Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gt-A4-BlorqO3SUN4IF0t-P0Ibg.roa
File: gt-A4-BlorqO3SUN4IF0t-P0Ibg.roa (raw, json)
Hash identifier: 0xAbunvEpHDn+BlmDEpA+puI4UvMSmM+Ly2hCwwsqbw=
Subject key identifier: 82:DF:80:E3:E0:65:A2:BA:8E:DD:25:0D:E0:81:74:B7:E3:F4:21:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187DDA6B6A92CC728EE34D41D65BE1BB4AB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gt-A4-BlorqO3SUN4IF0t-P0Ibg.roa
Signing time: Tue 02 May 2023 18:08:23 +0000
ROA not before: Tue 02 May 2023 18:08:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dd:a6:b6:a9:2c:c7:28:ee:34:d4:1d:65:be:1b:b4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 18:08:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82df80e3e065a2ba8edd250de08174b7e3f421b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:65:eb:df:8c:d5:6c:06:b1:e1:ba:9d:07:
58:fb:46:fd:2c:ca:7b:c9:d4:c3:09:39:da:c1:87:
13:6f:a8:ea:1c:8f:b2:a5:c3:88:82:68:ce:f2:d1:
71:06:90:0a:58:0e:4e:ca:0e:d7:3b:8d:0f:87:9b:
f4:5e:35:ea:5e:da:60:97:bc:6c:fc:59:2e:e9:27:
9c:05:45:77:42:fc:4f:8e:2b:2e:e6:75:39:80:a1:
4d:46:f5:af:16:34:2a:67:8b:f3:86:e1:ea:a7:ed:
de:64:81:be:e9:59:d9:66:7c:dc:70:f6:e5:fc:d6:
68:5a:d4:71:71:00:80:77:20:88:e4:11:b5:09:26:
aa:ff:7c:4e:63:f6:06:59:c2:e3:c8:12:f8:c7:d1:
08:8e:26:eb:0b:ed:92:de:28:c1:cd:cc:cf:93:29:
d3:1a:82:22:ca:cf:1c:7d:5e:e2:5f:d1:f4:05:21:
3f:f9:5c:c4:23:63:6b:30:a7:5c:38:f9:cd:ea:e7:
16:4f:4f:46:29:28:a4:d2:b8:88:89:ca:db:ce:0e:
d0:b3:2e:92:b1:0e:f2:6d:09:a9:66:22:d6:31:b7:
fa:37:0f:70:4d:d7:95:75:43:01:51:ff:79:0c:fd:
35:ec:c8:87:05:41:27:2f:57:0a:3d:88:91:80:c2:
c8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DF:80:E3:E0:65:A2:BA:8E:DD:25:0D:E0:81:74:B7:E3:F4:21:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gt-A4-BlorqO3SUN4IF0t-P0Ibg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:3f:85:e1:bd:ef:5e:a3:6e:c7:22:25:c8:4b:e2:0e:2e:75:
1c:24:be:28:b8:34:a1:f1:07:d4:8a:70:9f:d9:0f:1d:16:f6:
ae:0c:c6:62:40:3e:a5:bb:60:fe:35:59:8a:d3:dc:c5:a0:e8:
f0:f2:c7:9f:22:f7:60:48:8c:c3:6f:ff:ff:46:a5:1f:cc:9d:
19:59:35:e0:02:f5:2a:8e:76:57:44:7e:0b:53:15:36:33:c0:
14:60:40:0b:7d:cd:05:71:ab:be:9d:a6:5d:be:e7:c9:98:48:
c6:1b:78:54:2e:04:52:c0:fb:3e:98:6d:a6:23:a3:90:d0:6d:
29:50:85:fa:3d:f8:cd:19:f3:23:74:ec:2b:84:c9:75:01:2b:
d5:08:a5:38:9f:bc:f4:7c:f0:6c:79:a8:96:1c:7c:4d:d4:b4:
02:aa:10:d0:78:a8:3f:55:0d:d3:a9:65:6b:12:5b:2d:d4:59:
ca:52:00:71:a0:a7:7d:76:d2:85:8a:66:2e:0a:c6:01:70:85:
24:c1:ea:06:8c:58:e6:34:3b:1e:30:89:e0:71:d1:9e:99:85:
6f:89:4d:1f:08:f3:f7:c1:33:bb:10:70:da:84:75:de:58:c3:
37:8c:fa:ed:e9:9c:6d:36:9b:b3:a7:a2:53:a8:32:20:17:fb:
dd:8f:76:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:58:27 2025 by rpki-client