Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G7kKepjyxC3-6SzT5mwPSScMXeQ.roa
File: G7kKepjyxC3-6SzT5mwPSScMXeQ.roa (raw, json)
Hash identifier: T7KQ8VFe2ynPZVfMPHkb/ltCFNKUC0tZ0VYtIHH0SEk=
Subject key identifier: 1B:B9:0A:7A:98:F2:C4:2D:FE:E9:2C:D3:E6:6C:0F:49:27:0C:5D:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018933E8F028631AA41094013EF67ECBC0DA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G7kKepjyxC3-6SzT5mwPSScMXeQ.roa
Signing time: Sat 08 Jul 2023 05:10:51 +0000
ROA not before: Sat 08 Jul 2023 05:10:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:33:e8:f0:28:63:1a:a4:10:94:01:3e:f6:7e:cb:c0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 05:10:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bb90a7a98f2c42dfee92cd3e66c0f49270c5de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:38:94:5a:10:af:67:43:a7:b8:9d:03:3d:
80:a9:1c:67:10:c0:f5:39:a7:44:1c:41:bb:97:a7:
c2:b3:8c:9c:e6:3d:64:9a:f7:9f:0f:d4:82:30:75:
64:75:c8:67:94:7b:46:c4:5d:b3:7c:62:94:1f:f8:
e7:33:a6:a2:c9:a6:55:d7:7f:59:68:fb:ad:02:7e:
93:14:c9:6f:b5:61:52:36:28:c3:bf:31:72:e9:a6:
c8:5f:a2:33:f3:2b:d2:90:c7:7e:a1:ac:e7:ae:b4:
44:a0:55:c7:c2:e2:1e:4c:b3:09:74:df:23:c5:4a:
55:33:41:22:4e:1a:0a:9d:37:95:62:08:05:d6:1c:
75:00:69:e0:28:e6:be:5d:b8:ab:0c:a0:70:8e:0c:
ce:78:1c:5c:95:16:bb:6c:87:5f:12:1f:06:26:3d:
5f:7f:8f:bf:4e:a1:b4:a0:65:65:ac:3c:d1:8f:4a:
07:11:6a:a0:fd:6f:ad:95:17:fe:08:34:68:88:f5:
44:ed:30:e2:cc:f5:b9:02:f1:91:e5:55:83:01:2e:
bf:10:fb:9a:ce:a5:3f:8a:de:71:11:49:2b:38:02:
27:52:d5:2f:81:7a:d5:0e:b5:b5:10:17:3d:81:ca:
ad:c2:59:3c:a8:fd:2d:2c:6f:4b:ba:a4:b7:b3:3b:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B9:0A:7A:98:F2:C4:2D:FE:E9:2C:D3:E6:6C:0F:49:27:0C:5D:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G7kKepjyxC3-6SzT5mwPSScMXeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:19:3a:72:f5:39:9b:57:4e:ff:87:9d:20:37:f9:f9:1a:98:
2e:6a:d6:49:8c:6a:80:0b:9b:fc:16:43:33:2e:a9:ca:cb:0c:
4f:27:77:38:00:d8:bd:18:c1:ae:69:e6:0f:6f:e6:86:70:5b:
35:72:48:83:79:85:e2:71:cb:65:56:fb:fe:1b:0f:20:73:15:
0d:c7:8d:47:20:3f:8e:4d:27:60:2e:bf:88:d3:0b:d5:bd:13:
40:11:0e:ba:9e:83:ef:56:e5:7f:3b:57:0e:8d:c0:cb:95:bc:
c1:7c:eb:2d:11:8a:a5:e1:4f:9e:14:2e:ce:a1:bd:a6:67:fb:
c0:d8:a0:3b:8d:e2:7b:b2:18:2d:bf:b9:46:2d:81:85:7d:2f:
00:9a:6b:da:e3:ef:e1:88:79:8a:98:4c:bb:04:3a:7e:34:8c:
03:d2:cc:77:63:3e:0e:65:d4:21:c9:7c:b9:93:19:10:25:f7:
c8:36:2f:62:a2:4c:c2:16:bd:57:96:96:11:d5:1a:3c:b8:23:
25:26:ba:0f:2d:17:ea:dc:98:9a:ad:fe:fe:31:61:02:0e:d6:
1d:57:e8:28:a2:74:ad:8a:39:59:b4:bc:f4:ac:89:0b:33:67:
02:6d:89:3e:87:5a:dc:67:8c:17:51:c8:4d:d7:a6:ed:ca:c7:
d1:39:d7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:34:50 2025 by rpki-client