Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g-GTpPgXqA6iWjH8Cmnc20h1wyE.roa
File: g-GTpPgXqA6iWjH8Cmnc20h1wyE.roa (raw, json)
Hash identifier: 0IrALXpGXiK7ukgmjch15ZmfAHStjbzfIHA7YzCj7rQ=
Subject key identifier: 83:E1:93:A4:F8:17:A8:0E:A2:5A:31:FC:0A:69:DC:DB:48:75:C3:21
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B886A3C6DE49B7D446572DA51E6A66E2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g-GTpPgXqA6iWjH8Cmnc20h1wyE.roa
Signing time: Wed 02 Aug 2023 23:12:58 +0000
ROA not before: Wed 02 Aug 2023 23:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b8:86:a3:c6:de:49:b7:d4:46:57:2d:a5:1e:6a:66:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 23:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83e193a4f817a80ea25a31fc0a69dcdb4875c321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:57:9b:41:fe:3e:82:03:8f:09:ee:b4:1b:c1:
12:9a:10:b4:50:00:7d:41:a3:1e:31:ee:c6:28:89:
0b:47:20:21:5d:27:37:fc:e5:b9:d9:c4:c0:f8:f1:
cd:4c:39:81:46:93:94:76:dc:52:35:52:32:b8:db:
61:06:64:70:2d:34:b8:3e:51:86:57:ca:c9:2f:c7:
3f:63:0a:1c:e9:5b:cc:8d:b3:76:de:ca:b3:ba:8f:
45:54:56:25:50:b9:3b:f1:1e:8a:e5:81:24:6d:f7:
86:f9:98:d3:3b:f2:d6:02:5a:57:a7:71:6f:58:26:
5e:59:38:3e:8c:bf:fa:e9:22:55:a2:23:0d:ca:5c:
aa:bf:8c:92:96:66:3e:37:cb:5b:fa:6f:62:f4:75:
e5:e1:c4:91:15:2a:f6:99:e9:5b:4f:a8:fc:30:77:
9e:e8:71:64:2b:64:1e:42:0b:a0:b3:3d:ed:49:98:
e1:4b:c5:e1:2b:d7:13:ad:f4:34:c2:ac:50:cc:89:
c0:3c:26:9d:69:d8:12:e6:12:59:1b:d3:8f:93:dc:
df:d0:8b:47:9a:23:4d:c8:60:ac:8d:d1:cd:b2:df:
70:b9:bc:f6:25:dd:70:4c:63:c4:ba:e8:d2:5b:2a:
2d:0c:47:ec:e1:e2:3b:85:09:32:a3:0b:7f:89:9c:
44:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E1:93:A4:F8:17:A8:0E:A2:5A:31:FC:0A:69:DC:DB:48:75:C3:21
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g-GTpPgXqA6iWjH8Cmnc20h1wyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:07:0c:60:2a:3e:94:19:bf:e3:3e:2c:45:bc:bc:0f:3e:3f:
f0:74:86:a7:ae:ca:e0:72:b7:4d:a3:c2:01:2d:e3:5d:85:49:
95:75:1d:41:5a:bf:c4:73:9c:69:b4:ff:85:e6:38:08:be:f4:
27:bf:b0:35:e6:4b:ed:ea:77:d6:36:81:06:99:b7:ea:3f:eb:
61:63:22:7d:e1:f9:a8:5e:f5:15:70:c5:cb:84:6b:41:b7:02:
53:ae:51:83:c1:97:0b:18:17:f1:e8:4c:2c:e1:f4:ee:5a:7d:
bf:39:a6:48:97:8e:ff:a7:27:e6:38:9e:f8:4c:94:bf:9b:83:
aa:6d:7b:76:56:65:64:7d:7a:68:0d:0c:ff:ae:6a:8d:32:f1:
bd:39:cc:66:2b:07:5d:75:eb:a9:5b:96:6c:38:03:37:88:61:
80:2b:c4:66:a2:72:bc:30:db:97:43:2e:6d:b4:20:f4:5c:8b:
a6:07:52:14:c4:7b:15:a0:ce:10:d0:6b:11:f0:71:ea:15:9e:
79:ed:8f:73:ae:27:c4:23:fe:77:13:20:ca:c9:d1:17:41:dd:
54:cb:0b:c0:a3:7b:c4:b2:34:88:27:15:95:7f:6c:4b:63:33:
19:ab:04:3b:9a:94:ca:44:75:7c:67:b1:3f:3c:65:bc:26:da:
c7:11:57:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:52:17 2025 by rpki-client