Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gn8CvpcEmzrBePSvnkpsuZjkSxk.roa
File: Gn8CvpcEmzrBePSvnkpsuZjkSxk.roa (raw, json)
Hash identifier: DP/Zujg6KUvTbe22g+gttikHTV+rNSUL5NQ5dQkSlKY=
Subject key identifier: 1A:7F:02:BE:97:04:9B:3A:C1:78:F4:AF:9E:4A:6C:B9:98:E4:4B:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C8CF082CA8703417226C34C1F8815171
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gn8CvpcEmzrBePSvnkpsuZjkSxk.roa
Signing time: Sun 06 Aug 2023 03:05:58 +0000
ROA not before: Sun 06 Aug 2023 03:05:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:c8ce:1fd9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c8:cf:08:2c:a8:70:34:17:22:6c:34:c1:f8:81:51:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 03:05:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a7f02be97049b3ac178f4af9e4a6cb998e44b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:eb:9f:f2:e5:64:74:6d:90:b4:72:47:59:e1:
a1:10:bc:ee:5f:05:ac:e7:84:03:35:ef:37:06:1e:
2e:27:26:4e:f1:92:d5:ee:28:57:2b:cc:74:f5:9c:
94:68:86:5b:15:6e:f1:6d:f9:8b:b2:32:2a:ab:4f:
67:46:b4:8b:fd:92:dc:c0:3f:d9:6d:94:9a:3d:43:
06:0d:6e:d1:db:ad:ee:2c:5d:c1:24:ca:c1:e9:dc:
79:b0:b5:0b:5c:a3:7c:4d:2f:48:fc:d5:f3:fb:19:
42:34:9b:c9:22:43:82:2e:32:5b:a0:bb:fe:54:63:
d9:59:71:0a:dc:15:ac:49:ea:f4:0e:e9:52:1f:c3:
3d:6a:b1:9a:ae:1c:66:78:ee:1d:30:43:11:1a:f7:
6f:ba:cd:f1:bf:80:23:5c:b9:df:b2:ef:bc:a6:3b:
11:ac:da:23:d5:80:b4:80:13:29:bc:64:7c:5c:09:
aa:8a:d3:9c:15:d2:86:91:17:00:a3:3c:2d:ec:93:
9b:6e:70:e9:61:e4:95:de:de:90:db:ca:63:e5:fd:
22:83:6e:64:c9:8c:5f:83:6d:4a:ba:d8:c7:20:0d:
25:3e:ae:76:85:ec:da:52:8c:d2:d8:7e:cb:aa:5f:
6e:96:b4:41:cd:b0:d6:15:81:ba:7c:f6:94:7e:cf:
83:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7F:02:BE:97:04:9B:3A:C1:78:F4:AF:9E:4A:6C:B9:98:E4:4B:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gn8CvpcEmzrBePSvnkpsuZjkSxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:9e:34:37:ce:0d:c3:10:f2:10:21:85:73:21:51:cf:dd:66:
09:9e:77:20:9b:84:b2:2b:4c:51:47:99:f2:c1:9e:c3:29:cf:
6c:62:a2:6f:bd:08:2f:12:16:54:b3:77:be:8c:2a:de:1c:b8:
87:08:09:9b:e2:ac:de:53:15:a3:05:fd:72:c4:bd:29:61:d1:
1b:15:d7:57:ed:ad:04:34:01:e4:a8:17:b3:6f:01:f6:c0:3d:
3e:09:79:06:43:f2:c4:28:ff:10:5d:32:12:2a:7b:62:7c:f7:
b5:61:76:ff:0e:69:5c:3c:58:07:3c:25:2c:60:9c:e7:d6:f0:
2e:4f:d7:b8:8c:c4:a0:50:48:c8:4d:95:41:17:65:a9:a1:57:
ff:fc:3f:4d:90:18:a7:61:68:a6:6b:42:ed:02:79:79:36:9a:
c6:51:f5:de:93:a1:02:81:73:c7:f5:50:25:82:c2:30:a9:1d:
d4:6c:c6:f5:77:a1:93:ef:1b:67:4b:f8:05:7c:a1:b3:77:24:
d2:1b:42:fc:54:f1:34:f0:47:20:f6:bf:21:43:4c:24:a6:11:
cc:5a:e6:5b:c9:a7:15:50:64:02:f9:1a:b6:c2:22:75:e3:39:
c1:5a:46:b5:f6:a6:a2:77:4c:e8:29:4a:8d:7f:04:ae:b3:8e:
e9:42:28:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:50:28 2025 by rpki-client