Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gmMALO3R9euzOePpr9Cfw6PsHA0.roa
File: gmMALO3R9euzOePpr9Cfw6PsHA0.roa (raw, json)
Hash identifier: 5u0ZgB5zS2LJscuRZ9E8ag45yI5YlWOJZE0iv2GkCBk=
Subject key identifier: 82:63:00:2C:ED:D1:F5:EB:B3:39:E3:E9:AF:D0:9F:C3:A3:EC:1C:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6B5F1BB5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gmMALO3R9euzOePpr9Cfw6PsHA0.roa
Signing time: Thu 17 Feb 2022 13:04:26 +0000
ROA not before: Thu 17 Feb 2022 13:04:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:7c8:ae71/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1801395125 (0x6b5f1bb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 13:04:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8263002cedd1f5ebb339e3e9afd09fc3a3ec1c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:ba:45:f1:02:03:cb:63:c5:7e:f2:d1:e9:
09:77:6d:46:9b:fe:ea:bf:97:0b:cb:f5:9a:c4:de:
14:1e:2e:f6:f9:99:5e:83:30:e5:67:e0:8e:c3:d8:
2a:38:20:bc:36:59:be:f2:a6:f9:d8:71:03:57:ec:
e5:a3:19:2a:ba:2b:44:0c:2e:4c:62:85:f2:f6:06:
a5:7a:3e:25:90:57:cc:aa:29:fb:ed:1c:bb:59:d6:
23:4c:be:b3:bc:c9:81:e6:66:75:6f:8f:3f:7b:1c:
8a:df:18:ef:cb:f3:43:4c:23:0b:5c:21:26:3e:9e:
49:ac:70:e2:f5:10:8d:76:ab:8e:90:7c:ff:fa:cf:
07:74:52:cf:5d:96:c3:88:39:38:30:ed:e1:3b:5e:
90:76:bc:bb:86:c5:85:db:d0:55:5f:16:3c:60:9d:
d6:aa:90:0b:2d:3d:e0:28:52:04:2b:95:54:3b:9c:
ae:a1:f9:38:ce:a8:ed:18:5b:d4:47:02:66:50:84:
e4:d6:6a:90:ad:7e:41:f9:d8:ee:09:20:c1:0d:9f:
bd:08:b4:b4:94:f5:61:df:bb:13:56:e6:ab:82:06:
1e:9a:1f:b1:92:68:bd:99:f7:70:24:f7:b9:fc:53:
4f:b3:6b:b5:b9:b9:41:c1:3e:26:3f:82:a2:08:1e:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:63:00:2C:ED:D1:F5:EB:B3:39:E3:E9:AF:D0:9F:C3:A3:EC:1C:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gmMALO3R9euzOePpr9Cfw6PsHA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:af:4d:26:3f:62:b5:99:db:ac:b5:a2:3d:bc:85:6b:8e:10:
b9:33:84:4d:12:e7:3d:4b:1b:07:f0:a8:58:96:de:21:25:02:
8f:76:34:1f:d1:5e:48:c7:3d:c3:2e:02:c0:51:cc:85:95:51:
47:26:01:6c:8f:43:8a:fd:8f:50:12:fa:85:ac:5a:c8:b9:38:
b7:a6:12:44:5f:37:16:65:73:87:2d:b0:15:40:6f:aa:4d:53:
e3:db:c7:e8:f5:b1:07:70:38:17:57:5f:18:f6:e7:fa:06:a3:
9e:de:55:62:ea:c3:dd:9d:2e:61:df:74:e6:31:70:0d:bf:b7:
78:2a:9d:82:5a:94:9b:18:cf:58:65:4e:85:52:0a:23:be:a1:
04:0c:f4:35:68:11:70:f2:5c:ec:38:5f:75:49:eb:d8:a5:03:
0f:1d:34:f3:19:a9:69:b4:90:4c:5d:7f:f1:53:78:c3:31:74:
0a:e4:90:d6:e3:38:29:12:ad:4e:5e:d1:22:f9:85:e5:e2:66:
39:f5:05:88:11:d0:46:58:ab:46:a4:e4:df:f8:5d:34:6c:af:
f8:cf:a2:7c:0f:42:ea:4a:e6:f1:fd:e5:4e:9b:64:f8:1c:15:
a1:33:09:2b:d0:b0:75:d2:1f:ee:ae:b7:84:2f:58:cb:3f:ed:
27:d8:db:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:35 2025 by rpki-client