Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sga-5T1XBlroXXSqi5x2zNrWjxQ.roa
File: Sga-5T1XBlroXXSqi5x2zNrWjxQ.roa (raw, json)
Hash identifier: fPhBqsMSaoUix2Vvlrx7An7T7SWUtEfCih9Z10ZwTrU=
Subject key identifier: 4A:06:BE:E5:3D:57:06:5A:E8:5D:74:AA:8B:9C:76:CC:DA:D6:8F:14
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D16C8D460A46F22110B3F43051BA82E3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sga-5T1XBlroXXSqi5x2zNrWjxQ.roa
Signing time: Mon 07 Aug 2023 19:14:59 +0000
ROA not before: Mon 07 Aug 2023 19:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d1:6c:8d:46:0a:46:f2:21:10:b3:f4:30:51:ba:82:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 19:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a06bee53d57065ae85d74aa8b9c76ccdad68f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:75:4e:f2:87:70:89:eb:9f:28:1a:b4:f1:47:
01:06:52:62:68:2f:cf:f7:e4:4b:72:c8:fc:ea:e0:
b3:2d:2e:2e:26:46:c0:59:92:cc:eb:5b:65:41:bf:
45:2a:08:b7:32:73:5e:7e:40:1b:64:e0:29:a7:5e:
47:67:88:17:10:8a:fd:4e:7e:76:91:fe:6e:c7:f6:
f0:52:e5:0b:4a:f4:39:c5:92:1d:5f:b4:ac:a8:3c:
75:32:5f:14:da:f4:2f:f1:d8:49:94:b2:38:9a:bd:
73:14:20:da:1e:43:8c:76:cf:17:bd:5e:49:4b:80:
73:7d:32:a1:ed:3e:5d:de:9b:c2:39:c7:31:9f:91:
3c:31:ee:b9:36:b7:d7:71:4a:11:9a:22:b6:8c:eb:
3f:73:13:40:b8:69:c0:4a:89:22:c8:81:9b:f7:f5:
fc:42:53:13:f9:49:34:3f:d7:a2:4d:5a:ab:3b:c0:
6a:ad:6c:dc:53:dc:af:91:1e:39:3d:a6:6b:d8:47:
4b:f9:20:43:fc:86:bf:c2:c2:44:66:1a:1e:f1:78:
e2:12:72:30:08:4a:3e:84:db:c4:97:da:59:b4:86:
3e:94:bd:31:91:04:5e:e6:28:ab:7d:9e:b1:e2:38:
ce:7f:dd:7c:fe:7d:c1:7f:be:55:ac:ef:54:04:16:
23:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:06:BE:E5:3D:57:06:5A:E8:5D:74:AA:8B:9C:76:CC:DA:D6:8F:14
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sga-5T1XBlroXXSqi5x2zNrWjxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:a7:92:4a:84:81:51:0e:44:a0:48:8e:8c:e7:a0:b9:51:1c:
b0:4a:01:f2:df:3f:6f:3d:df:41:37:3f:57:4c:42:3f:ee:57:
9c:81:f3:50:a1:3f:1f:c7:f4:c5:5c:3c:11:5c:b3:e7:87:e4:
ae:66:b6:ea:8f:34:ae:93:2f:7a:f0:bb:74:65:2d:48:fc:8d:
7a:2c:9a:0f:4f:64:74:bd:bd:02:a6:10:21:39:22:24:4d:f1:
ed:96:c4:1f:1a:20:ba:48:82:ac:e6:a8:13:fd:05:64:5c:f0:
db:04:8a:29:0e:54:5f:01:16:37:61:25:05:ca:d7:b4:60:ed:
fa:33:7d:6e:22:e5:eb:ae:b8:78:4a:f1:40:0b:a9:76:35:ab:
01:3a:f3:29:20:72:4a:ed:44:4b:8e:31:63:49:d0:76:cb:05:
f6:d1:3c:bc:fc:3b:b0:0b:aa:b7:39:fd:04:2e:22:e7:67:bc:
e1:90:4f:ae:e9:45:21:06:37:a9:00:df:d4:0c:0e:61:5b:c8:
df:1d:d6:66:6c:c6:86:3f:ea:9d:6d:1f:d4:07:1a:9f:e8:ba:
b5:bf:7b:22:3b:49:2e:33:7f:39:2f:40:c4:37:a0:be:b5:8b:
eb:9a:8e:f0:5c:58:b6:e5:ab:c4:7f:c9:a1:a9:d6:5b:da:f6:
15:e8:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 23:14:44 2025 by rpki-client