Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g-Kfoo4EF-e-MzRL1NqVLqU2lmA.roa
File: g-Kfoo4EF-e-MzRL1NqVLqU2lmA.roa (raw, json)
Hash identifier: lu16S1iaQeiQzSD6XLMv8G5VJUVmhNJeLw6TqQNnreg=
Subject key identifier: 83:E2:9F:A2:8E:04:17:E7:BE:33:34:4B:D4:DA:95:2E:A5:36:96:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AD8D4FB77F8AB16F369958F7E7548BFA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g-Kfoo4EF-e-MzRL1NqVLqU2lmA.roa
Signing time: Mon 31 Jul 2023 20:04:26 +0000
ROA not before: Mon 31 Jul 2023 20:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:ad8d:3df1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ad:8d:4f:b7:7f:8a:b1:6f:36:99:58:f7:e7:54:8b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 20:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83e29fa28e0417e7be33344bd4da952ea5369660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:57:ae:51:8e:65:b7:4e:23:78:36:69:91:
71:ed:9f:7a:ef:35:04:04:0e:0d:1e:bf:ba:80:0e:
e8:13:f7:c1:4b:0f:ec:e4:04:b0:f6:2c:0e:a6:85:
fb:45:45:63:11:0f:09:84:b8:fb:3a:66:d4:0b:0b:
fe:33:55:a9:7f:44:2f:9f:c2:1b:74:1d:1b:e7:1c:
ce:19:cb:ad:2a:7c:db:c9:26:a8:d1:6e:ef:ab:fe:
b7:75:d5:79:48:0c:4c:4a:ea:a9:17:12:25:e3:d1:
9d:e6:d5:49:0f:ec:de:50:a4:c0:d5:44:1d:c7:97:
45:95:d2:77:9c:f7:3f:75:52:ff:76:88:fa:b2:c5:
7c:6b:08:91:55:ca:3f:f8:d9:4c:cb:41:b7:47:12:
23:55:42:f9:11:aa:bf:5f:f7:aa:fe:fc:3b:64:1d:
9a:ae:9d:5d:56:00:21:df:22:62:37:d6:49:db:ac:
b9:78:13:5f:39:62:18:09:0d:2b:3c:f8:08:18:99:
63:f1:33:9e:6f:28:2c:97:0d:86:5e:4f:22:82:8c:
93:77:bc:9a:72:87:99:61:ec:0b:b5:6a:e6:7c:fb:
07:39:d2:5c:78:27:71:f7:91:47:c1:ea:7d:97:07:
3e:e3:09:a5:6c:e2:83:7c:03:bb:0a:65:ba:5b:b8:
3f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E2:9F:A2:8E:04:17:E7:BE:33:34:4B:D4:DA:95:2E:A5:36:96:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g-Kfoo4EF-e-MzRL1NqVLqU2lmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:a8:42:07:6e:c9:42:55:af:f0:0f:c9:f4:40:de:f8:1a:00:
39:3c:b2:57:62:66:f9:3c:72:8d:45:9b:b2:ab:3a:9a:0d:1b:
b4:7f:b3:58:f1:4a:d0:9f:d9:f9:61:7b:50:1b:22:35:b1:1a:
91:82:39:77:dd:46:55:99:d2:23:d1:7b:c0:56:19:49:cf:75:
eb:ee:04:63:63:82:d6:1a:18:ae:38:21:b0:0e:ae:bd:29:b6:
bb:e3:23:80:5e:6e:f0:fb:2b:1f:46:72:24:04:e2:d4:a5:48:
0b:1c:0f:c5:a4:64:26:f1:ad:89:78:43:c7:53:c0:39:4d:c4:
74:0f:35:b1:e6:26:0c:d6:b0:c6:b9:2f:0e:1b:b6:88:be:05:
a6:ad:42:c3:b9:7b:3c:83:5a:e0:a5:8d:10:1d:5b:64:be:13:
ab:89:58:f5:cb:d6:17:0b:44:95:6b:69:b7:95:43:12:53:33:
74:54:0c:91:60:d7:6e:29:19:3b:83:97:e4:c0:73:81:b0:3b:
20:72:99:b8:df:dc:07:63:b1:9d:00:53:65:e3:9f:0f:1b:f1:
57:49:a8:80:05:cc:93:6c:45:f2:49:46:69:77:66:c1:15:f4:
33:99:26:c7:48:b4:b2:73:0f:ee:78:fb:19:de:29:01:19:84:
c6:2f:1c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:21:01 2025 by rpki-client