Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GQjFwpKwnmUXEnHKk59SICQuRnw.roa
File: GQjFwpKwnmUXEnHKk59SICQuRnw.roa (raw, json)
Hash identifier: 4F4ZmyESwfhq9v+aoxl/lT2CEzmhOyQRR07PF/hdeR4=
Subject key identifier: 19:08:C5:C2:92:B0:9E:65:17:12:71:CA:93:9F:52:20:24:2E:46:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7FA61627
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GQjFwpKwnmUXEnHKk59SICQuRnw.roa
Signing time: Fri 29 Apr 2022 19:11:41 +0000
ROA not before: Fri 29 Apr 2022 19:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2141591079 (0x7fa61627)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 29 19:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1908c5c292b09e65171271ca939f5220242e467c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:09:d7:b4:a6:32:c5:59:07:fa:c4:67:3a:
61:4c:90:74:61:82:46:e1:c4:eb:2d:40:34:c7:02:
5c:e9:76:15:3a:9d:da:25:57:ee:17:29:cc:43:7d:
55:22:18:e8:9d:32:02:05:fa:b2:99:94:f1:2c:fc:
75:4a:f0:34:be:b9:24:28:08:f5:eb:9e:c1:ad:ff:
b0:65:c4:af:69:ba:65:bf:ae:40:6e:a0:a5:6e:c0:
8f:d7:c6:17:69:61:55:02:18:b5:e2:43:10:e9:6b:
2d:b1:12:a0:38:42:a5:63:ae:3c:3f:e9:9c:00:3c:
5b:07:81:c8:76:b5:3d:8a:cc:a7:df:14:47:f7:4d:
be:e1:7a:f5:f5:6f:48:9f:16:72:b2:98:e5:e7:0b:
30:80:b1:86:44:00:ec:42:94:48:4a:34:fe:ec:a8:
9d:39:3b:b2:b3:f0:69:30:3a:7f:5d:58:07:9b:3f:
e3:10:43:cb:9c:87:2d:64:b7:e8:bc:7a:13:55:ef:
45:08:d1:da:b6:40:39:ea:0b:ac:4e:54:82:a7:39:
2a:b1:57:50:91:93:31:f6:69:58:c5:a6:c7:4a:6b:
97:ec:5a:89:fa:28:32:d9:86:37:40:5c:0e:d6:59:
ff:60:af:68:d6:04:91:05:24:fc:b8:21:ce:a0:99:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:08:C5:C2:92:B0:9E:65:17:12:71:CA:93:9F:52:20:24:2E:46:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GQjFwpKwnmUXEnHKk59SICQuRnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:de:de:20:5d:e6:5e:be:07:70:7e:6d:7a:86:b7:a6:70:1a:
23:05:c0:fd:39:b4:4f:12:af:32:6d:d1:1e:db:7f:6a:b5:c4:
82:0a:df:a6:73:cc:66:ed:c1:ca:26:89:d2:f3:4a:a9:51:9d:
0a:45:61:65:77:03:89:20:9b:43:6d:53:f7:0b:25:ec:87:8d:
b7:95:04:e9:26:d4:4a:3d:ba:52:dc:ae:2c:a5:20:34:5a:78:
3b:1c:fc:ed:21:56:8e:29:80:5b:f2:dd:e7:01:29:17:d2:98:
ae:44:40:0b:76:e5:4c:24:b1:46:7c:a8:6a:85:94:a2:5e:57:
9a:e5:b2:5c:3e:df:70:37:ef:c3:58:f0:b7:26:50:c3:c3:b2:
9b:18:97:54:d6:ab:89:a2:c2:dd:bc:6c:7d:7f:6c:d1:59:47:
64:cc:a1:9c:57:dd:18:ea:89:fd:b8:ff:f9:bb:e5:23:a8:5a:
e0:e1:48:08:ef:2e:24:c3:de:a7:33:01:e1:ef:e0:18:4e:7a:
10:88:cf:5f:b1:8b:4d:0d:20:f0:2a:f6:12:99:35:31:94:b6:
98:e2:f8:71:bf:ac:4f:46:17:5a:90:10:5d:6c:fc:51:3b:10:
9a:eb:8c:04:20:ec:89:6f:c1:f1:5c:57:39:7e:d7:94:10:d7:
d0:69:68:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:11 2025 by rpki-client