Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G41Ry69KLJqxczL6OCNUXBeM6pk.roa
File: G41Ry69KLJqxczL6OCNUXBeM6pk.roa (raw, json)
Hash identifier: CBL3Ym1DzuA3+DvSQj1ykgCFtKkifiZQ+otFEEZTXTc=
Subject key identifier: 1B:8D:51:CB:AF:4A:2C:9A:B1:73:32:FA:38:23:54:5C:17:8C:EA:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187D05850EB800A6B23C4108EBAFB459686
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G41Ry69KLJqxczL6OCNUXBeM6pk.roa
Signing time: Sun 30 Apr 2023 04:07:41 +0000
ROA not before: Sun 30 Apr 2023 04:07:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d0:58:50:eb:80:0a:6b:23:c4:10:8e:ba:fb:45:96:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 30 04:07:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b8d51cbaf4a2c9ab17332fa3823545c178cea99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:11:90:0d:47:98:b5:9b:e9:79:47:37:e6:
c9:fe:89:ac:4c:d4:10:42:a7:69:65:e5:26:a0:4f:
5f:3e:95:93:7e:d2:b5:30:83:b0:89:1d:a8:8c:d1:
97:4e:91:a6:43:de:ab:90:c9:f4:7e:86:b8:6a:eb:
99:b8:b6:9e:d7:2f:7b:3a:ce:ab:75:12:2b:7d:b6:
1e:35:94:18:ce:1b:4f:2c:aa:af:5c:49:00:d2:30:
f7:0c:ee:f5:b1:4e:8b:7f:35:f5:81:9a:6f:c5:b1:
b9:3f:fe:78:bd:5e:e2:26:44:21:64:65:61:73:fc:
ee:b3:ed:dc:a1:5c:3b:fc:6f:15:52:10:09:9f:9b:
21:eb:d3:66:03:60:01:d2:a3:74:99:19:05:e1:42:
ca:45:fb:57:5a:05:58:f9:bd:69:ce:65:9b:ea:4d:
95:e2:0b:2f:c4:51:99:cd:d3:7c:62:c7:b3:71:62:
93:1d:cb:7a:be:74:e9:b2:70:66:8c:ab:c4:3f:23:
f7:07:f0:57:a0:84:c9:c3:71:ee:f7:ad:56:62:31:
18:94:09:1e:1b:54:7f:b8:8f:7a:56:56:ec:ce:6c:
fb:72:2e:eb:4b:f3:14:04:6d:c3:19:8f:9b:00:88:
77:a3:8c:77:93:28:de:29:79:b4:6c:73:d9:ec:66:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8D:51:CB:AF:4A:2C:9A:B1:73:32:FA:38:23:54:5C:17:8C:EA:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G41Ry69KLJqxczL6OCNUXBeM6pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:00:4a:10:b8:dd:ce:f2:56:7c:0d:76:c5:24:e6:d2:12:e7:
2b:4a:22:41:35:bd:2c:a8:ae:24:88:ff:fc:5e:89:27:1a:e0:
5e:85:f8:42:87:d4:c6:dd:fc:4e:99:7d:56:7e:86:a6:8f:90:
41:34:88:01:03:fd:37:9d:dc:80:96:4e:5b:cb:70:38:8a:72:
e5:4e:51:ed:7a:a4:97:e9:20:53:5a:23:4f:16:81:ef:77:6b:
2a:1f:e7:21:54:09:29:78:71:6b:78:d4:4d:f2:e4:62:ff:ea:
bd:be:84:99:ce:37:4b:ea:53:b1:7e:45:4c:4f:25:6b:45:f3:
6d:13:1e:04:f6:7a:cf:08:b7:4e:64:3a:a4:4a:f4:fc:3f:3b:
90:7c:ed:5c:12:d6:84:c8:f9:54:2d:51:c2:1d:37:d5:0e:ee:
ab:86:91:92:9b:74:b6:eb:02:6b:57:ea:96:2a:bf:e7:46:ac:
cd:d4:02:9b:36:db:7c:39:61:3b:0d:e6:89:1e:6b:99:46:68:
49:a7:89:ad:81:e2:5a:3f:05:61:8c:49:06:fb:6b:fd:65:0c:
8a:e6:64:50:db:a3:2a:7e:c3:56:11:3d:64:65:15:9e:56:ee:
53:dc:9d:89:b7:47:20:9c:2f:d0:a2:26:9c:32:98:89:34:9c:
52:71:81:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:14 2025 by rpki-client