Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gZGzsTQvJtDWCEaStGe5GhcmksQ.roa
File: gZGzsTQvJtDWCEaStGe5GhcmksQ.roa (raw, json)
Hash identifier: ZadIN0QrNPzv0KdKC5ml9vmDD64Nl//JlYL7KpGaieY=
Subject key identifier: 81:91:B3:B1:34:2F:26:D0:D6:08:46:92:B4:67:B9:1A:17:26:92:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189ACB9D3361634B4F6F53B591D40105EFA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gZGzsTQvJtDWCEaStGe5GhcmksQ.roa
Signing time: Mon 31 Jul 2023 16:13:26 +0000
ROA not before: Mon 31 Jul 2023 16:13:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ac:b9:d3:36:16:34:b4:f6:f5:3b:59:1d:40:10:5e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 16:13:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8191b3b1342f26d0d6084692b467b91a172692c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:e4:a6:ac:82:c6:53:4c:aa:57:83:f4:71:
b0:3c:90:cc:29:c0:38:52:3f:64:9d:9a:4a:e1:ff:
5c:e3:bd:9e:92:0d:f6:81:64:89:d5:b8:5b:3c:8a:
9d:69:98:5c:8b:41:31:9f:fb:f8:e6:df:20:01:d8:
04:6e:ba:a4:86:13:3c:35:b5:60:9a:35:1e:e9:54:
54:e3:b3:31:06:68:22:3b:62:a7:81:09:32:82:55:
86:76:31:5b:55:00:8f:17:11:b9:f6:ee:ef:39:7c:
d0:09:bb:d3:49:59:46:39:7d:b0:6a:5a:2d:64:ab:
be:75:ca:5a:d7:98:d0:a4:36:38:91:b1:c3:a7:bf:
c9:7f:25:dd:f0:57:5d:44:73:e7:cc:39:cf:8f:38:
d9:cd:24:9c:58:ed:b7:a6:29:55:f0:1f:fb:38:6d:
84:93:2a:6e:f7:f0:f0:0a:0c:a4:1a:e7:14:a9:88:
b0:4a:d7:85:de:49:0c:a0:1e:27:f3:2f:91:5b:e1:
41:c4:34:36:e9:83:9f:8e:ac:46:35:01:6e:d6:6d:
fe:7e:9f:e0:86:ce:49:1a:a9:67:99:a3:e0:61:be:
8f:dd:37:35:76:27:53:d5:02:70:bb:ba:64:94:95:
9b:53:60:23:74:b1:52:f9:bd:4a:de:9f:d1:1b:07:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:91:B3:B1:34:2F:26:D0:D6:08:46:92:B4:67:B9:1A:17:26:92:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gZGzsTQvJtDWCEaStGe5GhcmksQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:59:4e:5e:cf:70:62:65:16:65:55:36:db:67:17:14:b6:78:
1c:6a:bc:31:15:9d:81:fe:27:2a:8e:bf:ac:7f:bc:71:c4:22:
2a:97:2a:03:a4:9a:54:23:5c:b8:94:46:7f:e8:51:25:0f:4d:
26:12:03:44:8e:99:c6:23:30:73:f1:55:f1:cf:0a:b9:39:d4:
d3:7e:c5:bc:e4:aa:ad:d0:13:7f:e1:90:f5:52:a1:41:e5:4e:
f1:d2:d1:a4:6c:4f:6f:26:fa:b0:c1:09:0c:bb:44:e4:f2:73:
0a:19:77:fc:19:1c:36:f4:46:2e:d9:0b:2e:9b:47:d2:24:0f:
ed:2a:a0:16:03:0a:cf:b2:4c:bb:d9:ae:28:d8:b4:f4:23:3e:
5a:cb:e9:2f:04:83:a7:4d:99:81:a0:0b:a8:e3:53:95:6a:b3:
d1:39:5a:1e:b5:ac:4a:7d:51:41:aa:0c:cb:60:a3:a9:ec:ce:
09:a5:bf:d3:33:52:19:6d:f4:10:b5:1d:57:8c:14:71:8f:ba:
89:88:b8:07:80:b4:84:15:be:b7:ce:87:0e:c4:e7:82:cf:66:
69:74:e7:4f:3e:84:36:e3:b5:a8:8e:fa:32:cd:7c:7a:e0:65:
54:89:9a:21:f6:98:af:7a:15:57:37:7a:62:6b:a7:e0:f5:33:
94:1e:5d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:16:58 2025 by rpki-client