Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gFsYIYKUm9HOLTWo33ghPDLJ04k.roa
File: gFsYIYKUm9HOLTWo33ghPDLJ04k.roa (raw, json)
Hash identifier: FY9MFX2NqBcpjnRF2r+C2yUjdyLZypibNojklbrDe6Y=
Subject key identifier: 80:5B:18:21:82:94:9B:D1:CE:2D:35:A8:DF:78:21:3C:32:C9:D3:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7C27107A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gFsYIYKUm9HOLTWo33ghPDLJ04k.roa
Signing time: Sun 17 Apr 2022 17:10:32 +0000
ROA not before: Sun 17 Apr 2022 17:10:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2082934906 (0x7c27107a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 17 17:10:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=805b182182949bd1ce2d35a8df78213c32c9d389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:a9:b5:9d:50:3b:a3:14:1a:88:34:2a:fb:
3f:ce:f8:ca:a9:82:95:f3:24:3f:71:99:8e:e4:46:
02:9a:39:b8:aa:93:21:06:be:4b:90:0a:f8:b1:ff:
9a:f7:69:da:12:19:1b:a4:2f:4d:a5:05:fa:b3:cb:
cb:f7:43:4b:f9:76:15:4c:9d:12:37:25:55:51:30:
75:cb:24:26:24:f4:53:bd:2b:06:ee:00:4c:6e:04:
19:5c:eb:cc:66:3b:69:b1:65:fb:d2:9c:7e:f2:85:
a6:2b:53:71:ae:3b:79:9d:dd:44:8f:ec:dc:88:08:
34:ce:58:75:85:fa:cb:8e:b6:89:d1:85:bf:dc:df:
9a:7a:9b:f7:fd:24:6d:98:3b:e3:53:9b:10:00:88:
c5:5d:99:00:8b:70:e4:d5:64:76:87:cf:b9:88:00:
07:1e:d5:7e:36:eb:14:65:4d:9b:4d:c1:b6:c0:7b:
fa:d6:8e:05:61:19:c8:e1:dc:cb:a7:b9:9e:54:e7:
25:21:d7:ab:c3:6e:d0:70:13:e3:4c:e8:d6:b1:0c:
cb:d4:02:e9:f2:de:7a:61:9d:ac:51:68:2d:2a:2c:
46:3d:8a:55:c0:be:41:96:76:91:12:87:a4:23:d4:
09:fd:ed:96:ca:66:7f:c2:51:19:97:2c:3e:ca:1b:
99:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5B:18:21:82:94:9B:D1:CE:2D:35:A8:DF:78:21:3C:32:C9:D3:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gFsYIYKUm9HOLTWo33ghPDLJ04k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:ee:0d:e8:45:5c:6c:8d:90:73:0c:03:e7:45:7e:0c:33:67:
45:12:be:fe:bd:75:3b:3b:53:68:b0:91:62:89:b6:75:76:71:
d8:c9:2a:b6:5a:32:de:4e:09:d8:77:f9:38:9c:b7:fe:a6:bb:
7e:3d:af:b2:91:d0:53:4b:3f:13:e0:dc:5d:e5:12:9b:f7:00:
d4:b3:61:04:43:c1:db:67:a0:3a:d8:96:de:e2:0a:37:55:49:
c0:9d:a7:d8:ce:8f:32:11:dc:cc:c0:3d:b4:c6:00:34:4a:2c:
2b:bc:22:96:5b:3b:a5:27:01:fd:9d:fc:33:8e:d1:81:c1:44:
d4:99:4f:34:2f:97:17:2a:bd:ca:e1:8f:6b:05:ec:95:4a:93:
52:df:0f:62:c7:69:f5:35:44:be:bf:d0:ef:49:46:d4:17:ec:
62:47:05:a3:07:54:aa:1d:eb:dc:83:2e:d6:92:b4:9e:a9:0e:
25:f3:86:1f:e2:54:a8:29:54:83:e3:f3:c3:24:cd:96:f1:80:
ae:f3:17:69:91:0a:8e:6e:18:37:bb:76:d2:d8:67:6b:83:45:
bb:8d:dd:68:60:16:ae:46:a4:f9:48:3b:50:c3:fb:9b:11:25:
18:91:5d:d8:81:c7:84:6f:30:ba:e9:74:ea:e6:38:f5:3c:49:
b0:8a:93:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:24 2025 by rpki-client