Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gDRfoyyVTbh8WZlcxQatsvu_LVo.roa
File: gDRfoyyVTbh8WZlcxQatsvu_LVo.roa (raw, json)
Hash identifier: cW6ZC+C+5434oWfvcO/zGuNHBTg3+GX/1dWYR408GCk=
Subject key identifier: 80:34:5F:A3:2C:95:4D:B8:7C:59:99:5C:C5:06:AD:B2:FB:BF:2D:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7230374D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gDRfoyyVTbh8WZlcxQatsvu_LVo.roa
Signing time: Sun 13 Mar 2022 12:09:24 +0000
ROA not before: Sun 13 Mar 2022 12:09:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1915762509 (0x7230374d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 12:09:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80345fa32c954db87c59995cc506adb2fbbf2d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1d:75:02:4f:09:62:a0:5a:37:f0:6c:fb:7a:
79:ee:6a:b8:ae:f9:5d:0e:5c:fa:53:02:bc:a0:a6:
9f:af:ec:05:f9:31:e0:59:bc:57:0e:ca:bf:61:51:
b0:07:f0:5f:35:f7:99:94:14:c6:30:39:b8:18:5b:
13:be:0f:74:e3:c7:af:e1:87:d9:ce:89:cd:e5:4c:
70:45:ea:06:b3:c7:b4:ac:e2:1e:3a:21:7d:72:e4:
bc:3b:77:73:70:f9:36:d7:15:90:16:44:6b:ac:99:
a7:cb:ee:1c:c0:49:a7:fc:d8:23:bf:ce:b2:01:04:
ed:9c:93:80:a4:6c:90:44:9e:96:24:46:f0:d5:54:
37:39:4b:32:37:91:4c:48:2e:ac:89:9e:0f:81:a8:
f8:5b:af:a5:98:af:a4:e9:f2:40:f0:7a:41:63:54:
f7:3b:27:35:b1:51:b7:16:2a:38:ef:4d:ac:db:5a:
23:38:45:bc:aa:21:dc:bc:6a:7a:e5:3e:7a:be:48:
97:a9:38:b3:8c:88:69:9b:38:f2:52:63:8d:3b:1e:
ee:a1:4f:2f:16:2b:f0:8e:2b:5f:24:02:76:15:76:
06:00:e7:42:12:a4:dd:4f:81:e0:2d:77:cb:11:70:
cc:94:8e:4f:15:da:49:9e:30:cf:41:4f:cf:b7:f1:
53:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:34:5F:A3:2C:95:4D:B8:7C:59:99:5C:C5:06:AD:B2:FB:BF:2D:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gDRfoyyVTbh8WZlcxQatsvu_LVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:c2:65:0f:29:b4:ca:fb:c6:ed:e5:11:e2:8e:88:5f:61:72:
d6:c7:69:cc:dc:46:5c:a9:b3:a4:b4:7f:35:8b:a5:63:9e:f4:
7c:b7:e1:ba:c0:39:ec:fd:84:64:5c:1d:78:7a:66:5c:80:a0:
26:de:a6:5a:fa:63:f3:a7:6d:0f:09:6c:6b:d1:df:cd:87:99:
e6:a9:73:05:e9:69:ea:ef:8b:69:e8:7b:d7:68:5f:0e:fe:6b:
27:40:c6:0f:6a:fa:02:6a:ce:e2:70:54:ad:32:d6:5c:ac:52:
a8:04:16:59:64:56:2a:71:7c:2b:ea:c5:32:dd:c5:e3:58:eb:
b4:d2:ab:aa:c3:90:3d:69:e6:70:38:a8:b6:de:5a:2f:e9:ee:
af:db:af:63:e8:19:da:44:31:00:54:db:11:f1:df:2e:08:34:
c4:74:0c:a3:1a:74:12:f1:d6:59:70:87:e0:1b:9b:f2:2d:ae:
49:22:41:b3:85:42:48:2f:20:e4:39:5b:f6:eb:86:46:75:e1:
e3:d5:05:b4:d5:8f:6c:12:c2:d5:d9:56:43:44:7e:80:84:e7:
29:e1:c6:c5:7f:33:38:1c:e4:51:f3:ff:44:35:19:66:3f:ec:
c1:0c:5c:6d:7c:6b:2b:97:23:3d:2a:f6:55:69:d5:30:5d:44:
65:86:be:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:47:18 2025 by rpki-client