Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gy51h0tCn4Ibyxhy6QHrMXN759E.roa
File: Gy51h0tCn4Ibyxhy6QHrMXN759E.roa (raw, json)
Hash identifier: 9wCa+rnhydK6kcg7URjFp0mwEAnPaB3PIrYp+KsZtOM=
Subject key identifier: 1B:2E:75:87:4B:42:9F:82:1B:CB:18:72:E9:01:EB:31:73:7B:E7:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7A42E7AB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gy51h0tCn4Ibyxhy6QHrMXN759E.roa
Signing time: Sun 10 Apr 2022 23:10:58 +0000
ROA not before: Sun 10 Apr 2022 23:10:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2051205035 (0x7a42e7ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 10 23:10:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b2e75874b429f821bcb1872e901eb31737be7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:03:0a:13:04:b0:b4:b1:0e:e0:d8:a0:ad:
7d:eb:cd:85:0f:4e:37:b2:08:ee:d5:5c:8c:cb:ca:
17:4a:17:5f:f4:48:24:d5:c2:a0:7c:16:46:be:4c:
23:4e:56:7f:85:29:d3:b5:8f:a2:9f:93:fc:9e:67:
76:60:f9:6d:d0:73:8e:d8:ff:dc:f3:53:09:45:4f:
a9:32:39:ce:75:c3:84:84:a7:bc:0a:14:de:47:47:
6f:5b:1e:56:34:5c:4c:8b:f1:11:e5:1b:ad:f7:34:
b6:f8:e4:e1:0e:f9:9a:dc:33:bd:c0:80:a4:74:b4:
7c:aa:ce:c6:8b:3c:00:0a:35:33:10:89:c8:1e:89:
b3:1e:dd:d0:80:f4:8c:4a:98:ec:a6:2b:75:10:74:
35:18:d0:a7:80:70:03:9a:c5:0b:d7:21:3b:38:39:
5d:bc:c9:52:29:90:31:1a:57:7e:38:43:bb:f1:a7:
da:af:a8:aa:c4:8d:fa:21:8e:b8:6e:b7:59:57:e0:
29:21:73:67:bd:a2:4f:61:3f:69:a0:a3:55:d6:eb:
dd:40:89:37:fa:b8:42:ba:f3:38:01:f1:2c:64:03:
42:b7:9d:c4:ed:d6:21:9d:df:26:5a:2c:96:37:c0:
a4:5a:84:55:74:22:d0:98:a0:68:13:1e:c5:17:5d:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2E:75:87:4B:42:9F:82:1B:CB:18:72:E9:01:EB:31:73:7B:E7:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gy51h0tCn4Ibyxhy6QHrMXN759E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:8f:3e:76:97:23:7e:db:4e:62:ab:0b:48:4e:20:dd:66:24:
8c:ef:d3:eb:8a:a0:86:37:71:22:d8:23:3e:19:a6:08:2e:65:
ec:03:10:d5:6f:b5:3c:be:1d:e2:fb:5f:d5:02:c2:28:5c:cb:
f9:8c:30:a2:a6:27:d3:2b:b0:1a:87:e8:60:0c:f4:99:3c:48:
18:c1:6d:bb:64:f7:89:33:21:95:bb:63:4e:d2:74:e0:09:16:
59:31:11:e9:6c:d3:82:14:9b:a7:16:9e:1d:7d:cf:a8:3f:bf:
16:f5:49:cd:38:f3:74:69:1e:60:22:1c:ab:22:89:26:bf:7b:
76:73:39:75:23:40:08:a1:5c:bd:91:93:5c:ef:dd:1a:b5:62:
78:fc:bd:de:92:8a:ef:d5:4c:ed:6a:87:bc:28:bb:77:0c:02:
2b:d9:3d:6c:f4:90:36:7f:dd:b1:b7:7b:ce:b5:2a:d7:17:6f:
49:e9:a7:97:e9:94:b8:1e:72:c6:a4:ae:5c:b7:ae:ea:cb:d6:
05:27:1b:96:29:80:d8:21:da:0b:75:c6:3a:ba:53:21:5e:6d:
d8:de:9a:71:99:b0:5e:4a:44:f8:62:f4:d5:4b:3f:25:56:0e:
53:bf:16:af:b9:a2:9d:70:08:e1:00:94:76:7a:ea:29:b8:fc:
38:bb:13:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:27:46 2025 by rpki-client