Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/giWzr9J5c9Zff3VQhiX_Skz4XR8.roa
File: giWzr9J5c9Zff3VQhiX_Skz4XR8.roa (raw, json)
Hash identifier: OyhRx8taGmT9BYpIIGPCsB9RkSDppOYdjm0/vrCec1Y=
Subject key identifier: 82:25:B3:AF:D2:79:73:D6:5F:7F:75:50:86:25:FF:4A:4C:F8:5D:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867A8C41BE448C6B87F790808D84A7CA1F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/giWzr9J5c9Zff3VQhiX_Skz4XR8.roa
Signing time: Wed 22 Feb 2023 19:14:17 +0000
ROA not before: Wed 22 Feb 2023 19:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:8c:41:be:44:8c:6b:87:f7:90:80:8d:84:a7:ca:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 19:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8225b3afd27973d65f7f75508625ff4a4cf85d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:3e:a2:77:32:41:9c:0e:ea:54:57:ce:b8:
21:ae:dc:ca:a7:73:f3:e4:2b:a3:a4:da:12:80:af:
f9:60:80:cd:17:b1:71:70:e2:85:ac:47:55:b9:c4:
f7:1c:ef:70:2d:76:c2:73:04:cf:3a:c7:91:71:33:
33:01:af:81:9b:dd:2b:fa:f6:7d:41:7a:66:b4:ed:
a1:0b:cb:f9:ee:7b:56:6b:27:8f:4c:32:98:f5:17:
6e:bb:c3:3e:e3:0a:85:04:61:72:0d:24:4f:12:e4:
ab:ce:68:aa:df:de:fd:91:44:0e:f0:41:3f:30:d8:
2b:52:88:4d:06:8c:0c:40:bc:72:3c:73:ab:97:8b:
2b:12:bc:d9:ce:a4:61:eb:69:b0:1e:e5:30:16:d0:
42:2a:7c:81:cb:15:08:a9:0b:09:d3:7e:a2:2e:66:
70:a8:03:4e:eb:53:65:8e:d7:d3:fd:99:c1:9c:c1:
59:07:d8:17:2f:22:3f:98:51:9f:de:03:3e:54:49:
5a:6a:6c:35:0a:d3:cf:1d:0e:1b:3a:c4:81:41:9e:
d1:e5:71:1d:ff:f8:3a:8c:b0:43:a9:9d:7b:5c:6b:
bb:a3:b0:e5:ea:09:61:26:ea:96:ba:ca:50:be:73:
d3:92:76:d6:c9:98:f1:9f:8c:c4:19:7c:16:d2:2b:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:25:B3:AF:D2:79:73:D6:5F:7F:75:50:86:25:FF:4A:4C:F8:5D:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/giWzr9J5c9Zff3VQhiX_Skz4XR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:b7:60:17:c7:66:cf:60:2c:12:8e:23:c9:51:59:21:cb:0d:
80:55:41:ed:d8:3e:32:79:26:be:2a:82:59:44:bb:c7:0c:3c:
84:a4:73:10:5a:3d:a0:6b:41:2b:57:59:87:9f:06:c0:0d:30:
20:d4:5a:e1:d0:7f:55:eb:2f:f7:6d:b8:72:e7:66:b3:28:ba:
fa:68:c9:e8:d1:41:ab:35:e4:c3:bc:0e:a0:7c:4e:1b:a1:0d:
fb:49:f8:31:32:bb:fb:da:a3:88:b0:60:7f:4d:a2:29:6f:5a:
98:e0:04:03:af:47:dd:ea:18:5b:21:5c:9a:6c:95:b7:2d:59:
9e:d3:06:b8:0e:88:af:a0:4b:94:81:90:17:9a:84:59:0e:10:
cc:fa:8e:2b:cc:68:33:b7:46:b0:5e:6b:f5:cb:3b:88:b1:26:
80:f7:c6:38:5d:1d:bc:bd:70:fe:d4:16:e1:7d:f5:5f:a2:02:
90:09:bb:85:38:b7:90:10:2f:71:a3:2f:5d:29:dd:58:84:b2:
eb:23:e4:6d:04:63:3d:eb:f8:12:a4:34:94:f0:c9:0f:8a:16:
eb:dc:ca:e6:d7:dc:ff:34:d8:39:db:88:d7:14:28:1a:06:a6:
bb:35:d5:74:2b:4d:95:09:89:bd:67:7e:ac:22:62:0e:14:ce:
c9:04:a5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:06 2025 by rpki-client