Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gjfdjWnimlmLLMKpSbA25mE3YJk.roa
File: gjfdjWnimlmLLMKpSbA25mE3YJk.roa (raw, json)
Hash identifier: gAbMbqH/GGpHQNwvO1V20ThRDXccz/nj9jpl4Eo51zw=
Subject key identifier: 82:37:DD:8D:69:E2:9A:59:8B:2C:C2:A9:49:B0:36:E6:61:37:60:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 70CD2005
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gjfdjWnimlmLLMKpSbA25mE3YJk.roa
Signing time: Tue 08 Mar 2022 15:08:56 +0000
ROA not before: Tue 08 Mar 2022 15:08:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1892491269 (0x70cd2005)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 15:08:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8237dd8d69e29a598b2cc2a949b036e661376099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:33:08:c8:0c:14:12:be:41:ed:dd:91:8a:
4c:20:6e:ed:bb:3a:0f:a8:27:77:3f:d5:63:74:db:
a2:c2:86:a1:28:e2:18:75:8a:fa:4d:e4:8e:98:fc:
03:d9:13:65:d0:64:a2:01:3c:48:56:5e:7f:61:06:
9a:bb:1e:2b:df:95:7a:75:5e:6e:8d:43:5a:8b:42:
9c:4a:9a:52:e8:47:d7:c9:f7:58:c3:4c:0f:f0:fc:
61:b4:e2:da:32:97:07:b0:98:7b:51:80:b2:77:68:
a8:5c:2b:ec:82:1a:90:58:47:f5:8f:84:0f:3c:09:
4c:32:eb:0d:fd:6b:e3:19:b7:09:08:49:47:3d:e4:
53:a8:f0:56:c2:02:de:fa:c5:14:54:01:4e:a1:a8:
f2:b6:8b:7e:55:6e:01:65:e9:65:f4:92:3b:06:57:
0a:20:87:ba:35:c7:af:54:86:4d:f3:0f:a8:17:b5:
5a:59:50:b4:f1:92:f3:4a:2e:25:c9:10:34:84:a5:
c7:bb:dd:36:e4:8f:19:af:31:d9:aa:71:31:87:7f:
71:0b:64:18:88:79:1b:10:74:cd:46:71:18:bf:7d:
06:12:cc:04:9d:77:74:64:74:24:7f:1f:fa:82:db:
82:1b:91:c1:27:74:23:39:00:ce:49:68:6d:d5:fa:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:37:DD:8D:69:E2:9A:59:8B:2C:C2:A9:49:B0:36:E6:61:37:60:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gjfdjWnimlmLLMKpSbA25mE3YJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:22:b0:53:20:57:44:2c:fd:0c:d9:95:28:7a:af:c7:3f:f1:
fb:f8:d9:59:9f:1a:1b:cb:7c:8c:03:eb:09:04:d3:ce:3a:aa:
84:b5:aa:f0:76:88:ae:9e:5b:62:d1:c8:14:ca:cd:dd:06:24:
dc:da:55:93:00:64:41:40:f1:1f:fc:ad:32:30:4c:11:05:82:
56:22:3c:ad:19:1c:51:ab:9e:5d:29:4f:a4:71:7a:72:03:a9:
6b:14:4d:19:63:9a:1f:7f:fb:28:34:78:35:42:d7:eb:e9:b1:
20:15:87:a2:6d:2e:f2:8c:8e:ac:fb:61:54:84:ce:4c:92:42:
b9:b5:c1:cc:16:9e:d2:3d:e2:b2:eb:5e:1f:4a:5a:3c:d0:44:
9c:74:d9:bb:ba:c6:d8:b1:bf:5f:53:7c:52:16:81:0d:dd:f6:
f8:9d:2f:d9:d7:da:9c:44:63:2f:e0:7f:28:c7:49:a6:20:24:
a1:0c:42:6e:4c:95:d4:7c:08:17:d4:d6:ee:7a:02:49:73:4d:
54:e4:b8:0c:b3:36:d5:8d:49:ab:f7:a0:3c:90:c8:db:d3:82:
14:31:9a:82:d2:13:07:d2:f9:86:fe:5f:87:31:6e:1e:9e:56:
f0:07:54:1f:ab:e2:a1:2c:67:4a:43:e7:8e:81:ab:30:7a:e6:
d3:97:6c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:45:41 2025 by rpki-client