Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gaSMtkDTnbnQ2oSMhwe-Ko0ypuc.roa
File: gaSMtkDTnbnQ2oSMhwe-Ko0ypuc.roa (raw, json)
Hash identifier: 7WOO7d5tita4uaYkcSn24QYcjtMd91DP0RPm9+fgnFE=
Subject key identifier: 81:A4:8C:B6:40:D3:9D:B9:D0:DA:84:8C:87:07:BE:2A:8D:32:A6:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182AA6EA8DB704F5B2C2088E0046821DC97
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gaSMtkDTnbnQ2oSMhwe-Ko0ypuc.roa
Signing time: Wed 17 Aug 2022 06:12:35 +0000
ROA not before: Wed 17 Aug 2022 06:12:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:aa:6e:a8:db:70:4f:5b:2c:20:88:e0:04:68:21:dc:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 06:12:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81a48cb640d39db9d0da848c8707be2a8d32a6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:20:88:02:7f:07:0b:4a:21:a4:a9:6a:06:70:
aa:7e:32:8a:42:fd:b4:e3:c6:61:5d:66:93:88:f7:
21:a2:df:6b:66:20:f6:a7:ed:5e:a3:17:8a:75:a8:
7a:a2:fe:03:94:63:5e:0b:42:63:5e:dc:5a:b4:33:
e5:73:80:5f:14:7a:88:4e:7b:08:49:4b:48:13:c5:
7e:44:1c:56:0d:20:7e:71:6c:b0:ab:9b:78:3c:d3:
4f:8c:fd:0f:aa:fc:d2:37:d8:22:b1:4f:56:cf:0b:
d2:62:95:32:3a:e5:5d:73:f1:07:60:0b:a9:cb:13:
69:46:b5:2b:2e:f2:83:86:13:90:7a:b1:51:cf:09:
bc:2e:99:9b:68:6d:f3:27:4a:52:6e:68:5e:95:e3:
ca:59:42:db:2d:12:68:fe:dd:12:b6:e3:d8:3b:16:
30:66:7b:36:a9:b0:77:f2:fa:69:84:65:12:fe:2b:
35:c4:17:c5:ff:26:b4:8f:ff:4b:c3:fd:bb:7a:0e:
0b:b0:61:20:02:f0:8e:73:e6:db:33:7a:ac:90:ea:
c7:f5:2d:af:9b:52:bd:30:0d:e5:eb:e5:a4:a8:5e:
1b:3f:ae:ba:21:82:3f:53:bb:ba:dc:0d:39:7c:d2:
89:54:d1:4a:ec:4c:62:35:b3:aa:24:d3:22:ca:c0:
27:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A4:8C:B6:40:D3:9D:B9:D0:DA:84:8C:87:07:BE:2A:8D:32:A6:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gaSMtkDTnbnQ2oSMhwe-Ko0ypuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:53:e1:5d:9c:21:84:35:e3:61:09:12:94:c9:cb:7a:78:73:
80:98:7b:18:7a:0d:4f:9e:f9:7d:d4:43:f3:8c:0c:8c:e2:b9:
d4:e1:1e:d2:20:c1:b8:b1:9d:7e:80:8f:f4:72:aa:4c:61:98:
79:ae:9b:ea:0b:a3:e5:7a:20:e8:5c:f2:de:6d:b8:32:2c:4e:
de:11:6a:fe:0e:bf:18:21:7a:d3:9b:27:07:36:22:83:81:d4:
90:93:72:9b:a1:a0:3c:11:9e:59:7e:46:05:b9:e4:7c:77:8b:
72:b9:6f:22:ea:da:c6:89:15:9d:6b:ca:38:d2:06:63:56:57:
a8:7c:98:9b:2c:8f:ff:8f:29:76:9a:33:29:2a:00:1e:66:7f:
ba:0d:7b:da:f6:32:81:20:65:bd:e2:7a:03:27:9b:31:06:b6:
b2:10:a4:24:37:ec:a1:c3:d8:7c:2a:91:38:99:57:00:66:8b:
04:b5:f4:82:d6:eb:a8:fe:b5:39:e2:d6:eb:e4:f9:9d:f5:62:
e9:c6:72:2a:b6:6c:ce:a7:96:21:cd:18:6d:7c:3f:8e:e0:50:
db:77:15:ef:fd:e7:55:f8:7f:e7:65:59:7e:f3:df:79:36:a5:
60:50:42:df:4b:86:54:c5:93:3d:4a:c8:3d:d9:c7:8f:53:0d:
d5:ab:86:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 15:08:31 2025 by rpki-client