Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GRg7fFoyd_tH2o3Hp6IJ_Ubvv2Q.roa
File: GRg7fFoyd_tH2o3Hp6IJ_Ubvv2Q.roa (raw, json)
Hash identifier: v76CuVCW3XlocJUIh6S6ieGs4woJTMvNrQZA8HEJn94=
Subject key identifier: 19:18:3B:7C:5A:32:77:FB:47:DA:8D:C7:A7:A2:09:FD:46:EF:BF:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01833C8F6CBD67C459528105E1B477DF70D3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GRg7fFoyd_tH2o3Hp6IJ_Ubvv2Q.roa
Signing time: Wed 14 Sep 2022 15:12:55 +0000
ROA not before: Wed 14 Sep 2022 15:12:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3c:8f:6c:bd:67:c4:59:52:81:05:e1:b4:77:df:70:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 14 15:12:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19183b7c5a3277fb47da8dc7a7a209fd46efbf64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:29:ab:05:36:8a:52:ce:a0:17:a8:25:33:ae:
d7:3a:c0:eb:1e:11:20:40:51:4a:75:7e:a3:4e:21:
a4:4d:91:70:31:20:70:17:ae:df:c3:7e:a4:22:d2:
1b:a9:02:f4:81:83:80:72:10:b3:36:ed:05:1b:40:
b6:a0:49:2f:f6:3b:a5:9a:52:93:45:49:dc:9a:38:
de:78:91:bd:f3:55:35:9a:60:4d:84:bb:e8:5f:02:
e3:d7:cb:60:ea:99:27:66:cd:a0:a9:5f:b7:53:0d:
2e:9f:57:da:6e:0e:32:98:1a:6f:ce:2a:63:ee:d8:
9c:9e:18:fa:64:81:99:d7:d2:f2:b0:bd:ad:a4:ce:
81:82:81:15:a3:bb:b1:17:6c:4b:4d:23:df:1c:19:
c3:8f:c2:eb:b6:d5:30:4d:1f:c7:70:05:aa:58:13:
ba:e8:f7:a9:8b:13:e4:82:51:a5:d3:8f:64:cc:c3:
59:aa:10:b3:b6:e8:7b:06:5c:7a:74:35:04:18:66:
15:e2:12:c3:6f:d2:e4:24:95:f9:69:ca:5e:04:e1:
a3:61:31:68:57:81:88:50:9c:76:2a:42:ab:e2:ed:
b0:39:2f:93:d2:a2:9a:71:91:64:46:82:a2:76:45:
5d:1d:6f:7e:2f:09:8a:a2:b9:14:c2:51:d7:6f:02:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:18:3B:7C:5A:32:77:FB:47:DA:8D:C7:A7:A2:09:FD:46:EF:BF:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GRg7fFoyd_tH2o3Hp6IJ_Ubvv2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:e6:76:00:c5:41:6b:e5:17:f0:18:8b:ce:2a:dd:67:37:72:
97:6d:d2:12:e8:9d:2b:19:01:ca:9a:bb:32:5c:f2:b2:93:e3:
29:04:df:eb:07:44:0d:b5:e5:92:f2:fd:3b:04:27:d6:ce:d3:
83:a9:87:c1:20:2e:80:eb:b2:e8:66:c4:95:c0:fe:82:3b:2a:
e5:eb:16:cb:34:3a:86:e1:27:9a:c4:f0:f0:9f:23:19:20:c3:
01:c4:40:36:43:6e:23:86:cd:11:78:b9:ee:ee:35:38:59:61:
0b:d1:f3:65:85:68:61:f8:20:9c:58:c8:d1:c8:67:c7:b7:55:
63:af:a2:de:98:88:2f:b5:a4:e4:0f:f3:31:07:58:45:4a:d0:
59:33:71:b3:c4:8b:d0:9c:ad:fb:96:10:88:a5:dc:33:66:24:
01:eb:70:8d:d4:b9:61:6c:64:14:0c:04:7a:d0:42:9b:73:cc:
2d:17:ed:77:ed:86:bc:be:89:f2:32:20:5a:fd:ee:b6:ee:6b:
a7:36:09:e2:80:2a:31:16:02:91:0c:54:20:c9:f7:be:a3:4f:
b1:2a:13:46:8d:63:86:8b:1d:fe:81:80:a0:0d:25:b1:16:7c:
aa:57:cc:69:93:54:ff:9f:22:d5:ba:96:9f:57:cd:87:0b:22:
1e:6c:94:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:05:34 2025 by rpki-client