Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G612sr8XkAIqUrDii92COjqrvCA.roa
File: G612sr8XkAIqUrDii92COjqrvCA.roa (raw, json)
Hash identifier: LjagLZxySBO4gs2o3bN1UyjfVmRWSajtV3g5YwdNgnU=
Subject key identifier: 1B:AD:76:B2:BF:17:90:02:2A:52:B0:E2:8B:DD:82:3A:3A:AB:BC:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A367F7DA37848F476FEE81ECE57F39279
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G612sr8XkAIqUrDii92COjqrvCA.roa
Signing time: Sun 27 Aug 2023 10:17:19 +0000
ROA not before: Sun 27 Aug 2023 10:17:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:36:7f:7d:a3:78:48:f4:76:fe:e8:1e:ce:57:f3:92:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 10:17:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bad76b2bf1790022a52b0e28bdd823a3aabbc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:31:4c:0d:b7:f7:c1:90:f2:79:f0:31:d0:
28:cd:e8:d2:da:b7:b2:99:57:4e:3b:38:a8:ba:4a:
c0:29:58:2b:5a:85:10:26:94:5e:c9:c2:14:13:22:
99:35:d3:2e:15:a4:e2:a1:6e:4b:5e:9a:03:f7:a1:
72:c8:13:db:6e:c2:8f:76:b1:23:fe:dc:a0:26:19:
fd:ab:3a:3b:c1:f0:f5:da:4f:88:dc:b5:90:2f:ac:
47:c7:6f:7b:46:dc:b6:20:d6:62:07:1c:15:2f:d2:
5e:87:46:9b:bc:87:23:a3:28:e0:52:63:8b:d8:d4:
af:ba:12:9f:8b:b0:e4:f0:3d:b3:78:5a:64:a4:63:
fc:3f:d0:e3:6c:3f:89:63:1c:2f:2b:59:d3:40:58:
99:a6:6b:d0:44:1b:b3:07:e9:e9:0d:4e:18:27:66:
8d:23:32:2e:2b:19:3a:8f:80:ea:12:62:cc:36:8a:
9f:cf:a7:01:fc:09:23:0d:5e:67:d1:0e:6a:ae:11:
3d:11:28:eb:36:08:4e:07:ac:82:ad:19:6f:27:a7:
64:12:65:cb:f0:67:78:9b:79:5d:d0:c5:e6:2b:56:
ce:4d:39:55:bb:26:77:77:ae:13:47:03:67:c8:75:
19:87:c2:f8:43:2b:e8:3c:75:06:3b:7f:d0:05:0d:
cb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AD:76:B2:BF:17:90:02:2A:52:B0:E2:8B:DD:82:3A:3A:AB:BC:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G612sr8XkAIqUrDii92COjqrvCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:1d:fb:49:3a:db:21:7f:74:0d:c6:4e:f0:1a:f5:8c:bb:b3:
77:4b:af:30:57:a3:dd:c4:96:ed:27:2f:2a:30:39:f1:4c:a7:
d4:0c:bb:b0:e6:b9:d8:54:f5:96:8e:0a:ca:97:2a:ba:29:62:
58:03:62:c9:95:69:b6:96:a7:db:8c:39:e7:e4:74:b7:a9:73:
d2:1f:ae:e3:05:5e:a7:09:cb:07:41:b7:1c:3a:40:d8:15:48:
ad:86:df:ae:aa:04:15:8a:80:f4:76:f9:ad:34:73:1b:9c:ff:
54:ec:5b:4a:77:ea:b5:0f:3d:66:8e:dc:23:79:dc:a0:88:90:
9b:36:71:26:4f:3b:28:90:d6:c7:8e:2a:36:14:2b:32:de:3e:
6a:5e:7d:b7:63:45:07:40:09:c4:4f:60:23:00:39:ee:ff:63:
c9:da:b2:2b:ee:e3:db:93:8c:9d:16:4b:25:28:88:66:7e:6e:
dd:be:d2:84:c8:25:6e:96:63:1c:70:4a:da:cb:8b:50:60:33:
ed:f0:a1:65:75:ff:e1:32:7a:16:b5:78:36:8a:22:76:a0:41:
66:36:ad:e7:f8:1a:95:e5:0a:ee:ba:d7:bc:11:80:cb:c1:c6:
8b:e9:ed:75:9b:c5:21:bf:f2:cd:35:ed:8f:90:22:8e:83:f0:
d5:f3:4c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:24 2025 by rpki-client