Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gnZo34GVUMx71Aq8SAOPmxLMrT4.roa
File: gnZo34GVUMx71Aq8SAOPmxLMrT4.roa (raw, json)
Hash identifier: ybDe3rucs6zpOJfFlh3rSX76UWNjrUl9f8K+i2llHDU=
Subject key identifier: 82:76:68:DF:81:95:50:CC:7B:D4:0A:BC:48:03:8F:9B:12:CC:AD:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018862E83438C436CE46EC149CB099D5322F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gnZo34GVUMx71Aq8SAOPmxLMrT4.roa
Signing time: Sun 28 May 2023 15:09:24 +0000
ROA not before: Sun 28 May 2023 15:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:62:e8:34:38:c4:36:ce:46:ec:14:9c:b0:99:d5:32:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 28 15:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=827668df819550cc7bd40abc48038f9b12ccad3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b9:03:8c:e5:24:10:fa:d3:64:71:07:ca:fe:
4c:b5:7e:b0:56:4d:43:3d:72:6d:7b:6d:12:21:16:
7c:19:51:d6:8f:02:9c:5d:9c:d1:ed:3a:49:eb:7a:
f8:80:09:68:ff:1e:fd:12:71:f6:31:aa:80:08:df:
8e:4f:0b:b1:26:aa:72:02:be:e4:bb:8f:16:36:38:
df:d4:a3:15:b4:16:b3:77:55:f4:2c:0b:45:8a:17:
fb:83:f6:09:28:23:f6:92:11:b5:a9:c2:0a:f6:db:
8b:05:d7:88:f3:40:3f:1b:c9:87:09:e4:5b:a3:5d:
99:8e:19:e6:3d:25:19:6e:e4:75:70:c7:3b:2f:87:
ef:56:06:5f:bd:f0:03:4c:d9:b9:c9:bd:88:91:c1:
d5:15:c2:91:06:6e:e7:0f:97:93:8c:5a:23:3f:bd:
08:b6:89:8e:09:76:6f:6a:ad:e5:d0:9c:85:26:13:
98:83:fb:bc:d8:2d:5a:50:b5:cd:1b:5b:42:ff:08:
f8:86:cd:a2:77:e5:6f:c1:89:33:45:51:ea:87:36:
d3:78:1e:da:18:71:78:fa:21:6a:ab:0a:49:de:6b:
9b:83:c2:e1:bb:cd:2b:d0:0e:0d:49:c7:2b:89:9d:
db:d5:57:85:aa:48:fb:11:67:92:39:ef:73:3d:a0:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:76:68:DF:81:95:50:CC:7B:D4:0A:BC:48:03:8F:9B:12:CC:AD:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gnZo34GVUMx71Aq8SAOPmxLMrT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:e8:5f:6b:35:69:2c:d2:ac:e6:08:dc:45:6f:83:02:a8:35:
d1:8e:d5:bb:06:db:07:e7:09:89:37:27:d3:05:b3:d4:85:de:
95:fa:10:9c:83:19:b0:8d:6e:97:0f:9b:cb:33:df:f2:02:f6:
e1:09:c8:75:d8:77:4f:a4:78:90:cd:88:7b:62:1f:fd:be:8a:
56:b8:5c:79:20:94:2a:11:8f:56:da:59:34:68:17:8b:17:42:
1b:bf:91:34:9a:f8:1c:2d:05:08:06:9c:b2:30:15:c3:f2:d3:
9a:a3:c1:c9:74:f0:41:be:c8:1a:13:3e:5a:6c:45:d9:e0:7c:
27:6e:25:68:37:a1:7e:a9:36:4c:bb:3f:2c:16:42:2f:35:26:
dc:8f:09:ae:e7:fb:09:52:65:f9:87:db:2f:90:5b:86:72:43:
58:0e:05:89:b5:c2:fc:b0:fb:29:ed:83:42:03:a4:d8:92:5a:
68:a7:30:7d:85:f1:9b:2c:49:fe:aa:66:10:57:3b:71:24:24:
41:f5:c3:86:f8:dd:18:b7:0b:b6:0e:61:a9:ad:0b:4d:fa:ac:
98:88:bf:08:b0:30:8e:17:df:17:37:55:37:41:34:e8:fc:ee:
81:c3:f5:e2:d1:63:b5:a6:c6:c3:91:b5:d9:92:5d:9f:67:ce:
e6:96:d7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:37:10 2025 by rpki-client