Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G8LFzAIVwtVTeCOE9rIarlw6o0I.roa
File: G8LFzAIVwtVTeCOE9rIarlw6o0I.roa (raw, json)
Hash identifier: O6yCLzYC2VmgL4MDC+UnLhA+NviErdc4025D+BC24rw=
Subject key identifier: 1B:C2:C5:CC:02:15:C2:D5:53:78:23:84:F6:B2:1A:AE:5C:3A:A3:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183AEEEDE5D5DD9BFA93A6F25CAB7EDCA48
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G8LFzAIVwtVTeCOE9rIarlw6o0I.roa
Signing time: Thu 06 Oct 2022 20:13:53 +0000
ROA not before: Thu 06 Oct 2022 20:13:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ae:ee:de:5d:5d:d9:bf:a9:3a:6f:25:ca:b7:ed:ca:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 6 20:13:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bc2c5cc0215c2d553782384f6b21aae5c3aa342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:c9:b6:8f:d5:64:ff:a4:8a:4d:ee:42:d6:
22:6e:a9:c8:00:e0:67:0a:04:4f:6d:46:32:fb:b1:
2d:ad:6c:85:15:9e:2d:45:13:24:a4:35:9a:ec:30:
ec:f0:9c:09:61:3b:d0:af:24:94:ea:af:5b:f5:56:
41:31:21:11:11:a0:08:64:48:e1:aa:dd:bf:22:72:
db:18:28:5b:a7:d5:7e:d5:4c:f7:65:9c:51:b9:42:
83:3d:45:fc:a2:a9:31:60:8a:98:81:07:cb:4b:c8:
43:dd:a8:49:b9:ec:8e:7c:31:13:86:1a:2d:af:ca:
68:4a:e6:b5:8d:4b:f1:de:c5:84:97:f9:e1:2e:b1:
bd:d8:d4:e0:47:37:64:72:bc:03:56:c1:e3:17:0d:
3d:24:21:94:74:92:0c:27:14:b7:35:55:cf:a7:fa:
94:b3:36:33:3e:65:e8:4a:ee:40:6d:dc:60:28:75:
b0:98:01:0b:9f:16:9a:30:2c:ad:21:bc:4a:f9:8c:
d1:62:3b:b1:22:be:5f:d1:df:c0:56:81:08:be:18:
1c:62:ae:b2:9d:59:50:83:f6:03:1d:17:5a:6c:8a:
73:a9:ec:ff:e5:8e:b9:58:f7:cc:7b:b8:8c:b2:69:
6a:8f:24:d0:e1:77:8b:0c:7a:4d:59:26:36:4f:52:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C2:C5:CC:02:15:C2:D5:53:78:23:84:F6:B2:1A:AE:5C:3A:A3:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G8LFzAIVwtVTeCOE9rIarlw6o0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:4e:ad:10:63:dd:2e:5b:d0:fd:25:a4:8c:79:cb:eb:c8:bc:
5d:40:c6:be:f7:03:fa:a8:8f:5f:9b:f1:cf:81:94:49:ac:b4:
40:74:87:14:49:61:a3:39:1d:75:7c:24:bb:f7:79:d9:18:a8:
9a:e8:c2:38:85:a4:b2:9a:d5:f2:9d:d0:09:f1:5f:db:60:10:
f7:83:1f:3b:4e:c8:f8:25:21:f7:1b:bc:f7:15:c2:8f:dc:55:
60:59:6b:47:4d:65:e3:15:80:1e:c6:c2:59:ee:59:1c:ae:9f:
1b:6b:a2:87:8f:ad:9a:b4:28:7b:6d:39:5d:2d:90:02:9c:8a:
17:9a:0f:75:fb:1b:bc:ff:3a:aa:87:35:96:78:5b:8d:b1:6a:
3e:5a:e5:2d:ca:39:1f:81:d1:58:f7:bf:0c:5e:92:d3:72:ff:
4a:be:ec:74:09:50:96:6b:59:f0:de:74:70:8e:13:5b:71:75:
fb:60:6e:a7:0b:1c:c5:c4:21:e4:2a:5f:ba:db:ec:95:82:4e:
5c:e4:8f:df:24:34:a6:86:c6:3f:41:52:df:d5:7e:08:eb:06:
22:b0:2d:35:c7:a6:d2:4d:e1:f4:f0:6d:dd:0c:48:c9:1a:fc:
e4:68:5e:79:aa:3c:2f:25:05:e3:a7:f8:bf:b0:d3:e0:d3:31:
0c:92:68:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:03:44 2025 by rpki-client