Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gMm5bQDwXVAcWskrCo0W34IKINg.roa
File: gMm5bQDwXVAcWskrCo0W34IKINg.roa (raw, json)
Hash identifier: Tei4QLZ0GTmCiLeGwzJ6MvNsigPR0M9yJiHuVL3Er6k=
Subject key identifier: 80:C9:B9:6D:00:F0:5D:50:1C:5A:C9:2B:0A:8D:16:DF:82:0A:20:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6CC2249E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gMm5bQDwXVAcWskrCo0W34IKINg.roa
Signing time: Tue 22 Feb 2022 11:13:42 +0000
ROA not before: Tue 22 Feb 2022 11:13:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1824662686 (0x6cc2249e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 11:13:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80c9b96d00f05d501c5ac92b0a8d16df820a20d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f7:e7:18:2c:af:ac:d8:03:80:3f:bd:b6:6d:
94:79:38:25:d1:42:c3:69:0d:b1:b3:6a:e8:a2:ae:
5d:74:94:d7:df:76:5a:01:89:05:60:ca:ac:6a:82:
60:47:f7:71:fb:14:69:26:56:6d:d4:1b:5e:ad:ce:
02:e4:6f:01:2e:2e:19:b8:71:0d:15:48:e8:a5:9d:
26:5b:aa:c3:d5:f0:13:49:eb:74:f9:5c:84:2e:26:
71:6e:ca:ed:63:4b:ae:68:85:df:06:c7:e8:14:79:
f9:90:7f:73:c7:4a:08:f4:67:ec:d1:c8:c9:84:ae:
e8:d9:3b:07:6c:5d:29:42:a7:44:71:ac:8a:f5:f4:
dd:0c:47:1d:b2:84:6f:67:e1:62:41:76:1c:32:78:
39:52:11:ce:1d:90:46:d4:02:75:99:c1:10:1c:6f:
55:bd:e6:76:18:91:86:4f:96:60:f8:6d:b3:f0:db:
1d:05:a8:ff:b9:02:d2:07:e8:f1:9e:b8:e9:ea:bd:
aa:c1:dd:57:15:58:69:66:44:50:20:de:3f:45:51:
12:87:4e:2e:42:b4:b1:3f:2b:43:aa:ae:a6:7b:92:
74:1c:8d:94:db:df:11:5d:82:03:5e:57:76:f2:8b:
31:93:1b:29:e9:09:d5:37:c2:d1:2a:8b:93:68:a4:
a8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C9:B9:6D:00:F0:5D:50:1C:5A:C9:2B:0A:8D:16:DF:82:0A:20:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gMm5bQDwXVAcWskrCo0W34IKINg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:3d:7e:00:05:15:47:c4:d6:19:00:61:0f:0e:d2:7e:ef:0b:
79:0a:b2:db:8d:25:8d:cc:c0:1a:ea:ba:04:e2:ac:fa:df:9b:
e7:da:91:80:a2:3d:0f:01:8d:bc:28:e4:45:13:e1:79:36:fb:
26:6d:a0:5d:56:e4:96:6e:32:51:ea:ba:7e:2e:27:6e:ac:f1:
db:13:d6:20:67:09:f4:36:5f:15:7e:bf:94:ca:4c:1f:78:ee:
d4:85:93:5a:dc:8b:98:5f:04:7a:2b:1b:54:3d:c3:ed:be:3c:
b2:7e:4b:e4:a9:81:65:ac:12:ec:d1:37:32:5f:d4:30:a4:3d:
8d:f7:a4:c8:84:5b:58:e0:b5:49:a7:f5:35:14:b7:6e:ee:fb:
b1:89:61:ff:17:36:86:93:da:1b:2e:a4:87:31:04:d7:9b:4b:
74:67:ee:30:72:3b:f5:7c:d0:43:cc:1f:b4:df:6d:39:0b:13:
53:0a:30:74:5d:77:dc:c5:76:cc:fd:e5:2f:e8:05:6f:ee:24:
ac:70:66:28:69:c9:28:0c:f6:47:54:0e:3f:fc:69:57:7d:9d:
ea:90:bf:80:c9:e3:cb:43:3c:18:55:7e:83:2b:76:bf:ba:40:
4d:12:6f:6b:8d:7e:1b:13:a9:3f:54:20:51:f7:b3:10:24:d2:
16:85:bc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:37:13 2025 by rpki-client