Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gUQp5N56dpRLZDDLLtbbq0ZJzRk.roa
File: gUQp5N56dpRLZDDLLtbbq0ZJzRk.roa (raw, json)
Hash identifier: WVn773bfDAY7IgOmzijCnnmD24SBI9DJEBTUfiyHy08=
Subject key identifier: 81:44:29:E4:DE:7A:76:94:4B:64:30:CB:2E:D6:DB:AB:46:49:CD:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850A1D0921C87D2A290F5728520CB079C3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gUQp5N56dpRLZDDLLtbbq0ZJzRk.roa
Signing time: Tue 13 Dec 2022 06:12:33 +0000
ROA not before: Tue 13 Dec 2022 06:12:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0a:1d:09:21:c8:7d:2a:29:0f:57:28:52:0c:b0:79:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 06:12:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=814429e4de7a76944b6430cb2ed6dbab4649cd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:34:b2:85:2d:df:27:2d:90:46:9b:8b:96:
92:5f:79:50:67:bf:f2:77:a6:12:e9:9a:dc:ca:8a:
62:5f:11:d5:f7:0e:a4:85:18:3c:84:7c:fb:03:38:
a6:cf:31:7d:24:f3:14:67:f4:e7:0c:e3:74:00:08:
d8:cf:bd:cf:8e:e2:ec:39:06:48:51:b0:9a:bb:9b:
38:06:71:bb:fe:c5:c8:3d:3f:7d:41:ef:4b:e4:61:
b5:cf:11:b1:53:1c:5a:76:d1:0d:ca:73:3d:62:39:
30:c2:ba:4b:d5:3a:41:e8:c2:29:08:cc:83:5f:71:
5b:f0:2a:73:2f:0b:49:f3:04:59:71:3b:a6:37:01:
5a:c5:2e:a9:c1:d0:10:71:91:ca:90:46:a8:41:7b:
9a:87:e3:bb:4c:ab:7d:9e:36:42:e2:d2:9c:03:24:
72:78:57:28:12:0c:79:c6:76:4d:45:91:4d:0a:fc:
e2:96:f1:89:3e:6f:a0:fe:8d:81:e0:e1:78:90:67:
6c:64:52:37:01:bd:74:e1:5c:a1:98:1e:b4:18:c8:
76:dd:b0:9b:cb:e3:e5:57:3b:09:d0:bd:c7:0b:2b:
b3:d5:db:ac:cd:88:71:7f:b8:03:11:2e:7c:79:86:
9b:c4:8a:d5:e5:d8:fb:46:a0:11:7d:24:64:43:e1:
16:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:44:29:E4:DE:7A:76:94:4B:64:30:CB:2E:D6:DB:AB:46:49:CD:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gUQp5N56dpRLZDDLLtbbq0ZJzRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:95:57:f2:bc:30:10:05:b1:8c:f7:cf:08:c9:ad:c7:00:76:
30:a3:6e:0a:a0:92:dd:06:3d:32:fa:bd:a9:41:27:66:97:36:
17:eb:40:50:4e:9e:6d:30:e0:fc:ec:9b:69:e7:ff:0f:90:a7:
ea:8f:cf:a7:99:f7:69:05:ae:b8:d7:b2:16:e3:c6:9d:6a:3e:
3f:e9:33:58:20:87:f8:37:7b:99:fb:dc:8d:03:5f:1d:19:23:
5b:cb:d0:ea:40:59:45:28:18:9d:75:3a:b7:c4:24:e9:6e:55:
af:5c:69:6e:6b:03:09:f4:56:c6:6d:60:15:7e:c9:fb:52:63:
30:fd:08:5b:46:ba:4a:d3:bb:95:91:d6:41:59:93:f0:1c:2d:
02:e1:d3:07:e5:43:a8:4e:f2:35:95:31:4b:dc:29:93:f3:a5:
e4:5f:da:8d:20:b8:73:93:4d:87:ce:bb:00:1c:f1:f5:e2:e7:
13:f1:93:f6:38:c7:92:5a:b3:85:2b:ce:3d:01:a4:fe:b3:e9:
fd:80:80:da:bb:f6:5a:42:4f:ed:46:52:63:64:46:7c:ba:89:
ad:c0:84:5a:d8:61:e3:5d:ca:f0:36:a8:f8:08:47:9b:7e:60:
50:77:7f:61:af:47:88:68:01:09:85:13:05:52:18:7a:23:5a:
d2:51:b5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:02:23 2025 by rpki-client