Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GW73XvNeFa3bf-WP4jyGKoOC3Xo.roa
File: GW73XvNeFa3bf-WP4jyGKoOC3Xo.roa (raw, json)
Hash identifier: zLw4S9Csf0wGhWN3o/z/2BQ2cy8yxtCnVwGBJT/DeBY=
Subject key identifier: 19:6E:F7:5E:F3:5E:15:AD:DB:7F:E5:8F:E2:3C:86:2A:83:82:DD:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01845872B82883B03F85D58C0CC943897FF2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GW73XvNeFa3bf-WP4jyGKoOC3Xo.roa
Signing time: Tue 08 Nov 2022 18:13:43 +0000
ROA not before: Tue 08 Nov 2022 18:13:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:58:72:b8:28:83:b0:3f:85:d5:8c:0c:c9:43:89:7f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 8 18:13:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=196ef75ef35e15addb7fe58fe23c862a8382dd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:58:1b:a4:c5:6e:b6:11:b5:5d:3b:2c:4a:
26:e8:75:1f:a3:b0:77:81:7c:c4:12:b1:ed:67:03:
fe:8f:c5:36:1d:00:44:90:4e:be:98:6a:9c:84:be:
7b:e7:59:f2:40:9f:5e:c6:e0:62:58:f3:09:00:a7:
21:e9:93:42:e2:11:ca:b7:13:40:8e:6b:e7:d1:a7:
8b:32:8e:ce:f4:5b:81:c6:47:4c:33:11:41:ce:b5:
26:09:0a:f6:40:ca:fd:db:3c:86:ae:f0:e9:10:8e:
30:c6:cb:96:7c:ee:1f:76:78:56:8f:7d:6e:9f:b6:
40:f8:fe:09:76:b4:14:a3:50:5b:96:2b:13:d6:be:
9a:9f:91:34:a3:99:a8:00:29:85:6d:38:de:37:fe:
c3:08:90:85:a2:43:08:f1:6a:62:91:12:a4:d7:fe:
22:f9:82:7c:e8:e0:04:2c:96:81:a3:44:0c:88:02:
1f:5f:fd:c6:a7:e3:65:b5:7f:a4:41:9d:c7:ae:6e:
aa:b5:06:21:75:d4:ac:04:5c:a1:23:86:a5:4d:a3:
d5:15:0b:41:f0:70:25:58:16:5e:24:b9:de:4f:48:
d4:56:d8:3c:e6:db:f5:58:72:21:04:7d:c1:d8:f1:
85:c3:cb:8c:0f:d5:49:89:b4:ab:ba:0f:89:27:61:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6E:F7:5E:F3:5E:15:AD:DB:7F:E5:8F:E2:3C:86:2A:83:82:DD:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GW73XvNeFa3bf-WP4jyGKoOC3Xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:66:eb:83:fc:35:2c:8f:5f:39:26:af:08:19:df:13:aa:1c:
43:de:0c:55:ed:42:1a:b1:cb:55:28:37:3c:63:9b:a9:42:fe:
e4:35:bd:5e:6f:b3:fb:fd:d7:1c:68:90:24:ba:a4:e8:85:bd:
fe:7c:e9:29:2a:3a:26:9a:5d:06:7c:ce:7b:8e:0f:36:d4:82:
5d:59:4c:bd:1e:6f:22:dd:b9:5c:a2:1d:55:9b:b1:7c:2b:53:
58:fd:cf:d9:6a:76:93:7e:64:26:f9:b0:35:44:04:97:48:cd:
46:f9:dc:2b:ab:d9:ba:cb:f4:d3:c7:36:14:0d:b0:32:f5:51:
f1:c6:0e:0f:37:6b:ad:1d:0e:29:44:46:9a:33:1e:50:0d:65:
4d:de:14:e1:73:49:00:b3:ec:c1:03:bf:98:47:52:21:a2:79:
85:b2:5c:6b:90:66:8c:54:e2:e0:d1:11:40:54:ac:fd:00:6e:
08:24:f8:b7:6d:bb:60:8e:05:8b:b4:f6:d4:49:c0:8d:63:42:
98:30:04:0c:3a:73:73:66:79:9a:09:de:03:76:19:57:e9:c3:
ee:e8:64:56:1d:b3:90:9d:b3:76:67:9e:af:ba:0f:6d:f1:5c:
61:17:8f:f4:12:05:bb:6e:9a:78:9f:ff:cf:91:0a:0e:5c:99:
26:7b:5e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:03:56 2025 by rpki-client