Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gb4G9LhjD5TF4C8lpC5pFa74Dhs.roa
File: gb4G9LhjD5TF4C8lpC5pFa74Dhs.roa (raw, json)
Hash identifier: Mh4P3thMShKfSfc53DvO1q0Id8FVttVcyKZdKtR8Izc=
Subject key identifier: 81:BE:06:F4:B8:63:0F:94:C5:E0:2F:25:A4:2E:69:15:AE:F8:0E:1B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BB880BDECFD58EC7A3427334B27B95D3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gb4G9LhjD5TF4C8lpC5pFa74Dhs.roa
Signing time: Tue 07 Mar 2023 10:05:00 +0000
ROA not before: Tue 07 Mar 2023 10:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:bb87:4547/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:88:0b:de:cf:d5:8e:c7:a3:42:73:34:b2:7b:95:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 10:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81be06f4b8630f94c5e02f25a42e6915aef80e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4f:f4:22:0e:26:d9:18:fb:95:45:ae:80:07:
c0:bc:19:88:f5:66:d1:58:a1:01:60:a2:73:9e:7c:
a6:59:db:9a:ed:dc:3e:84:41:93:be:cc:65:f3:07:
4e:dd:de:0a:42:1a:98:75:c3:8f:cd:73:93:35:2a:
92:fb:45:7d:13:bd:ee:39:6b:f4:3c:db:8d:08:05:
88:f9:57:36:a1:5e:a0:2c:73:03:cb:58:11:ee:4a:
ce:db:37:43:d2:fd:73:9b:09:7d:7e:2f:a9:93:1d:
c4:bd:e5:b9:dc:ab:3e:95:2d:51:9b:a2:c1:69:30:
5e:08:2b:25:9c:34:63:7a:06:8e:a8:0b:fd:a1:fa:
3b:cc:48:84:80:46:ec:5d:53:e4:49:a7:cb:de:e6:
59:22:1a:b4:34:29:c6:7f:fe:1a:26:39:f4:83:43:
1e:df:ff:0e:e4:d8:18:46:6d:1b:ff:10:f4:5d:fa:
60:20:80:68:dc:93:33:76:fc:82:67:b1:7d:c4:26:
cb:28:eb:79:b2:22:40:d7:f8:cb:cd:0f:0b:44:bc:
0c:53:95:9a:82:3c:ce:ad:04:57:fe:17:ef:b0:36:
a7:c6:cf:d9:9a:b4:bb:46:d9:3b:05:b2:31:a2:3a:
c0:bb:14:6e:5e:71:e0:72:86:17:7a:5f:b9:73:38:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BE:06:F4:B8:63:0F:94:C5:E0:2F:25:A4:2E:69:15:AE:F8:0E:1B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gb4G9LhjD5TF4C8lpC5pFa74Dhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:9d:fd:ea:b8:2d:14:da:9e:2f:c1:94:43:ef:60:da:4b:12:
94:24:8d:ff:0a:6a:ef:da:70:1e:a4:22:d0:7f:15:a4:4a:9d:
a6:50:85:fb:56:75:78:00:9b:f3:fe:c9:a5:91:7e:ce:62:1c:
26:37:56:e6:f0:42:77:74:63:12:7e:9c:eb:3b:85:13:80:9b:
ae:d7:ed:e0:06:18:94:db:fe:03:cc:49:9f:1d:5b:23:14:0e:
49:24:dc:f2:3a:38:f5:4a:9c:d4:53:ae:f3:b1:9c:4c:6e:88:
4b:62:dd:2b:0b:b3:04:4a:0e:03:94:85:17:0e:e9:93:51:82:
ce:f7:de:07:ec:50:a3:2f:16:b4:a3:38:62:28:b5:f7:0f:8c:
ce:d7:c0:ae:e0:d1:20:40:e0:45:cd:57:84:ca:f1:46:b6:72:
78:dd:1e:45:04:9d:2c:db:92:09:73:03:b9:2f:50:05:e9:b3:
35:4d:c6:16:a7:9d:ae:80:6e:83:59:31:b0:ba:a8:da:90:33:
98:b0:64:27:be:19:d7:9a:73:0e:9e:49:9c:bc:7d:7b:f4:eb:
20:3d:0c:c4:d3:35:eb:ed:71:43:e2:4a:c7:0a:7e:30:74:2e:
96:fc:91:fa:8d:31:18:e0:47:27:be:6b:fc:f0:7e:2e:da:c8:
54:f8:db:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:49:24 2025 by rpki-client