Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gAYjMp_lQz-GepODqSPPhjn3k0E.roa
File: gAYjMp_lQz-GepODqSPPhjn3k0E.roa (raw, json)
Hash identifier: QxDJ1xtMVw4oVahRFzBgHfseHGdqIcURAWWxaqNSt/4=
Subject key identifier: 80:06:23:32:9F:E5:43:3F:86:7A:93:83:A9:23:CF:86:39:F7:93:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184A3213F2E84D76B9F13471C27E9203B02
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gAYjMp_lQz-GepODqSPPhjn3k0E.roa
Signing time: Wed 23 Nov 2022 06:16:15 +0000
ROA not before: Wed 23 Nov 2022 06:16:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:21:3f:2e:84:d7:6b:9f:13:47:1c:27:e9:20:3b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 23 06:16:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=800623329fe5433f867a9383a923cf8639f79341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7a:cd:94:fc:45:41:41:61:c2:37:7d:85:12:
7d:69:c1:62:1a:e9:45:24:25:dc:a8:74:64:ab:17:
a1:ff:bd:69:be:b2:ae:bd:6d:0c:19:a9:52:83:b2:
32:18:17:5e:d0:7a:dd:43:6e:f0:81:3d:0a:d0:00:
4f:12:3b:bd:90:cd:01:d7:55:00:00:d3:00:a3:a9:
21:60:ca:5f:9e:32:e6:3a:ee:4d:07:6e:a6:19:fc:
2d:68:ff:91:b0:07:8e:f3:dc:53:c2:67:6d:46:12:
54:f2:40:9b:64:d3:52:98:69:cf:71:0e:6e:40:ac:
64:56:4a:0f:fb:94:7a:ee:c4:d6:07:4c:07:97:2b:
34:ac:17:17:eb:be:82:5c:b1:22:39:48:e6:43:b8:
a9:d2:90:81:35:77:ee:65:1d:49:c1:dd:51:8d:53:
91:97:84:cf:65:c1:90:2f:5d:3f:0f:c8:2a:37:b9:
3b:7c:05:29:76:5d:da:09:c7:78:f3:bc:84:eb:f9:
96:cc:f6:72:58:4a:7c:eb:e4:c8:b2:ee:56:00:fc:
73:e8:50:da:0d:c3:96:a6:8b:ef:64:b7:c0:1e:28:
2f:9f:40:6e:bc:a9:07:88:1b:f5:97:d1:81:6a:4b:
80:29:b8:f7:7b:c9:08:73:fd:a3:ad:0f:86:61:ec:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:06:23:32:9F:E5:43:3F:86:7A:93:83:A9:23:CF:86:39:F7:93:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gAYjMp_lQz-GepODqSPPhjn3k0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:67:d6:b0:24:7f:4e:d2:86:85:e2:fd:ed:38:7c:72:12:aa:
00:2c:d9:1b:98:13:f0:50:21:f8:c5:04:59:dc:77:86:7f:e9:
8e:8b:52:ce:d3:d0:99:d2:a1:d7:94:cc:a9:b3:45:8b:98:a0:
65:3e:10:be:70:4b:90:e7:d3:f8:6f:68:a1:7c:7a:77:16:ab:
41:50:59:c2:0e:8d:0f:a5:57:7b:2f:41:34:ff:1d:c0:9b:64:
43:3a:f0:22:fa:b2:1f:c1:a0:d7:30:20:cd:a0:ce:c0:db:01:
c4:b2:67:f6:a4:2b:84:f8:11:cd:8e:dc:a6:2c:8c:8c:af:0d:
61:79:03:05:0f:eb:9f:e2:87:e5:02:12:ce:76:7c:57:e0:64:
ef:07:60:81:01:2b:70:6d:a9:65:42:94:0e:62:6e:7f:7b:6e:
8b:45:44:9e:8d:2a:2a:9f:a4:92:5b:1f:df:70:5b:58:b6:0b:
e0:9f:6d:39:41:94:51:95:8a:55:25:eb:e3:8c:cf:01:2f:ad:
7d:91:04:bd:5b:fc:af:27:25:3f:01:f4:2d:0a:cf:49:d1:94:
62:96:7a:59:7c:fb:76:b6:e3:7f:7a:59:a2:9f:9e:01:9c:7c:
f0:ae:44:0e:c5:87:f7:f2:81:f5:45:e9:35:5a:cb:4e:93:d8:
9a:67:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:54:36 2025 by rpki-client