Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G4I2xCgK98tl6aqGQUGiwA9igio.roa
File: G4I2xCgK98tl6aqGQUGiwA9igio.roa (raw, json)
Hash identifier: 3NXnrdFvsMzY2Z4gClF5IZjF6BxNkmd3ddom0Cm1Eh8=
Subject key identifier: 1B:82:36:C4:28:0A:F7:CB:65:E9:AA:86:41:41:A2:C0:0F:62:82:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018886F57066536640FAC6B7C6A78DA1A4BA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G4I2xCgK98tl6aqGQUGiwA9igio.roa
Signing time: Sun 04 Jun 2023 15:10:12 +0000
ROA not before: Sun 04 Jun 2023 15:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:86:f5:70:66:53:66:40:fa:c6:b7:c6:a7:8d:a1:a4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 4 15:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b8236c4280af7cb65e9aa864141a2c00f62822a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:01:e6:1d:62:5c:d4:54:a0:99:48:0e:b7:
ef:63:2a:48:46:0e:8b:0d:e9:31:5f:01:7a:aa:78:
31:a4:c9:17:4c:6a:f3:f8:40:39:71:a9:3b:9a:58:
84:4a:d3:32:99:d1:9e:cc:32:71:d9:ce:72:70:12:
4f:c2:15:c3:29:75:a7:ff:21:ff:22:97:b0:25:8d:
3d:81:21:92:c7:66:fc:cc:bd:e5:28:11:e7:89:f9:
cc:63:cb:fe:23:69:99:4d:20:1d:0a:72:d3:bd:27:
29:cd:e8:24:bc:e9:81:a4:14:a7:30:9d:a3:9b:dc:
e3:33:fd:32:ae:f5:48:1f:e5:10:43:ed:1d:8e:d4:
52:e2:84:be:1a:b5:67:09:09:7b:73:4c:96:81:f9:
c3:a0:99:da:77:37:58:7a:77:10:6a:a7:5d:b7:d1:
d8:91:e7:73:d3:a9:ca:8a:b4:17:2e:12:24:38:b4:
95:37:c4:2f:49:7f:34:92:56:28:ed:14:dd:0d:5f:
83:58:ac:28:ff:38:b4:67:7a:62:29:50:b9:ef:32:
2c:46:eb:cd:36:70:55:da:85:9c:f2:43:50:d3:9d:
26:01:e6:d9:55:00:8a:97:49:7e:a1:cb:c5:62:10:
49:ad:ef:92:93:b5:bb:42:8a:1f:a8:ce:05:2d:c2:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:82:36:C4:28:0A:F7:CB:65:E9:AA:86:41:41:A2:C0:0F:62:82:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G4I2xCgK98tl6aqGQUGiwA9igio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:55:01:ac:3f:54:6c:cd:5b:36:66:84:2b:42:57:16:27:0d:
dc:3a:6e:d9:ed:e3:ea:37:2c:54:a1:40:76:62:1d:3a:24:74:
cc:1b:9d:89:d8:d0:4a:9a:03:42:21:69:0a:e5:88:77:f1:5d:
41:ef:8f:85:f4:3a:96:f3:31:29:38:94:49:aa:d5:54:6e:cc:
41:04:a4:d5:be:53:eb:d7:58:35:bf:78:97:ab:30:c2:d6:57:
14:01:3c:0a:a2:48:7f:c1:40:a5:da:9f:8a:5a:ec:39:20:8d:
48:76:ec:51:17:38:ab:f8:3b:aa:65:08:9d:0e:d4:29:a8:cc:
fc:e5:97:9d:03:0f:08:4c:52:65:2e:92:29:ee:2a:39:63:95:
b6:58:d0:4e:42:ed:1b:14:d3:fc:dc:c5:9c:0d:5d:52:66:ab:
70:87:61:9e:c6:80:3e:28:f1:91:eb:14:61:ee:44:2f:92:3b:
51:97:b2:78:d7:16:f2:9c:ab:5d:67:c8:b3:d6:69:a3:f1:dd:
1d:12:3f:41:3e:bf:f6:eb:6c:d8:39:7b:dc:26:17:87:e5:e2:
a3:bc:6e:aa:b7:cc:9b:c4:33:f6:b3:cb:e5:32:88:7c:f1:c5:
f8:2c:d8:a7:f0:4a:5d:69:94:b7:54:e6:d5:87:fd:36:1b:08:
f9:e6:51:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:23:17 2025 by rpki-client