Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gLfaILqywsomas_A5U1dTYWlt1w.roa
File: gLfaILqywsomas_A5U1dTYWlt1w.roa (raw, json)
Hash identifier: 1ivyHCStH6Ixe1sEi76lMzU3Iy9de39doYPTrmGIycM=
Subject key identifier: 80:B7:DA:20:BA:B2:C2:CA:26:6A:CF:C0:E5:4D:5D:4D:85:A5:B7:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187970AD2ADBE491EF3138AE6EAD414CECD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gLfaILqywsomas_A5U1dTYWlt1w.roa
Signing time: Wed 19 Apr 2023 01:04:41 +0000
ROA not before: Wed 19 Apr 2023 01:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:187:970a:b70b/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:97:0a:d2:ad:be:49:1e:f3:13:8a:e6:ea:d4:14:ce:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 19 01:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80b7da20bab2c2ca266acfc0e54d5d4d85a5b75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:2d:b6:9b:ae:9b:7c:81:5f:d7:f1:8e:04:
e7:be:14:87:8f:20:c1:6c:a9:83:42:78:ac:a8:67:
d5:cf:8c:30:9a:1d:84:b9:00:40:7a:7b:a6:91:3a:
57:09:74:1f:77:18:f8:96:c6:63:ec:57:ac:bf:50:
dd:68:26:eb:f4:57:7d:fd:99:d5:b9:35:2c:16:a4:
6c:90:7c:74:05:3a:ee:4a:af:38:87:ac:da:86:97:
bc:46:ae:2e:e3:a3:77:9d:33:bf:c3:e2:92:49:03:
b7:02:a3:7b:97:d3:da:97:3f:47:ec:35:c4:7e:dd:
29:d7:99:66:71:ff:b7:2b:20:bb:0c:35:17:1c:c0:
80:83:2d:6e:37:80:e3:f4:e7:0d:c0:ff:8d:ac:6a:
a5:98:e0:51:e9:9a:62:f5:1b:46:2a:49:81:b1:2b:
9e:c7:17:d5:09:53:80:f6:84:a1:21:48:54:21:73:
e1:2c:98:d6:0b:87:ef:44:fd:03:8a:b3:3b:66:00:
3c:44:34:22:36:85:93:2b:4f:62:4a:ff:f5:c8:83:
72:e2:1c:25:10:d9:c3:c6:61:8d:3b:38:c4:73:9e:
f1:71:f2:67:01:44:76:a1:c1:a1:df:aa:28:a1:ad:
76:4b:3f:93:ba:1a:5d:7e:fe:1e:57:1b:86:c0:6b:
84:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B7:DA:20:BA:B2:C2:CA:26:6A:CF:C0:E5:4D:5D:4D:85:A5:B7:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gLfaILqywsomas_A5U1dTYWlt1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:38:4b:c0:6c:79:84:52:91:3a:ab:9b:e6:e9:06:3a:38:7a:
a0:86:80:bd:4c:04:7c:ed:8f:ab:8f:e4:fa:a1:5e:fa:b3:ac:
b5:ef:bb:fa:3f:c0:97:e7:b1:72:73:fc:3e:d2:f0:54:a1:14:
0d:b7:0d:12:09:2b:aa:e3:45:88:95:02:4c:40:1a:35:6b:92:
46:d1:da:08:f1:59:cc:55:0b:4b:85:92:0a:68:cb:ce:b9:b8:
83:f5:83:87:bc:6a:e0:08:5b:6b:45:e8:3a:2a:d6:0e:71:2b:
93:da:d7:81:89:d6:f1:ef:24:c4:49:fa:9a:b0:67:8b:2f:e4:
78:b0:bb:2b:08:95:68:87:4f:0b:c2:84:ad:ab:52:2a:12:bc:
95:30:25:56:31:f4:ee:c0:d2:8c:4a:42:62:cb:07:02:e3:ed:
9c:94:7f:83:9b:c6:20:9c:8b:eb:46:1c:e4:00:d3:62:f4:3f:
e6:75:d8:d0:5f:61:e0:c6:98:2e:b5:ba:9f:fd:96:6c:90:f9:
92:d1:c1:27:66:b8:61:00:42:e5:d2:a8:bf:46:7b:ab:0e:e5:
7b:01:a7:97:1f:9d:95:bb:36:5e:05:63:c4:ec:ff:b8:3d:cd:
cf:75:51:e3:a0:23:b9:02:75:c0:01:01:30:11:9a:28:73:3a:
f0:4a:88:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:07 2025 by rpki-client