Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gCWyNOc3vRfylafXZxTOwn8HjMY.roa
File: gCWyNOc3vRfylafXZxTOwn8HjMY.roa (raw, json)
Hash identifier: MqA0d3UWNryzpB0ZXLroYHCmTBtSi/0VLLhwRFgVKDM=
Subject key identifier: 80:25:B2:34:E7:37:BD:17:F2:95:A7:D7:67:14:CE:C2:7F:07:8C:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018204C8E1FDA6CB0521B6E17E7C601C5EBF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gCWyNOc3vRfylafXZxTOwn8HjMY.roa
Signing time: Sat 16 Jul 2022 02:14:10 +0000
ROA not before: Sat 16 Jul 2022 02:14:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:04:c8:e1:fd:a6:cb:05:21:b6:e1:7e:7c:60:1c:5e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 02:14:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8025b234e737bd17f295a7d76714cec27f078cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:29:ea:7a:2d:cb:44:f2:77:5a:b2:ca:56:
c3:4e:4c:56:5d:68:30:cf:ae:da:f4:24:11:e7:f0:
33:e6:b3:1d:28:e2:15:e4:3b:d5:cb:3b:8e:f6:0c:
ce:42:7c:ff:2c:33:dd:ea:5f:05:f5:36:b1:4c:7f:
ac:ec:ba:90:36:81:45:6d:4f:6c:f0:7e:52:eb:b7:
75:3d:6c:3b:1d:5d:30:6e:23:d1:ac:8a:2f:c3:4e:
53:59:ac:fb:9b:b7:99:af:e1:68:0b:b6:aa:9a:5f:
21:95:ff:72:f0:13:04:66:f6:e1:9b:fc:35:58:14:
26:1c:f8:f2:49:82:f7:c2:f6:5b:8b:2c:ef:ab:fb:
7d:5e:0f:92:5e:9a:8b:88:08:78:76:db:17:97:b6:
d2:83:34:cc:49:ae:b2:a1:a2:35:cb:e3:13:0a:94:
a7:4d:54:ba:44:8b:34:ec:b7:44:77:93:10:a8:06:
18:6a:a9:d7:b8:22:37:10:ca:6b:21:7f:49:a6:cd:
0c:02:95:36:cd:f6:ed:20:74:eb:d9:c2:2f:61:34:
dc:64:2d:40:5c:f3:43:cd:7e:e8:e1:0e:7e:d3:35:
d8:18:3e:5c:63:28:9c:76:fd:95:e6:16:d6:15:58:
a5:77:f8:ac:9a:ea:70:d9:06:c3:d9:b6:91:83:c5:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:25:B2:34:E7:37:BD:17:F2:95:A7:D7:67:14:CE:C2:7F:07:8C:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gCWyNOc3vRfylafXZxTOwn8HjMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:20:03:3d:13:9c:87:69:6f:85:85:52:30:18:32:02:eb:9e:
01:3d:1e:29:a0:97:0c:f0:38:fb:66:2c:b5:00:7f:3f:4a:72:
d8:20:5e:6e:ee:0a:f8:71:54:be:e5:9c:8a:21:c1:db:c4:bb:
1d:ea:cd:4c:ca:c9:18:12:19:e6:92:47:6f:d4:24:6e:d1:8e:
2e:67:cb:fe:cd:e6:02:bb:b3:a7:2c:2c:02:e6:7a:39:79:53:
cc:8b:ad:93:09:83:a3:d4:ef:6d:57:92:70:94:18:db:05:75:
8c:24:e2:d5:8e:fa:27:8c:4a:a6:33:1e:c0:76:af:be:ad:30:
b3:d0:a9:7e:b2:29:b9:7b:cb:50:18:86:e6:5c:26:ed:34:31:
44:e2:05:b3:03:72:e7:c9:60:d3:24:52:16:ad:da:6e:b2:ce:
03:31:a9:25:25:f0:45:3b:19:b4:f9:7c:bd:09:26:06:de:e9:
77:c9:05:73:60:29:32:c2:fe:8d:d1:d3:f2:6c:f5:39:3b:91:
c4:5c:ef:98:95:bf:e6:1e:9e:66:79:da:23:29:85:9d:9f:65:
3e:ff:d9:28:4c:13:76:7c:53:c2:d8:1b:8b:0a:4f:59:48:62:
c1:39:62:01:b8:fd:c8:c8:05:ae:19:5a:33:b6:06:5e:5a:0d:
5b:1b:40:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:59 2025 by rpki-client