Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gY4iDNHz7Kpu5E9FajyBS9N97ac.roa
File: gY4iDNHz7Kpu5E9FajyBS9N97ac.roa (raw, json)
Hash identifier: lFGrLbVjOzTw7Cblwg6XtljbZGDFmILEKfAiYfgrR8w=
Subject key identifier: 81:8E:22:0C:D1:F3:EC:AA:6E:E4:4F:45:6A:3C:81:4B:D3:7D:ED:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894AAB8148592C393109FDB1380D09145D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gY4iDNHz7Kpu5E9FajyBS9N97ac.roa
Signing time: Wed 12 Jul 2023 15:15:00 +0000
ROA not before: Wed 12 Jul 2023 15:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:ab:81:48:59:2c:39:31:09:fd:b1:38:0d:09:14:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 15:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=818e220cd1f3ecaa6ee44f456a3c814bd37deda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:86:eb:f3:87:4f:30:22:89:01:5f:76:1c:
ce:92:a6:ff:83:07:5d:e6:f9:26:0a:39:9d:ca:98:
9c:37:90:8c:e5:dd:f1:e7:25:62:d6:4d:65:3c:f5:
14:8c:5c:c8:b0:32:62:83:11:1a:d7:53:98:3b:53:
3b:9b:fc:d5:75:65:0c:2a:24:ec:de:5a:94:56:db:
d5:61:a2:f6:4a:a2:ff:9a:2a:9a:fc:2d:f2:bc:83:
0a:de:71:62:58:df:23:b5:d5:25:45:3b:0e:5c:8e:
fb:10:82:5a:2c:1b:fe:af:61:26:b0:17:59:30:4b:
89:d4:f3:87:e2:5b:55:f5:aa:fa:84:dd:b5:7f:66:
b5:c3:35:32:b5:a5:50:66:d3:a8:f0:79:ff:1a:cb:
a4:80:43:f2:58:fd:66:f8:1c:85:17:50:ef:66:44:
94:5d:ca:0f:e6:47:c2:cc:a3:98:d7:82:87:c7:b1:
04:46:88:f5:e0:20:4b:a9:87:87:fb:ac:d9:ae:60:
6f:78:7f:75:be:5f:73:04:d1:2b:ad:b5:2b:9c:a4:
e0:97:20:9b:ef:0b:76:46:01:04:ad:1f:80:7a:1e:
55:b6:bb:c4:65:1f:ac:98:04:55:0d:9d:14:6b:c5:
c4:de:37:82:c1:f6:ca:45:80:3b:c0:71:59:1d:b8:
0f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8E:22:0C:D1:F3:EC:AA:6E:E4:4F:45:6A:3C:81:4B:D3:7D:ED:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gY4iDNHz7Kpu5E9FajyBS9N97ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:fb:ec:08:ef:d2:b6:06:a5:3c:74:be:92:6b:9c:0a:49:9d:
33:18:35:d1:d2:63:12:8c:3b:4f:92:a3:f1:aa:45:aa:15:ec:
14:49:34:f6:a8:d6:90:8d:29:5a:78:cd:7f:fe:89:28:d7:39:
64:75:4b:3c:6b:a8:2d:c3:70:49:aa:a7:d2:84:35:e6:e6:ed:
25:fe:b4:d6:db:a7:5d:11:7d:09:f7:ba:00:ef:97:75:f9:e9:
6b:be:5b:2a:fb:c3:10:d4:8b:d9:47:97:7f:36:ed:4f:25:e0:
5d:be:46:e6:0a:30:b4:d4:ee:51:7b:6e:0a:85:a1:3a:da:0f:
f1:c3:f7:a9:8c:1a:82:a7:2c:d0:f7:06:91:5e:2c:9b:a5:63:
6f:84:10:ab:f5:f6:54:2f:e3:e0:d2:a3:59:89:78:47:51:d9:
9c:3b:eb:62:53:66:a6:2b:04:85:4b:2b:e1:ae:d8:85:53:5d:
a2:50:34:9d:e4:1b:b1:12:b9:d9:f8:34:bd:3a:f0:d3:55:07:
f4:78:a5:27:50:2e:d2:3e:91:68:95:db:ae:a0:df:b4:46:e6:
db:95:48:7d:31:d1:c7:8a:4a:7b:7d:4b:11:af:7f:cb:d9:99:
ba:05:e2:84:64:3a:dc:03:6d:c2:98:17:e0:ea:0f:c9:40:01:
47:e3:92:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:24:48 2025 by rpki-client