Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G73i8c8UAALYQyrQ3hGZXWKr5y8.roa
File: G73i8c8UAALYQyrQ3hGZXWKr5y8.roa (raw, json)
Hash identifier: CAx7/BTgzAoZDAaM0ObyqKLrWp622367pEH0W/wwhKY=
Subject key identifier: 1B:BD:E2:F1:CF:14:00:02:D8:43:2A:D0:DE:11:99:5D:62:AB:E7:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880C37976B8E049D434A077943621AA042
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G73i8c8UAALYQyrQ3hGZXWKr5y8.roa
Signing time: Thu 11 May 2023 19:09:09 +0000
ROA not before: Thu 11 May 2023 19:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0c:37:97:6b:8e:04:9d:43:4a:07:79:43:62:1a:a0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 19:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bbde2f1cf140002d8432ad0de11995d62abe72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:e4:65:6d:8c:0a:03:fe:81:96:a1:f6:2d:
85:3f:b7:b1:99:12:8c:74:5e:d9:1f:4f:0d:90:4a:
7d:c6:7e:5b:64:17:00:e5:ae:58:9f:b5:df:6f:ce:
33:26:21:8a:19:7f:e6:23:b9:bb:d0:96:8a:68:56:
0b:93:50:71:df:71:97:9c:0b:37:5b:9d:dc:1f:53:
49:8b:7e:b0:07:55:6a:33:fa:ed:b1:8a:eb:00:4d:
6d:71:fa:d6:78:97:4b:9e:c4:40:41:32:31:5b:f4:
f4:ce:db:29:1c:9f:e4:33:27:dd:91:87:25:80:41:
fe:16:9a:96:f5:2f:1c:6a:55:9a:d9:c8:30:73:3b:
30:68:8b:ab:12:b8:51:1f:af:b8:ff:5f:4b:f5:e1:
d3:22:45:63:8f:74:c9:35:68:66:e1:f3:35:a9:0c:
7c:e3:c7:52:1c:5d:3e:e8:2a:40:37:9e:37:c1:c3:
40:03:41:35:ee:56:36:be:5f:9f:63:e4:bc:b6:77:
ed:2a:38:9c:90:91:87:68:a5:87:ce:29:a2:b6:1d:
b7:3e:b4:5b:b6:67:38:f2:af:29:ac:0f:be:db:af:
3d:09:6e:90:12:ad:b6:15:ac:43:b0:81:b0:b0:f2:
0b:0b:5b:db:10:b1:98:4c:95:7c:c8:2b:f5:27:a1:
8e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BD:E2:F1:CF:14:00:02:D8:43:2A:D0:DE:11:99:5D:62:AB:E7:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G73i8c8UAALYQyrQ3hGZXWKr5y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:31:97:fd:2e:ca:c8:cf:4e:80:f3:9e:41:e5:6c:c3:53:df:
79:e8:47:0e:22:3a:b8:bc:67:07:5a:58:c9:2e:b7:b7:b2:d5:
a7:e5:37:2e:81:62:78:bd:4a:17:be:14:38:76:64:8a:af:9b:
c3:4c:7a:5c:37:1a:fc:1e:be:df:10:46:19:8a:60:32:97:59:
64:f5:a3:14:0b:da:3c:ed:96:5c:8f:f7:e4:db:48:44:2a:3d:
15:46:34:79:2b:89:e3:0a:a2:aa:ad:f1:18:cd:09:a6:7e:cc:
33:2f:f5:f3:d9:01:2e:5c:1d:9c:e4:8a:71:2e:c5:06:51:85:
ff:a3:17:ac:db:7f:fb:78:9b:22:09:fe:dc:65:ba:59:a5:a7:
de:23:91:28:1c:90:b1:50:15:fd:c2:26:47:42:9d:d3:6a:8a:
b5:d7:ea:a3:95:d0:1a:3f:fc:36:71:03:e9:e6:2c:66:f7:25:
a4:2e:34:3c:50:5e:c4:e4:29:83:ca:d4:94:16:22:f9:56:d9:
c2:f8:05:0b:08:84:92:d7:d0:9f:b2:31:2c:fa:ad:2e:1e:0e:
39:58:d1:99:55:8a:d2:4c:38:b5:39:2c:6d:24:d7:c2:8d:c4:
fd:42:84:66:92:67:5a:d3:68:48:98:aa:04:08:e0:84:e3:b4:
6d:0a:63:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:26:27 2025 by rpki-client