Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gnNOLRuhvgsvvADSJUZ4OCUWALU.roa
File: gnNOLRuhvgsvvADSJUZ4OCUWALU.roa (raw, json)
Hash identifier: OtOzI8wQg2LOe5u0ZIw9c7cGPFplO+lO6sEfuKLnSog=
Subject key identifier: 82:73:4E:2D:1B:A1:BE:0B:2F:BC:00:D2:25:46:78:38:25:16:00:B5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A438B1B6717D31FBF822C9501D813FEE3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gnNOLRuhvgsvvADSJUZ4OCUWALU.roa
Signing time: Tue 29 Aug 2023 23:05:04 +0000
ROA not before: Tue 29 Aug 2023 23:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:438a:d7e4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:43:8b:1b:67:17:d3:1f:bf:82:2c:95:01:d8:13:fe:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 23:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82734e2d1ba1be0b2fbc00d225467838251600b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:0d:f6:d6:e7:f6:d9:80:7c:c5:8f:af:31:
32:64:b4:d3:f7:b2:86:82:85:b1:1e:79:0e:f8:bb:
df:52:6d:39:93:b8:0d:ae:1b:ab:26:f1:4d:84:1f:
fc:3e:17:f2:0a:49:2f:41:ce:0d:a4:00:cc:7f:50:
55:fd:02:0e:13:6d:c2:99:1b:de:0c:c6:7e:6b:fb:
e6:08:07:59:e6:20:ea:b9:ff:30:07:f4:8f:86:99:
2f:71:e5:14:46:74:63:16:56:21:b1:89:5e:6e:cb:
93:8c:34:2d:62:8e:7f:bb:68:d4:86:3d:81:70:8a:
2e:46:9d:75:92:c0:25:1b:da:a1:6f:f0:2a:ce:88:
3d:b3:5e:26:73:29:40:ac:d0:b2:6d:cc:48:fd:44:
ff:31:3d:0f:9c:04:f9:6b:d5:3f:98:92:08:83:86:
96:69:13:8b:a4:c4:47:3e:8a:95:c8:9c:34:92:19:
d3:f8:e5:98:e1:45:fc:0d:5a:8a:13:e6:f6:85:7f:
65:86:13:9e:e0:39:0c:e0:15:ee:f1:67:56:87:48:
57:5b:bd:20:af:28:46:5d:6a:30:ec:15:99:63:f9:
c2:2e:a4:05:c7:d0:9f:5b:02:9e:59:78:2b:96:04:
8a:ba:f7:b4:91:55:d7:92:ea:d2:bd:05:a2:ce:e7:
ed:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:73:4E:2D:1B:A1:BE:0B:2F:BC:00:D2:25:46:78:38:25:16:00:B5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gnNOLRuhvgsvvADSJUZ4OCUWALU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:77:38:f1:9f:99:d5:ad:76:c0:e3:b5:cd:6f:2c:46:b9:33:
5a:1a:67:80:6c:18:86:6c:bd:90:3a:b5:a4:e3:79:b5:0e:5b:
3a:44:f4:dc:df:cd:48:8d:32:e0:54:c6:b4:75:94:35:bc:2b:
f4:6d:1b:6a:e4:c2:98:6f:0b:47:fa:87:e1:4d:64:20:b9:62:
0b:23:00:a1:c3:69:e4:be:f3:df:42:bc:18:e8:0d:3b:e7:df:
3a:36:47:18:eb:03:ee:f8:c5:84:d1:c9:b1:0f:2e:df:13:4c:
a1:c5:ee:d4:f5:91:f5:69:07:06:42:68:bd:a9:af:83:7e:33:
93:85:77:52:41:39:c1:3e:20:5f:3a:c9:6d:a0:f6:07:1e:01:
08:c8:7c:88:95:10:4b:1d:9d:e8:98:2c:65:de:1d:73:44:48:
15:56:86:fa:d5:48:81:8d:fb:9d:5d:11:c9:21:c9:3d:01:2d:
99:bc:78:67:17:d8:cd:60:f3:24:db:5e:6b:f3:ab:11:5b:25:
d9:20:44:31:6a:8f:f5:21:9f:cb:8d:6e:e5:9e:3c:87:73:ff:
7e:e6:52:4e:54:4c:cc:33:a7:7a:af:2f:9a:f6:19:88:cc:83:
2b:25:f4:3f:8f:8e:eb:e0:a7:67:fc:7b:6a:05:40:7e:c1:7b:
b6:27:51:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:43:45 2025 by rpki-client