Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gBJtmi6x0CLXCOS_57uKSVDQBAE.roa
File: gBJtmi6x0CLXCOS_57uKSVDQBAE.roa (raw, json)
Hash identifier: bMJedlhc/CqCE96oP2713zcb+CjRcl2TJQwDSV/Nmok=
Subject key identifier: 80:12:6D:9A:2E:B1:D0:22:D7:08:E4:BF:E7:BB:8A:49:50:D0:04:01
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186722ED6B6CBAE4059CA639CBE024F92F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gBJtmi6x0CLXCOS_57uKSVDQBAE.roa
Signing time: Tue 21 Feb 2023 04:15:17 +0000
ROA not before: Tue 21 Feb 2023 04:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:72:2e:d6:b6:cb:ae:40:59:ca:63:9c:be:02:4f:92:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 04:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80126d9a2eb1d022d708e4bfe7bb8a4950d00401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c7:cf:da:25:e1:34:1f:c1:bb:a1:01:d7:f0:
a1:34:1c:f3:59:41:4e:bb:2e:44:5c:97:c9:b4:88:
14:64:a4:41:dd:8b:76:fd:04:a9:e6:f6:00:26:bc:
20:07:27:89:40:c7:a9:bc:70:54:4f:7f:ad:34:3f:
55:d2:d6:40:42:11:72:d7:bb:13:d3:53:63:22:74:
3d:db:30:41:60:8d:82:01:ff:c5:58:30:c7:68:a9:
8f:fb:88:4e:aa:d3:aa:c6:ff:a8:6f:0f:4c:0f:be:
62:e4:98:b6:d8:de:85:f3:3c:31:23:3d:42:07:65:
f1:a4:ea:28:7e:2d:b0:2b:87:26:44:54:53:69:2f:
ab:25:4a:59:9f:e7:0b:80:19:f2:aa:bc:99:40:25:
17:5c:d4:26:ea:90:d3:51:09:32:d7:ed:88:73:a3:
a5:5b:7b:24:0a:b8:b2:bb:92:32:c1:bb:d5:bc:6f:
da:04:50:8f:c5:d5:79:1c:b3:64:dc:9b:74:48:0a:
14:ec:96:ff:ff:76:e6:c6:e4:a1:49:74:f1:27:42:
91:4a:72:18:68:a3:46:d4:4e:5d:e0:8e:31:93:d5:
6b:18:9d:1b:f0:bb:2d:e4:69:6b:a7:92:d5:4c:95:
63:ce:26:99:64:86:c6:3a:e5:c1:2c:8e:4d:16:98:
6d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:12:6D:9A:2E:B1:D0:22:D7:08:E4:BF:E7:BB:8A:49:50:D0:04:01
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gBJtmi6x0CLXCOS_57uKSVDQBAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:c4:99:59:df:d7:87:74:60:d9:c6:be:28:1b:e5:79:39:2e:
9a:43:e9:85:6d:c3:92:22:0e:47:3f:da:f2:50:0a:ee:96:4e:
5f:44:22:ff:27:06:04:77:59:d5:06:65:87:ae:03:28:1d:12:
28:19:9c:0b:78:14:b4:b2:33:42:a0:31:dd:58:2e:fd:fb:45:
12:09:b8:7b:62:26:cf:f7:ff:70:ff:e5:e0:97:e5:28:99:23:
4d:62:9d:22:9a:d8:5d:6f:31:03:97:64:bf:66:cd:54:61:d7:
9d:7c:33:17:6d:44:71:65:89:77:2e:27:33:86:91:c3:f7:e8:
61:1c:a9:ef:0f:83:76:df:59:b0:98:d0:04:f9:19:95:c1:90:
99:ec:01:ff:8a:45:91:bf:62:c2:f3:0f:a7:02:ca:3b:19:40:
3c:38:88:3e:94:91:81:36:17:eb:a5:8a:1e:d0:9a:a5:fa:60:
6e:64:05:34:d5:12:15:23:e2:d4:2a:ba:da:40:87:a5:98:c8:
41:0a:47:13:58:04:33:e2:6b:28:f4:88:94:25:2c:ae:77:2f:
ba:c9:ef:a9:ae:c1:93:c2:f2:5a:ed:ba:76:8d:f0:65:9d:56:
04:12:cc:3a:7d:17:57:ee:72:9f:a7:66:cd:8f:9d:60:22:5a:
43:d9:a4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:45:52 2025 by rpki-client