:13:e0:4f:7b:26:56:ad:ca:21:9f:9a:87:c7:
aa:07:0c:61:86:a0:6c:5a:65:18:b8:93:3d:e0:72:
26:84:5c:16:ef:c7:a3:b6:28:d8:e0:5a:d3:36:be:
76:37:d0:6d:de:8b:5c:d7:a1:7e:f0:7b:93:93:1d:
79:8f:5a:32:8f:0b:22:09:a1:19:ee:75:64:db:86:
31:9a:43:7d:c3:4a:70:cf:2c:51:5d:39:78:dd:54:
bd:5f:40:19:5e:fe:06:42:03:5c:67:fb:c9:89:7e:
05:29:32:29:37:b5:65:9f:bf:7d:87:38:ee:56:a9:
1c:06:f2:23:54:05:e3:b7:c2:a5:d6:d6:43:c7:f1:
ea:b2:ce:fd:c0:43:b6:0a:2c:f8:95:77:f2:ef:39:
bf:b4:a1:da:35:5e:79:d7:2e:d4:91:00:77:54:54:
26:47:19:a0:75:a2:3b:fa:19:16:2b:ce:a9:4e:7f:
9f:0e:ad:3e:a6:6c:35:b4:c2:6e:a2:f4:67:47:59:
18:c3:5e:ce:13:aa:8a:4d:bb:35:27:a0:c6:ea:99:
bd:d2:6a:21:d7:54:c2:e6:2a:b0:47:ae:a4:1f:e3:
63:8b:cf:66:84:96:24:54:7f:d2:1b:2c:fd:93:50:
0d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6B:C6:87:59:66:66:84:98:BB:7C:DF:35:CC:32:66:8D:E6:94:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4GvGh1lmZoSYu3zfNcwyZo3mlEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:07:b6:c2:01:13:5e:b3:4a:13:79:c4:2c:be:44:19:2e:90:
da:10:00:79:8c:0a:cf:52:07:6f:1c:8c:8a:57:21:c4:d4:ba:
18:7d:f7:97:30:c1:2e:2c:91:9e:a2:49:62:17:79:c6:49:b8:
ba:1d:1f:7c:61:9b:3f:32:26:41:5a:47:ad:8d:9c:61:79:0f:
ab:ff:cb:7d:3f:bb:4a:ab:3f:2a:08:e5:b5:8f:9b:63:f8:ba:
17:45:7e:6b:d5:6e:0d:f5:a0:20:4c:ab:54:bf:b9:39:62:84:
3a:78:be:30:90:04:9f:4e:5b:77:5f:53:23:1d:77:9e:41:3c:
d4:b4:39:fa:81:6b:14:4c:fe:b4:3d:22:dc:bc:ae:09:10:85:
00:12:d3:08:e9:55:ca:6b:c5:cc:4a:2d:fd:ce:30:82:3e:b0:
05:9a:e2:85:3a:23:58:8c:ce:4d:50:c1:72:c6:b9:9e:2e:eb:
f4:63:f6:57:e0:c3:e4:61:a3:11:f6:d2:bd:1d:2b:c6:ec:35:
a9:90:2f:b0:b4:e5:87:b2:fe:9f:da:84:3c:e8:36:6f:a4:69:
67:ce:98:00:b8:19:dd:66:77:9a:a3:b2:12:dc:9e:0c:ff:5c:
e7:32:49:ec:3a:76:21:d0:01:01:17:9e:fd:84:82:46:7c:97:
23:21:88:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:26:14 2025 by rpki-client