Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T-GnUegvgNGosGfEefCkqHC20us.roa
File: T-GnUegvgNGosGfEefCkqHC20us.roa (raw, json)
Hash identifier: FJhjztervD3kxDLbsCl8GuQxrs7QAnbNeYruUzwBoLk=
Subject key identifier: 4F:E1:A7:51:E8:2F:80:D1:A8:B0:67:C4:79:F0:A4:A8:70:B6:D2:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865A9103189A9E0E5D49E5178C3706DD91
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T-GnUegvgNGosGfEefCkqHC20us.roa
Signing time: Thu 16 Feb 2023 14:11:38 +0000
ROA not before: Thu 16 Feb 2023 14:11:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5a:91:03:18:9a:9e:0e:5d:49:e5:17:8c:37:06:dd:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 14:11:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fe1a751e82f80d1a8b067c479f0a4a870b6d2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9a:a2:63:bc:f4:f3:57:da:05:38:a5:84:f1:
c8:5e:32:c2:9f:ca:a6:7e:c2:8a:58:b3:3a:b3:a5:
b0:d6:c2:c5:e4:44:ab:aa:2e:d2:cb:c3:91:52:f3:
dd:80:c5:95:ed:32:04:9c:14:fc:62:a0:1a:33:51:
a5:72:87:95:13:87:91:b3:5c:43:16:fa:7d:7c:76:
f9:35:86:13:19:d4:3b:eb:df:aa:8c:14:63:13:c1:
a7:43:d0:54:84:af:ea:48:e5:6d:8e:7c:87:1f:6e:
24:e6:7b:48:18:ca:21:bf:dd:8d:1b:ff:1c:be:5f:
c1:61:c2:66:8e:6e:9e:89:75:76:cb:b8:36:30:24:
07:09:06:31:37:1c:db:b6:4f:6b:ef:87:44:2b:e2:
ca:7d:ca:e7:9e:2f:6a:d5:a7:59:c7:72:89:10:79:
a7:70:51:3a:b5:17:a0:83:43:0d:3f:16:59:84:e2:
32:24:2b:73:82:28:6c:a4:a7:7c:dd:12:52:0c:35:
08:91:96:41:67:16:8e:18:bb:e5:9f:57:2b:fa:a5:
0c:53:f8:41:63:ec:8c:27:ed:d5:8e:cd:69:ef:5e:
55:f4:b1:48:f2:da:ad:c6:99:62:69:8d:a0:e8:dc:
a4:38:67:f3:38:bc:0c:dd:59:be:54:08:0e:ba:ee:
2e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E1:A7:51:E8:2F:80:D1:A8:B0:67:C4:79:F0:A4:A8:70:B6:D2:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T-GnUegvgNGosGfEefCkqHC20us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:1c:ab:e7:c6:09:cc:d4:4d:c5:73:13:d1:22:ec:74:ec:10:
87:8a:0c:5e:26:88:7f:26:3b:0b:17:1d:ef:f1:34:c2:64:c6:
07:9c:e9:6a:70:e5:bf:f8:25:f7:ba:e4:45:42:c2:33:72:cb:
a5:4e:eb:63:b0:1d:b5:43:ff:f0:49:3f:6e:e7:82:ec:10:34:
f3:13:98:06:8e:c1:c6:5c:cc:3b:83:4e:b6:7b:59:b1:38:5a:
58:5c:30:ce:ed:2b:1b:71:9a:04:6c:c6:f9:2f:b8:6e:11:d5:
79:d4:b1:ac:be:79:4c:01:86:2e:67:c9:0e:28:37:6e:2b:3e:
e8:f9:9b:a8:26:4f:b6:9a:81:c6:71:44:bf:1e:3f:1c:a2:6b:
ff:dc:9f:0f:81:f2:aa:c9:d5:16:87:ee:44:eb:d2:a2:17:96:
43:a9:3d:6b:f1:ca:23:fc:15:2b:98:79:e6:e5:05:a0:e5:3f:
8d:13:78:d6:d0:c5:fd:d8:89:e3:9b:37:54:72:df:3e:e5:8b:
66:44:9a:48:85:3b:4e:cd:c1:2e:a8:80:17:d6:ac:ab:09:96:
30:0d:b6:c4:59:c7:9d:48:9a:9e:fd:52:26:9c:a9:2b:47:5b:
90:40:ea:c9:08:6b:2a:e6:fb:8f:ed:91:e5:dd:b3:48:03:27:
d4:ff:7e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:19:50 2025 by rpki-client