Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gHc8evuKvy8Fhdf-Yk9qeiF02Yw.roa
File: gHc8evuKvy8Fhdf-Yk9qeiF02Yw.roa (raw, json)
Hash identifier: T3+Wp8FC3hay5hv1DhVKlH41f/UPQbnIOHR/IotY0O8=
Subject key identifier: 80:77:3C:7A:FB:8A:BF:2F:05:85:D7:FE:62:4F:6A:7A:21:74:D9:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183BD85BBEDA66402FCFDAEA4765B127A01
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gHc8evuKvy8Fhdf-Yk9qeiF02Yw.roa
Signing time: Sun 09 Oct 2022 16:13:21 +0000
ROA not before: Sun 09 Oct 2022 16:13:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:bd:85:bb:ed:a6:64:02:fc:fd:ae:a4:76:5b:12:7a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 9 16:13:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80773c7afb8abf2f0585d7fe624f6a7a2174d98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5b:f6:e4:e5:3d:e6:31:39:4f:1c:cb:5b:a6:
55:d8:c8:1f:3c:b8:10:b6:ea:47:91:a9:cb:01:57:
6c:94:01:9a:36:c3:0b:21:34:ea:45:98:74:58:c6:
45:52:37:fd:1b:db:07:33:37:9c:86:59:c2:21:6a:
9e:f1:86:de:89:e6:e7:7c:dc:03:ee:f1:2f:29:21:
ae:c6:eb:3f:c4:44:c2:a6:52:e6:02:22:d8:f9:b7:
4e:d5:84:f7:79:9d:ed:e5:4e:b2:18:da:ba:43:85:
a4:74:48:32:27:6b:15:f0:cd:47:ce:a3:a0:00:95:
6c:c8:ce:78:19:1f:0c:8a:33:98:3a:78:3f:93:9e:
ee:6b:4a:99:7a:ad:f7:b5:4e:a0:d5:b9:c5:36:f6:
50:95:0b:ad:91:e1:a1:8b:22:f7:03:8f:09:42:d8:
cb:fa:b7:83:bd:60:b3:e6:98:8b:b4:3b:f9:79:5d:
5a:99:21:d9:e8:41:1d:4e:ac:c5:f6:51:5e:f7:4f:
3a:25:3e:0c:09:7f:72:e6:a2:74:e6:ce:ab:3f:2e:
63:5f:25:6f:8a:e0:9b:96:f9:72:c2:52:a7:a6:1d:
99:72:6c:a9:cd:5f:a7:bb:f1:5e:0a:47:ff:89:7b:
33:a1:40:3c:04:6d:7c:91:7c:79:e2:0d:f5:2f:aa:
76:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:77:3C:7A:FB:8A:BF:2F:05:85:D7:FE:62:4F:6A:7A:21:74:D9:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gHc8evuKvy8Fhdf-Yk9qeiF02Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:3a:03:1d:77:cd:ec:b0:8b:87:b1:7a:f6:30:82:a6:29:73:
8d:57:67:75:00:b6:8f:10:62:96:96:84:71:d5:3d:5c:28:98:
b2:90:88:cb:71:d8:e7:0e:79:33:a1:3c:6e:a4:f7:04:b5:0e:
81:fa:8f:ae:57:b6:a8:0c:b1:bf:76:20:d2:f8:11:c8:6d:7d:
d7:fd:61:64:0d:89:29:40:84:ae:14:2f:8a:b0:95:af:01:19:
05:b3:00:85:68:92:5d:dd:bb:f3:86:59:cf:03:2c:0c:0b:38:
55:fd:f9:ed:7d:5c:0b:e3:13:8a:e2:4a:38:11:b4:1a:ca:2f:
0a:48:af:29:3c:d0:6b:87:b1:e3:4e:22:7d:cc:f1:cd:f0:b8:
85:29:8f:dd:32:0c:d0:63:49:ef:d8:0a:ad:b1:cc:81:77:d9:
7b:bb:a5:c8:28:91:50:d9:f5:68:0a:a8:f4:8a:8b:07:59:d6:
d8:b9:10:d6:ff:20:b2:8b:f5:10:29:1b:68:04:bc:ce:ab:3b:
39:aa:ec:b7:60:6c:ea:da:04:6d:85:b3:ab:5f:fa:8c:e5:59:
30:a6:48:c2:76:1f:00:59:b3:c8:3b:bf:62:c1:1e:a5:35:6d:
69:5c:58:5c:f6:ec:99:ad:4a:44:37:2d:ac:d8:9e:2f:01:20:
37:5c:b7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:37 2025 by rpki-client