Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gsA7xAQ5hJLLXL0YAo_A6KwM_-A.roa
File: gsA7xAQ5hJLLXL0YAo_A6KwM_-A.roa (raw, json)
Hash identifier: wEHIAxq0hdzqkWOcYoegpbTf+bQhRt0ovgjQmYaobBk=
Subject key identifier: 82:C0:3B:C4:04:39:84:92:CB:5C:BD:18:02:8F:C0:E8:AC:0C:FF:E0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F9840D13F664C6BA37EBB64384F56F5B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gsA7xAQ5hJLLXL0YAo_A6KwM_-A.roa
Signing time: Tue 15 Aug 2023 14:05:28 +0000
ROA not before: Tue 15 Aug 2023 14:05:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:189:f983:2a9e/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f9:84:0d:13:f6:64:c6:ba:37:eb:b6:43:84:f5:6f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 14:05:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82c03bc404398492cb5cbd18028fc0e8ac0cffe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:62:80:35:d3:ec:b8:a2:13:2c:98:a7:d5:2c:
d3:11:79:c8:60:7f:52:68:a5:8e:79:5c:ab:5e:0e:
7a:c0:cd:6d:bc:ae:32:1f:ff:cb:35:c0:d8:e7:8b:
8e:37:67:ed:24:bb:a6:f0:fa:fc:0a:14:a0:f7:b9:
e8:2e:21:79:77:c0:78:48:84:8c:0b:f7:cc:f0:34:
10:e3:a8:16:23:85:93:59:34:cc:c4:a0:15:e7:40:
3f:bc:e8:de:fe:86:c4:38:9d:bc:47:ce:fb:05:f6:
9e:4c:49:63:1d:23:8f:6e:ea:b8:bc:45:db:69:e8:
c0:f7:c8:63:dd:aa:81:7c:07:51:a6:75:a2:2a:37:
55:2a:91:ea:cd:41:5a:c8:ac:b3:8e:bb:2f:c9:0a:
16:6e:9c:f3:e5:14:df:03:f7:34:f8:ea:38:9c:0c:
52:e1:aa:9e:17:68:3b:f7:b0:d9:20:94:06:3a:17:
59:79:01:34:3d:3c:47:4b:b3:04:3c:0e:91:57:03:
2e:1d:d2:ef:24:7d:b5:35:c0:bd:d3:52:47:14:96:
0a:77:d7:c4:d9:64:d5:34:bf:a0:f3:ee:ab:d0:2e:
76:39:47:ed:40:43:e0:9d:6e:88:9d:95:ac:f0:bf:
e1:11:66:2b:59:17:32:b9:5b:7a:9d:4b:21:af:1f:
2d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C0:3B:C4:04:39:84:92:CB:5C:BD:18:02:8F:C0:E8:AC:0C:FF:E0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gsA7xAQ5hJLLXL0YAo_A6KwM_-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:37:9f:7d:db:56:d7:e6:e1:e6:8f:8b:04:0f:f0:f1:c2:09:
2e:54:32:bd:35:2b:6c:27:bc:5f:56:5f:da:1a:13:8e:0c:05:
2d:ef:97:ce:1b:70:43:c5:c7:4e:14:3b:70:b1:59:66:1c:c7:
ce:26:f5:17:5f:63:31:76:46:85:35:29:24:26:46:ff:00:18:
eb:79:ff:b5:94:64:57:05:75:ff:82:7f:50:c4:db:31:e6:50:
8f:35:ab:a0:00:58:af:e5:b4:f4:a1:9b:6a:a6:4e:d6:2f:ff:
76:c3:2f:40:ed:94:5b:19:dd:ba:06:0f:1e:74:62:d8:b8:8b:
e6:72:f7:cf:8a:72:e4:51:a8:bc:f9:82:aa:af:f0:33:ce:f9:
83:6d:d5:ae:a3:ce:61:12:35:62:f1:45:85:05:5a:ca:52:84:
21:7d:88:9e:fc:f9:34:31:e4:1e:9d:d5:f0:35:e1:86:5e:36:
96:5d:69:6d:82:3f:9a:9d:c4:b1:8b:f9:6a:9e:43:d3:9b:90:
52:72:f3:01:b4:fb:48:ac:f0:36:48:88:15:65:d9:d7:a1:80:
80:bb:f1:29:e1:7b:15:46:9f:c0:3b:41:06:c3:ca:84:b6:70:
4f:66:3d:57:98:76:06:7e:82:ef:5c:23:6f:a9:f9:ff:bc:68:
90:0a:2c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:58:00 2025 by rpki-client