Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gSiiiKpiELA19jV5-p66_RCmMto.roa
File: gSiiiKpiELA19jV5-p66_RCmMto.roa (raw, json)
Hash identifier: J422ttOWCMSV2SDYFsUQDpx4Gkd3m8P++Iem5Qk0a2I=
Subject key identifier: 81:28:A2:88:AA:62:10:B0:35:F6:35:79:FA:9E:BA:FD:10:A6:32:DA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 70C15EE8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gSiiiKpiELA19jV5-p66_RCmMto.roa
Signing time: Tue 08 Mar 2022 11:04:49 +0000
ROA not before: Tue 08 Mar 2022 11:04:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:6933:fe2d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1891720936 (0x70c15ee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 11:04:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8128a288aa6210b035f63579fa9ebafd10a632da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8a:89:46:78:93:1a:4a:e0:74:e4:ed:ce:93:
73:7c:ee:fe:91:3b:34:92:6a:22:13:ae:33:a0:6e:
9f:44:34:22:5e:e6:3c:48:ef:83:e5:45:69:a5:96:
e0:ab:a6:0a:63:0f:f0:51:e0:ec:8a:3f:b9:c5:b8:
64:30:fe:9f:ca:a5:1a:48:39:06:95:27:84:c4:fd:
86:e1:ea:2c:d2:b1:4e:b8:ab:e4:59:36:7f:b1:91:
9f:02:c6:92:58:63:82:55:cb:73:e5:f1:a5:5f:73:
41:68:3a:12:57:e0:3d:0d:33:b7:2f:60:49:f3:1d:
7b:b6:b3:ed:6f:38:af:9e:21:54:41:cb:47:0a:d9:
56:99:68:50:cf:73:37:fd:7a:90:33:f0:4e:1f:21:
3f:32:43:e0:cb:6f:61:7c:01:dd:20:38:1f:76:1b:
3d:bb:17:99:58:e0:15:cd:1c:a3:4a:2b:a5:51:93:
20:6a:0f:81:68:54:ef:f6:f2:1f:e9:27:cc:79:41:
d3:4a:51:00:9b:1a:82:32:8b:f3:8a:53:43:63:9c:
79:52:c0:a9:c8:a8:7c:f1:b1:a9:26:eb:a6:3d:3d:
23:14:e3:b7:d9:23:f5:1d:f5:ff:cb:f0:ae:da:33:
ff:58:73:a4:72:7f:60:57:04:86:7e:38:59:e8:89:
71:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:28:A2:88:AA:62:10:B0:35:F6:35:79:FA:9E:BA:FD:10:A6:32:DA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gSiiiKpiELA19jV5-p66_RCmMto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:d8:48:0c:60:f2:56:1e:b6:a3:bd:38:10:96:7a:0a:72:e5:
c8:07:68:e2:72:18:20:58:9d:15:d3:05:a0:99:03:d8:40:54:
40:34:09:ad:87:ac:bf:07:74:c6:cf:e6:f2:c5:64:26:5e:7e:
12:d2:56:44:6c:36:35:e2:67:bc:92:b4:6c:4c:c3:2c:04:9e:
c6:41:8c:b3:5f:0e:e8:f3:73:8d:cc:d8:99:88:59:c7:2a:de:
fb:0a:7a:90:b3:cb:a7:64:6b:23:9c:27:a4:52:5b:5b:76:f0:
86:9d:a8:d9:20:a1:ef:20:37:85:83:fb:a8:d8:4d:bd:21:c9:
c9:37:0b:a5:34:50:e3:ef:f2:2d:97:40:6a:f9:bd:47:65:3c:
48:75:47:83:ae:cb:9c:90:3e:19:43:60:16:f3:e6:ea:cf:b0:
7c:f3:a6:b0:59:69:e5:56:6d:4a:3b:c4:30:a5:24:c5:9a:5d:
e5:cd:a3:3d:f8:67:eb:dc:46:eb:1b:81:21:db:e6:e3:ac:b2:
9f:9c:f3:56:3a:64:66:eb:2c:98:99:bb:0f:df:9a:5b:99:08:
71:b8:56:ac:91:98:8e:96:41:3b:a5:d9:e3:90:c8:2b:b0:e9:
8b:68:8c:74:b9:59:2f:3e:a9:e9:cb:67:9e:e5:47:0c:5c:c8:
46:38:09:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:33 2025 by rpki-client