Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gFYi6DsjW63pci8grHu2vQFI6k8.roa
File: gFYi6DsjW63pci8grHu2vQFI6k8.roa (raw, json)
Hash identifier: hHiiHeLMB4LSTHStOSJeotbJzPBM6NgDoa8ELMN3c0Y=
Subject key identifier: 80:56:22:E8:3B:23:5B:AD:E9:72:2F:20:AC:7B:B6:BD:01:48:EA:4F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188397F4FCB48626E164B8837F062526B4F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gFYi6DsjW63pci8grHu2vQFI6k8.roa
Signing time: Sat 20 May 2023 14:10:24 +0000
ROA not before: Sat 20 May 2023 14:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:39:7f:4f:cb:48:62:6e:16:4b:88:37:f0:62:52:6b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 20 14:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=805622e83b235bade9722f20ac7bb6bd0148ea4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3a:00:e2:a6:2f:4d:94:cf:94:c2:04:1f:84:
8b:38:e1:c3:36:83:37:0f:f2:2c:15:b0:6c:bb:99:
08:fb:0e:95:8f:53:6c:0c:87:47:71:64:c2:02:cd:
a1:48:3a:1f:ea:95:b2:ea:94:91:d4:cc:8a:c1:63:
aa:58:90:bc:4d:29:4b:88:87:47:93:25:b3:15:d6:
df:94:65:42:4d:d4:24:54:c9:37:e7:6d:d0:0b:76:
c3:b7:75:54:96:df:34:ba:17:37:d0:01:48:fe:6e:
c0:3d:c2:c2:de:69:12:39:34:08:0f:ce:13:c2:51:
13:df:3f:9a:72:96:dd:fa:28:bc:b2:09:a5:40:e5:
78:dd:9a:2e:73:ed:6d:a3:9e:50:8b:31:24:59:b0:
5e:58:99:f4:12:e6:98:7b:54:1e:8b:87:49:a5:d0:
f1:f4:2a:01:f6:eb:5d:5b:89:5c:0d:5d:7f:f2:9f:
b0:bd:7c:d6:f0:a3:23:b6:1c:d3:cb:49:d9:0d:17:
5b:6f:35:70:e7:12:91:33:06:ea:c6:c1:1d:dd:f1:
9c:dd:05:4b:72:9e:09:d8:54:c7:01:c4:a1:e0:f8:
08:90:d5:72:b2:b2:e8:82:70:0a:ec:da:80:d1:d6:
26:32:fb:80:a2:29:23:6c:6d:2c:ef:90:8b:ae:15:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:56:22:E8:3B:23:5B:AD:E9:72:2F:20:AC:7B:B6:BD:01:48:EA:4F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gFYi6DsjW63pci8grHu2vQFI6k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:eb:e4:ad:03:28:d4:8c:4f:cb:dc:16:4e:cd:4c:eb:42:e8:
ec:37:93:73:82:8d:a5:65:fa:68:c6:53:61:16:88:aa:b5:55:
e5:de:4d:a4:ef:ab:a5:98:84:48:1b:9d:86:e5:a6:dc:86:4d:
1a:e6:5c:72:67:bb:ba:11:46:93:d3:f6:49:bf:dc:8f:9a:53:
0e:c2:df:c8:e0:34:45:3f:e4:b1:55:44:12:c6:d2:b9:0d:04:
1f:2e:23:a8:a3:bf:15:23:e7:5a:df:c5:b2:23:e4:84:b1:55:
20:99:ef:ed:29:d8:07:ac:50:86:70:d6:6d:e7:68:42:8e:15:
aa:bc:8a:31:db:72:c9:3e:ef:3c:4c:1b:77:70:c3:48:1f:d4:
de:00:21:52:9c:b8:f2:74:e2:0d:19:5f:4e:6b:19:80:d8:d5:
00:9d:02:20:cd:f8:c0:77:56:db:ee:83:a4:ea:f9:3b:d2:9f:
70:cc:8d:ec:f8:03:03:99:30:80:5d:3a:c6:56:f2:d3:c9:be:
f5:65:ca:2f:2f:58:6e:36:74:32:f0:bc:c2:75:72:b5:4a:bd:
d7:9d:19:ae:a0:24:19:e7:46:8a:a1:b1:a6:e3:0c:cb:4d:f0:
1a:10:7e:ad:be:a8:6d:a9:59:c4:b8:0e:3d:a1:10:2b:5d:43:
d8:5b:b5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:31:12 2025 by rpki-client