Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ggVFtZsKApsGcE_1RkzUm3FpuR8.roa
File: ggVFtZsKApsGcE_1RkzUm3FpuR8.roa (raw, json)
Hash identifier: mVaJJICQIwg96l2PvBVLrvfW0NLdds/Wv5CWmj4R4gg=
Subject key identifier: 82:05:45:B5:9B:0A:02:9B:06:70:4F:F5:46:4C:D4:9B:71:69:B9:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186EE6B7F0E2161269C3AFF54878025FF05
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ggVFtZsKApsGcE_1RkzUm3FpuR8.roa
Signing time: Fri 17 Mar 2023 07:14:27 +0000
ROA not before: Fri 17 Mar 2023 07:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ee:6b:7f:0e:21:61:26:9c:3a:ff:54:87:80:25:ff:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 07:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=820545b59b0a029b06704ff5464cd49b7169b91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:70:86:70:c3:cf:f6:41:e2:e1:75:31:b3:06:
a5:7f:ea:be:5d:b3:ff:c0:da:ad:cb:6c:bc:84:d5:
12:4e:e0:cc:9d:47:a3:13:db:46:d5:7e:b0:9c:67:
1c:a8:59:2a:56:db:96:de:f3:a1:17:ae:a6:fd:e7:
cf:04:f1:0f:6d:fc:2b:84:50:56:75:29:c2:ae:c7:
a7:95:8a:e0:f0:85:e8:c8:bc:57:0a:3d:e5:4c:0e:
c7:e7:7b:b7:fd:6d:68:87:be:90:30:05:27:01:a2:
df:f4:b1:e4:8f:80:4e:94:01:b7:21:1a:78:42:dc:
73:96:0b:d4:70:11:52:32:da:04:03:41:37:32:31:
cf:1c:80:77:7f:cd:37:a6:d1:fd:a4:94:eb:33:57:
98:21:4e:6f:8f:e7:b4:47:3e:c8:83:24:4a:a2:f1:
f0:07:f3:f7:c6:f3:85:a9:27:37:49:0c:68:71:01:
76:45:8a:a2:69:4c:79:76:99:a3:35:32:22:fe:b6:
80:23:91:aa:c2:43:07:9b:57:83:92:1b:d2:3e:c5:
bc:a7:31:2d:11:5c:cc:b4:01:2d:59:26:a8:3c:90:
eb:dc:f8:4f:3e:ba:f7:5e:ac:25:81:3d:e5:56:be:
66:87:fa:8d:67:74:37:95:2c:c9:50:81:81:19:e1:
de:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:05:45:B5:9B:0A:02:9B:06:70:4F:F5:46:4C:D4:9B:71:69:B9:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ggVFtZsKApsGcE_1RkzUm3FpuR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:0a:3f:d8:7c:9d:66:98:e6:0d:05:d0:2d:e3:1f:1d:42:de:
5f:ad:e2:e1:39:cc:a2:d8:49:99:6d:fc:79:e1:5d:91:c2:90:
1f:05:a9:0e:42:c1:e5:a6:ef:57:0e:a5:18:22:79:16:cb:db:
9b:66:57:94:c8:b6:68:67:62:27:d7:65:cf:07:8b:61:54:da:
5f:4d:e1:ef:22:6a:97:8d:8d:eb:d3:d1:e1:57:79:76:6e:95:
68:70:86:af:09:b4:67:6c:e5:15:75:10:7c:51:ab:12:b4:9d:
57:8f:83:43:18:2d:dc:16:ec:e5:f8:5a:79:6b:6f:a3:ea:1e:
9b:31:91:2c:d6:b5:9a:4f:8a:9b:43:77:87:0e:ca:b9:4f:ca:
b5:9e:a4:e8:05:0b:20:d5:c5:80:ba:8e:5c:26:09:71:10:63:
a6:e1:a4:bf:11:62:e6:a8:4f:b3:d4:d8:a6:46:0b:5b:0a:cf:
c1:67:78:48:a2:64:a4:3e:27:ae:49:31:9d:8e:4a:fa:b6:e8:
49:78:10:5f:05:4e:69:fa:a2:7b:fc:1c:9e:11:d0:ac:54:b4:
29:e7:35:53:e6:a7:1d:f1:41:ed:78:7b:fb:62:d7:a6:88:5d:
9b:ae:95:26:21:83:5d:b7:e7:c2:75:ec:e4:d1:40:62:70:1a:
f7:06:c3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:00:39 2025 by rpki-client