Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GahZWK8wEUUp68VST5tsZOxZ-cQ.roa
File: GahZWK8wEUUp68VST5tsZOxZ-cQ.roa (raw, json)
Hash identifier: qFXW/k177eQboPWmbjmvkr2LcTjoUgb+xyveCFXsXxg=
Subject key identifier: 19:A8:59:58:AF:30:11:45:29:EB:C5:52:4F:9B:6C:64:EC:59:F9:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A3484B9CE09DA090B28FB16F5AB805B3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GahZWK8wEUUp68VST5tsZOxZ-cQ.roa
Signing time: Thu 02 Mar 2023 17:04:29 +0000
ROA not before: Thu 02 Mar 2023 17:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:a348:27ff/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a3:48:4b:9c:e0:9d:a0:90:b2:8f:b1:6f:5a:b8:05:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 17:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19a85958af30114529ebc5524f9b6c64ec59f9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:d3:c2:41:4d:12:e0:2b:a7:d4:9c:65:bb:
25:24:27:77:47:ef:4b:cc:cf:15:47:1f:56:db:23:
2e:8f:44:45:61:1e:2d:80:e2:65:e8:bd:50:c9:55:
16:f7:ce:24:2f:29:ee:60:68:73:18:98:79:b5:19:
e6:0f:b2:25:b4:cb:d3:7d:60:31:d3:dd:36:1d:c7:
cc:c0:1c:6a:c5:e2:8a:77:7c:4f:f0:78:72:f3:05:
65:e4:ee:f3:7e:bc:a7:cf:93:07:c8:91:d7:43:ee:
e3:39:5d:ab:73:78:fd:e3:12:43:8d:20:2a:e5:af:
6b:2a:7b:d5:e3:36:bd:37:7e:f3:4b:97:4c:1f:e1:
8d:d1:a8:13:9d:19:36:50:1f:e1:bf:ef:ab:d4:8c:
99:07:f5:e3:73:9a:84:d5:39:1b:8d:29:f1:d2:7e:
21:a8:d6:7f:37:90:f0:8c:6b:03:96:36:60:af:4b:
c8:2e:6b:f0:c7:19:30:db:3a:5f:f3:32:62:15:4b:
7c:23:bc:ec:ae:fe:49:36:09:96:ba:e8:45:29:92:
2e:00:7f:7d:83:3f:2d:52:12:08:34:a1:c4:ab:68:
84:df:a5:9f:7a:30:a9:8a:b0:f3:3f:01:7d:a6:a2:
3c:6a:48:a9:b0:a8:52:c6:20:70:23:c0:30:fd:8c:
e6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A8:59:58:AF:30:11:45:29:EB:C5:52:4F:9B:6C:64:EC:59:F9:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GahZWK8wEUUp68VST5tsZOxZ-cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:33:bf:09:b6:03:5a:69:fe:38:5e:6e:2e:0b:88:ac:a3:25:
08:35:81:bb:22:03:af:ee:e6:4b:1d:f2:6c:76:85:97:3a:15:
72:92:e3:cf:af:80:26:60:c4:18:89:76:6f:4c:0d:b3:55:02:
77:db:3e:85:1d:18:24:41:61:39:e8:7d:08:c5:96:86:76:3f:
99:2e:85:b7:63:da:8e:7f:ff:ad:40:bd:63:7b:71:ef:6e:f1:
ae:3e:1b:cb:bf:86:c7:e3:93:79:48:97:59:13:a9:01:96:e7:
c3:f0:36:e5:42:d6:f0:69:d4:38:2e:45:07:b0:25:f9:04:1a:
7d:b0:a5:b7:5e:8a:4c:35:fe:fc:53:67:8f:4f:61:1a:f7:3c:
aa:7a:c8:ec:0e:66:60:6a:83:1f:e8:2f:0b:89:6a:83:7c:df:
f6:5f:be:dd:c3:22:f8:f2:85:5e:a0:28:3b:df:13:52:23:58:
31:e3:06:01:fe:ce:55:6d:19:9c:28:9b:bc:78:20:82:02:a0:
42:a5:05:35:d7:c5:06:9f:90:4a:be:f8:04:29:3d:7a:5d:bc:
83:56:27:4c:6f:91:a4:ef:6f:8f:87:bc:4b:26:b3:81:47:81:
08:a1:f4:17:02:57:c9:7d:59:97:ed:2c:f0:7c:8c:a4:7e:dc:
2e:9a:b6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:21:42 2025 by rpki-client