Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gPo0wis6CTTKl3fSAWgJpiuM5ok.roa
File: gPo0wis6CTTKl3fSAWgJpiuM5ok.roa (raw, json)
Hash identifier: eFRKvbQZL8bmKme48Prl71f/meYcKMOlJc06E7zpzGs=
Subject key identifier: 80:FA:34:C2:2B:3A:09:34:CA:97:77:D2:01:68:09:A6:2B:8C:E6:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186074951B49EBDDDD3AC1177852250E3E2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gPo0wis6CTTKl3fSAWgJpiuM5ok.roa
Signing time: Tue 31 Jan 2023 10:04:50 +0000
ROA not before: Tue 31 Jan 2023 10:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:749:1582/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:49:51:b4:9e:bd:dd:d3:ac:11:77:85:22:50:e3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 31 10:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80fa34c22b3a0934ca9777d2016809a62b8ce689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:5e:4a:dd:2d:12:11:ac:1b:f2:49:71:65:
63:d5:fa:47:61:ea:b6:54:f3:22:c4:e5:1a:fe:e9:
86:39:8f:41:ab:87:e5:9e:b5:88:8e:bd:b5:66:e6:
6b:1b:2c:9e:78:c6:4d:eb:b4:a4:46:e3:bc:11:63:
50:22:be:5b:24:87:66:91:de:28:3d:ac:cc:0b:8d:
8d:85:11:d3:fb:48:93:ec:9b:91:e6:82:83:b3:5a:
0c:3c:51:6f:ac:8b:cf:c9:e5:86:1d:34:07:40:3b:
7a:4f:3c:ea:c4:2b:f8:24:d8:c2:b2:b5:0d:05:66:
86:c8:e1:b5:bb:30:ce:fa:71:1b:d0:c8:02:38:fd:
1f:71:3a:28:0e:3f:76:7f:bf:a3:1c:0b:01:16:c4:
2b:9a:fa:45:f1:39:1d:20:3b:ea:62:a7:67:92:6c:
fa:65:ff:a8:25:17:19:4d:f6:dd:07:d1:bf:70:12:
a4:5a:27:f0:51:e9:4e:ad:ea:57:03:ba:85:98:9d:
c8:cc:ae:9d:d4:b0:22:95:66:5d:bd:f6:2e:db:bf:
b7:22:af:e4:59:b7:b6:f5:99:f3:31:71:d6:ed:78:
c1:b5:7a:e5:34:59:06:05:49:aa:81:2f:01:c6:d8:
5a:2f:4c:d7:c0:8d:03:d7:b3:7e:2e:1a:c7:b3:92:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FA:34:C2:2B:3A:09:34:CA:97:77:D2:01:68:09:A6:2B:8C:E6:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gPo0wis6CTTKl3fSAWgJpiuM5ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:0a:a3:06:24:fd:75:b3:0f:be:65:98:fd:cc:10:3a:25:16:
df:87:aa:b4:42:dc:3d:bc:d0:d6:c7:64:a0:fa:3f:fe:92:28:
ad:59:d4:94:93:e8:3d:3d:aa:43:98:6c:18:51:7e:19:d3:a3:
3b:44:7d:91:5f:ed:44:27:e2:ee:31:66:71:af:5c:e4:35:6b:
86:e2:06:1d:dc:fc:a0:e0:63:bb:2e:d6:48:82:70:ad:52:fe:
46:e0:69:49:7d:b8:3e:c5:49:42:d8:eb:9b:72:94:09:b0:fb:
39:31:b2:7a:7e:10:7a:0a:1c:63:52:a8:30:d9:af:b1:bf:5b:
3c:d5:66:6e:29:4c:da:9d:9b:ca:47:e3:6b:c5:d6:41:0c:9f:
80:93:47:10:fb:7f:d0:94:a5:4e:e2:3e:2d:6e:12:f4:03:48:
da:7c:c5:89:b6:95:ba:46:46:d1:9f:8e:af:46:05:9e:af:4f:
ee:66:63:7d:b2:91:09:5d:d5:45:4f:a0:97:38:b2:52:53:8f:
32:c0:84:2d:33:7d:ba:8f:11:36:c1:ec:68:3e:4d:61:da:3f:
19:fd:92:20:63:31:53:b3:b9:c1:9e:36:c7:ab:36:ab:16:7c:
99:a2:42:90:7b:46:2c:04:67:02:2a:89:85:39:4a:7f:70:41:
c6:6b:d0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:51:39 2025 by rpki-client