Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G9ovHntEPKPRJ7QL3VyEll6xpM0.roa
File: G9ovHntEPKPRJ7QL3VyEll6xpM0.roa (raw, json)
Hash identifier: MUeF1EliVMeCa972nI4gtDxyVMkp1YuQVMci+1ab/Sg=
Subject key identifier: 1B:DA:2F:1E:7B:44:3C:A3:D1:27:B4:0B:DD:5C:84:96:5E:B1:A4:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A12713C5679FC474B62C63316E3CDF0BD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G9ovHntEPKPRJ7QL3VyEll6xpM0.roa
Signing time: Sun 20 Aug 2023 10:15:25 +0000
ROA not before: Sun 20 Aug 2023 10:15:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:12:71:3c:56:79:fc:47:4b:62:c6:33:16:e3:cd:f0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 10:15:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bda2f1e7b443ca3d127b40bdd5c84965eb1a4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:09:19:2f:c1:2f:1e:35:bf:b9:45:fc:8c:
96:4c:bf:05:0f:c9:da:53:0c:52:3c:8f:11:57:f6:
dd:29:96:44:f7:42:4d:0e:46:bc:5d:fa:fd:e5:64:
4d:57:1d:11:91:9c:60:1e:d6:13:4a:c5:4a:55:24:
b7:ca:3f:4f:95:d7:85:98:6c:53:cc:aa:e5:3e:fc:
a1:5d:85:07:79:fe:11:72:39:66:09:d3:01:62:ef:
7e:a8:87:bd:7a:1b:ba:2e:85:4e:da:8f:f8:71:bd:
fa:77:01:e4:e2:0b:e7:0f:37:55:9e:9c:ba:0d:6d:
c8:75:68:d9:6f:95:d3:80:b5:6b:4b:e8:11:70:02:
91:59:3b:08:42:af:2e:ac:3e:8e:8b:b4:b3:fd:27:
8d:d1:cd:66:f6:01:bb:25:ce:ae:4a:3c:77:4a:7a:
6c:59:12:21:01:c5:38:f4:40:d9:fd:88:8b:eb:2c:
e8:bd:7a:40:03:78:4d:0c:5c:15:8b:17:ae:f0:07:
99:66:ef:2f:3d:b7:5c:72:a0:49:a3:84:3c:0c:5d:
cc:bc:73:fc:47:80:c2:ed:e8:fe:db:ad:6c:85:15:
f8:3d:63:e7:32:1e:10:07:b9:70:cc:a5:60:86:51:
db:c5:54:fd:be:e0:58:17:1c:cb:38:cc:6e:c7:0d:
b2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DA:2F:1E:7B:44:3C:A3:D1:27:B4:0B:DD:5C:84:96:5E:B1:A4:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G9ovHntEPKPRJ7QL3VyEll6xpM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:a5:32:74:4d:69:26:6b:93:61:5e:f5:b9:1b:67:63:9e:85:
9d:c3:23:87:34:2d:6c:9a:b9:be:9b:0b:18:3d:f0:2b:69:c0:
bc:39:98:1d:97:fd:9b:41:73:af:d5:5c:b7:12:12:0b:49:72:
51:e9:35:76:26:d9:1c:d1:5c:5a:1c:f2:3d:3c:25:dd:d7:5e:
a7:b5:6c:69:c5:25:79:cb:0e:5d:0e:47:f6:e1:6a:7e:94:00:
11:10:a6:b5:5e:36:1e:d7:05:e8:00:c7:b5:c1:fa:69:ff:70:
39:60:2b:9c:f9:8f:66:85:aa:20:7e:31:8e:d5:bb:5e:68:df:
8d:5e:58:81:6f:39:c4:a8:15:26:bb:d2:7c:44:7b:0a:57:f0:
33:11:f4:11:18:c2:f0:8b:ab:97:03:ad:ca:57:61:d9:f4:24:
4f:4f:db:05:61:bf:f9:1f:a2:e1:e6:00:66:b0:2d:77:32:49:
2e:22:b1:2d:ae:34:ac:d1:99:bb:72:42:29:4c:16:28:03:6f:
d2:02:28:1b:87:30:42:fb:3d:c1:4f:c9:5b:4b:c7:d2:50:4f:
df:c8:09:64:73:66:62:eb:93:c7:56:96:b2:79:b1:d3:41:e2:
bf:5a:c0:ab:a7:2c:47:fd:38:2c:18:1e:fc:e2:fa:47:53:5f:
67:62:22:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:17:07 2025 by rpki-client