Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gCsinYWwB2QuoiRAPPvQhk7-HzY.roa
File: gCsinYWwB2QuoiRAPPvQhk7-HzY.roa (raw, json)
Hash identifier: oQUeUuhL5B1tPoU7EUyHRDS1x1bQ3c1Gb8KhTUIKgQs=
Subject key identifier: 80:2B:22:9D:85:B0:07:64:2E:A2:24:40:3C:FB:D0:86:4E:FE:1F:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01843357A7CC707DB1F83625C984E19FD1FC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gCsinYWwB2QuoiRAPPvQhk7-HzY.roa
Signing time: Tue 01 Nov 2022 13:18:13 +0000
ROA not before: Tue 01 Nov 2022 13:18:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:33:57:a7:cc:70:7d:b1:f8:36:25:c9:84:e1:9f:d1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 1 13:18:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=802b229d85b007642ea224403cfbd0864efe1f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b3:0b:48:92:d5:8b:8e:a4:9d:94:be:1a:09:
a6:fc:9e:68:35:5d:69:23:0c:61:34:f2:5a:35:91:
a9:f2:23:74:9b:cf:c7:7d:76:c4:42:3b:c7:ec:63:
60:93:50:97:2c:e9:de:b2:f1:4a:9b:e0:bb:67:9e:
66:d2:e0:08:a6:11:b4:3c:c0:6c:96:4c:0d:96:15:
d5:25:5e:b7:d7:ab:73:72:af:68:54:81:a6:8d:09:
3c:1a:85:09:28:e3:50:07:19:d0:cf:0e:d4:5a:bc:
f6:d6:fa:50:f3:4e:26:2b:bc:6d:bc:20:a7:e3:6b:
9b:6b:9a:cd:14:fd:2c:ac:05:84:45:91:1a:83:ed:
b2:d3:a8:b6:e5:83:74:ad:63:c6:2a:74:d1:64:30:
f9:67:b3:86:52:32:76:db:17:32:9c:37:6b:a5:09:
2d:fd:09:6e:9b:79:1e:1a:0c:6e:82:a3:3b:51:7f:
d1:70:33:be:ed:cf:93:25:a2:da:0f:d0:19:b9:36:
83:58:84:ea:54:a0:c4:5c:ea:48:bb:45:a4:b8:37:
6e:a5:4d:b9:0f:02:86:f3:2b:d4:bc:76:02:37:a1:
42:01:5e:53:6b:d1:8c:5f:89:8c:20:e9:37:87:83:
18:24:89:4a:ea:72:d1:9c:34:be:5d:8b:5a:fc:c0:
21:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2B:22:9D:85:B0:07:64:2E:A2:24:40:3C:FB:D0:86:4E:FE:1F:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gCsinYWwB2QuoiRAPPvQhk7-HzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:ed:d5:a6:d6:db:c1:45:ab:e5:85:4b:69:d3:56:2e:00:85:
41:d5:75:f5:4b:96:27:a1:c6:49:8d:93:78:f8:65:bd:f9:fe:
e0:3b:8c:c7:0f:b7:ca:7e:53:e3:11:83:38:da:9f:12:fd:2f:
39:ec:f3:7d:26:76:d6:9d:13:da:ae:d3:92:db:ec:0e:20:72:
dc:2b:16:44:e3:4e:8f:19:e6:75:65:3e:fc:63:17:35:ab:d5:
ef:3a:d7:91:9b:30:8a:21:08:ad:50:de:da:3e:fc:58:17:c4:
35:7d:14:5c:59:d4:6a:70:60:ae:7a:64:2a:44:2a:3a:9c:95:
c6:c2:16:3e:b9:81:81:6e:a0:8b:88:68:22:84:5b:ec:b1:44:
47:8d:80:30:4a:1e:6f:5d:26:45:98:ed:12:11:73:f6:e9:7d:
56:cb:3d:10:ee:bd:f2:48:cf:a7:fe:d0:13:93:f7:40:7d:47:
75:1c:76:93:8e:78:cf:1e:f4:67:08:3e:61:02:37:a8:76:63:
3d:e6:09:f0:47:66:c6:54:d4:59:c3:69:8d:c4:57:8b:b8:d7:
54:64:6d:9b:11:e9:52:57:47:96:bb:c6:a4:33:0c:e3:97:81:
51:45:57:cf:ee:28:a1:ae:97:cf:bb:c6:4d:f9:ca:ec:4c:d3:
d6:2f:8e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:10:51 2025 by rpki-client