Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Gal9op6eXF6JaXkgHO85VV3vms.roa
File: _Gal9op6eXF6JaXkgHO85VV3vms.roa (raw, json)
Hash identifier: uA1fD2X7u/yj/b6sEtMXPaXP9F9FWGlQGun5BiD/8LQ=
Subject key identifier: FC:66:A5:F6:8A:7A:79:71:7A:25:A5:E4:80:73:BC:E5:55:77:BE:6B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 87F3FC5F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Gal9op6eXF6JaXkgHO85VV3vms.roa
Signing time: Sat 28 May 2022 17:10:13 +0000
ROA not before: Sat 28 May 2022 17:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2280914015 (0x87f3fc5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 28 17:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc66a5f68a7a79717a25a5e48073bce55577be6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:1f:c2:22:50:6d:d1:91:15:a4:a6:81:3e:
ab:e7:e1:6f:ac:8b:17:6c:55:e5:05:c3:36:d5:dc:
e0:8f:6a:6f:67:ab:69:bd:37:c7:34:1b:9a:cc:0e:
f4:ae:8a:45:78:b1:de:6a:2d:c5:7c:83:53:10:5e:
a7:35:fc:77:40:c5:02:a4:1b:bb:b9:91:1e:97:d1:
d6:31:71:d4:92:09:91:85:de:fb:61:82:10:5e:f1:
0d:e4:f1:71:71:91:4d:55:a3:e9:97:4f:01:0d:66:
9a:21:a5:cc:f7:88:9b:9c:d3:dd:8a:28:ef:c1:e3:
56:16:96:2c:2a:81:72:d5:8d:39:6e:b4:8d:ef:ae:
6d:24:b4:7a:68:b8:f2:2f:29:75:f0:b6:44:ad:c6:
2e:98:9f:cf:a3:38:62:c3:77:69:7c:1b:8a:2b:65:
98:2d:fd:39:d6:e3:f6:2d:a4:20:b3:e2:b4:7f:17:
8d:be:a1:78:fe:83:35:fe:1f:39:00:07:ef:8b:01:
f2:05:2a:4e:52:a2:5f:fb:bc:9e:2a:e8:a5:a2:53:
0b:15:b5:29:b5:f3:d5:18:01:df:90:48:ba:45:46:
42:54:c3:a8:35:d8:18:a3:32:c5:71:12:1b:7c:de:
69:8c:74:a7:3f:ca:8d:39:63:88:66:d5:2c:af:48:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:66:A5:F6:8A:7A:79:71:7A:25:A5:E4:80:73:BC:E5:55:77:BE:6B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Gal9op6eXF6JaXkgHO85VV3vms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:14:9e:4b:cc:d3:25:2c:5c:15:6d:3f:6f:ce:c3:a6:83:8e:
87:55:ec:08:d7:9f:af:75:b5:b2:13:bf:db:68:04:d0:8b:0a:
e7:4a:17:56:8e:0a:df:18:d3:4c:c6:d6:ef:61:eb:12:e4:53:
0c:86:62:d6:04:8a:c3:72:ce:46:c0:01:c1:1f:ad:bf:7e:c7:
fd:04:a0:82:0e:d1:7a:1d:5c:a7:d3:0b:df:0b:e8:19:1f:73:
11:3b:a2:fc:e3:fb:aa:ef:00:25:63:5a:73:64:3c:0c:ba:94:
16:7e:a3:23:d9:14:78:28:1c:40:e4:73:06:8a:99:a5:bb:67:
4f:b3:4a:b2:8c:70:79:86:54:24:4e:f6:f0:3d:5f:1e:fd:96:
0b:b2:32:6b:7f:21:88:d9:2d:8c:78:31:16:4a:81:8d:f3:86:
ee:3c:f4:b1:d6:54:70:35:14:20:dd:57:bc:d0:b2:17:56:03:
c5:77:a7:46:83:23:7f:86:fd:29:af:5f:cf:00:ea:e2:f3:67:
86:4a:a9:ce:31:f3:8d:26:42:0c:db:ca:f8:ec:52:51:7f:4b:
3f:b3:0c:04:71:b1:72:28:a3:92:9d:d9:c1:6c:4d:b8:cd:05:
c8:e6:3a:35:a7:90:52:74:1f:15:0a:ed:4c:46:9e:d2:f7:80:
1f:b5:7a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:22 2025 by rpki-client