Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gF2h7tU381boE_Hw1ZPmFETRxYw.roa
File: gF2h7tU381boE_Hw1ZPmFETRxYw.roa (raw, json)
Hash identifier: c8hD7ypTkKmTywAXLegGUD3ivelJptG5gNlGcZX/2e0=
Subject key identifier: 80:5D:A1:EE:D5:37:F3:56:E8:13:F1:F0:D5:93:E6:14:44:D1:C5:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184A168E12CDAA306E91EC49E455C9D528D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gF2h7tU381boE_Hw1ZPmFETRxYw.roa
Signing time: Tue 22 Nov 2022 22:15:15 +0000
ROA not before: Tue 22 Nov 2022 22:15:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a1:68:e1:2c:da:a3:06:e9:1e:c4:9e:45:5c:9d:52:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 22 22:15:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=805da1eed537f356e813f1f0d593e61444d1c58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:35:4f:f8:41:09:07:bc:37:3d:2d:6c:b2:a8:
a9:a2:71:97:2a:24:76:52:f8:a8:12:50:32:7a:dc:
c0:f5:6a:64:d5:ba:b1:b3:e9:9b:86:f0:f9:1c:d5:
3d:69:6c:08:84:3e:39:67:e0:a3:d4:0b:83:aa:8a:
92:37:4b:2d:6b:a2:d5:c6:cd:72:8c:31:0b:91:24:
b5:9b:67:d0:da:51:78:4f:70:3f:12:11:02:70:0e:
dc:b7:c8:1a:4d:d9:32:ab:cf:1d:05:cd:d8:9c:4d:
09:7d:0f:1d:46:b2:64:d2:7f:bf:de:87:1f:0a:c9:
a3:77:17:0a:bb:62:aa:ad:7b:2b:10:fc:d9:bf:fc:
91:12:f1:61:00:56:06:46:22:9a:0f:c8:d3:f7:f2:
8b:4f:73:39:de:e9:cb:04:de:1a:34:d9:5b:b1:65:
e3:e7:c9:62:2f:9a:76:60:60:3c:a2:02:2a:fc:28:
22:25:a4:74:16:f5:25:99:7d:6a:a8:26:28:ad:46:
b8:ca:8b:61:26:f3:2c:9b:e2:90:79:b5:50:94:e0:
22:05:72:cf:fc:39:cb:db:01:ef:52:19:c0:9c:20:
30:2a:11:fc:a5:2e:4f:4a:e3:5d:a7:33:95:06:3d:
5d:ea:92:39:7b:b5:27:f4:eb:78:be:2a:62:66:e5:
06:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5D:A1:EE:D5:37:F3:56:E8:13:F1:F0:D5:93:E6:14:44:D1:C5:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gF2h7tU381boE_Hw1ZPmFETRxYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:8b:ca:3b:8c:73:9f:98:5a:a9:8c:35:ba:a7:23:1e:83:27:
58:f7:c6:15:7a:8b:82:97:d0:c6:46:47:f4:fd:2b:40:ba:3f:
6b:3a:17:64:3d:bd:8d:8b:2d:2b:2f:8c:93:61:62:30:02:e2:
d6:f1:d3:8e:20:93:7f:ad:3e:fe:58:2b:37:c9:50:4f:3f:c2:
3b:e0:17:36:c7:a4:50:9b:10:60:83:6d:4c:cc:5e:7f:97:b9:
7e:c6:9e:1e:5c:2f:09:f8:8b:51:7d:c6:95:17:f6:0f:a4:85:
76:c5:07:28:b2:f4:f3:60:26:b0:65:63:7a:c1:2e:5f:c9:84:
b2:d2:0a:46:0c:7c:df:3d:c9:05:9d:1c:d6:59:76:5d:bd:03:
2e:94:5a:20:66:3a:a7:84:8a:89:86:a6:2d:de:fc:a8:56:af:
29:05:e8:81:ea:e5:1e:99:0b:a9:ea:f0:d0:d9:62:1f:48:00:
36:48:11:46:b5:4c:70:7b:15:eb:02:aa:b7:e7:09:53:7b:42:
71:be:a1:f7:ed:60:62:04:77:43:dc:d4:fb:55:7e:58:9c:35:
5d:d3:df:c6:52:19:b1:99:24:ad:23:7c:87:96:e1:60:25:e3:
c9:8c:73:bd:88:45:ba:e1:91:91:ae:5c:57:85:34:d0:e1:e2:
92:7c:81:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:26:59 2025 by rpki-client