Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gL7N8IhKaK7OhFww2y94thkALuQ.roa
File: gL7N8IhKaK7OhFww2y94thkALuQ.roa (raw, json)
Hash identifier: wGn/lHG5rFc65bWefSdlfkEjbgBcCMhYvCn9ZT7ubiw=
Subject key identifier: 80:BE:CD:F0:88:4A:68:AE:CE:84:5C:30:DB:2F:78:B6:19:00:2E:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01827425B0282F34E788E58E1046CB31E5D0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gL7N8IhKaK7OhFww2y94thkALuQ.roa
Signing time: Sat 06 Aug 2022 17:13:23 +0000
ROA not before: Sat 06 Aug 2022 17:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:74:25:b0:28:2f:34:e7:88:e5:8e:10:46:cb:31:e5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 17:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80becdf0884a68aece845c30db2f78b619002ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5f:d6:8b:c2:59:09:95:fd:10:a0:f7:0e:d3:
39:35:24:40:b2:5f:59:90:a1:08:93:66:67:01:9c:
e2:64:6a:1f:4f:7d:d8:fb:5c:f4:da:7f:03:08:5d:
3d:b2:1c:9b:bb:1a:f9:a4:24:37:9b:96:df:37:e1:
af:fe:9d:0a:1d:a9:f8:da:52:9f:14:af:8b:53:7b:
11:89:7d:98:e7:d8:a3:50:e7:72:85:8b:6d:fc:82:
c7:49:65:2e:70:da:68:2e:bc:00:e1:bd:75:18:9d:
c1:26:33:c8:fe:03:a5:0c:ed:f3:a6:4b:29:29:0e:
1e:18:d2:17:7e:bd:0d:57:ed:b3:8d:5d:ca:4d:f7:
a6:af:0b:af:e2:b7:cf:a2:58:a2:b0:77:3e:27:6d:
10:b2:72:37:0a:d1:fe:23:88:fc:e1:14:76:73:52:
05:b9:86:9c:95:a7:f9:10:2d:19:50:22:80:eb:82:
ad:01:1c:e6:e9:0c:15:c8:cb:89:1e:ee:22:6f:1b:
56:b8:1b:30:3d:98:0d:91:69:27:15:d2:6e:96:a1:
65:4a:c1:11:f1:a6:59:1d:86:0c:f0:5f:f1:92:a8:
51:ff:3c:18:97:db:b6:cc:cc:2d:61:81:f0:d5:f5:
cc:d0:fc:99:14:a6:17:2f:22:aa:57:ea:8b:66:45:
48:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BE:CD:F0:88:4A:68:AE:CE:84:5C:30:DB:2F:78:B6:19:00:2E:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gL7N8IhKaK7OhFww2y94thkALuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:c1:7f:af:01:05:d0:5f:75:c9:bf:21:f7:90:29:a2:72:27:
bc:71:a1:36:be:a5:81:38:2e:2b:af:36:e2:a4:e1:95:b6:26:
74:53:40:05:5e:b0:93:c9:a0:9b:a5:ff:10:bc:65:c0:a8:02:
19:b5:ab:31:85:af:14:88:a2:e6:d1:3b:d1:8e:75:ac:0d:6f:
8e:c9:bc:60:35:3e:96:2a:16:46:d6:72:db:5d:a5:92:95:47:
81:91:05:f7:24:81:0e:7d:cc:5b:5c:9f:0d:cc:54:8a:b5:e0:
da:7c:f9:e6:3f:bc:b2:ac:22:f0:b8:47:22:c9:20:c1:a0:01:
9a:1d:8d:8a:8f:e8:0c:35:68:d3:0f:16:7b:2d:bd:89:2a:75:
1b:df:df:52:70:8b:c1:96:1d:ae:b1:84:cf:d7:06:20:00:25:
d0:45:e3:d7:4b:73:62:04:b0:63:9b:16:e5:bf:c6:db:8a:aa:
f1:65:a7:8a:63:d2:6f:fb:e9:74:c7:89:cf:86:32:ce:9f:2f:
f0:86:dd:d1:9e:7e:cd:d3:e4:44:08:57:64:18:3d:ec:87:66:
ab:62:5b:d4:eb:77:cc:6d:e7:d6:ec:06:40:99:b4:03:6e:b2:
07:73:51:77:be:65:c0:e4:f6:31:b0:35:f8:ab:45:5b:bf:c8:
db:65:49:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:01:19 2025 by rpki-client