Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gvLhirg4zjgjiSchkqQ3mDpBkIM.roa
File: gvLhirg4zjgjiSchkqQ3mDpBkIM.roa (raw, json)
Hash identifier: +ow7rdWJkcrFqn1adepUPvOr34FFjIFE5pKG9T5QXq0=
Subject key identifier: 82:F2:E1:8A:B8:38:CE:38:23:89:27:21:92:A4:37:98:3A:41:90:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8D7C0DBE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gvLhirg4zjgjiSchkqQ3mDpBkIM.roa
Signing time: Fri 17 Jun 2022 09:09:45 +0000
ROA not before: Fri 17 Jun 2022 09:09:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2373717438 (0x8d7c0dbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 09:09:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82f2e18ab838ce382389272192a437983a419083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c6:77:7b:75:60:e7:5b:62:62:80:f9:52:a5:
5d:52:ea:2d:97:df:db:62:e4:76:fd:c0:bb:d8:ea:
37:d4:51:38:19:50:6d:dd:73:ee:4d:d3:12:5c:d5:
77:98:9f:19:00:d5:1f:f8:0c:e8:a6:4e:40:f3:f4:
90:6f:e9:02:ef:4a:0c:57:79:2a:91:9f:91:3f:23:
5e:14:df:8a:8b:eb:96:5b:08:94:91:38:a6:e4:07:
73:a1:1d:a9:2b:67:d6:5c:f7:4f:d4:74:a5:8b:13:
15:65:6f:93:be:24:a7:69:2c:d4:9a:7e:76:31:b2:
d3:c2:0e:be:43:96:31:eb:a4:67:1f:91:1a:6b:5a:
46:c4:12:e6:86:89:50:1f:3f:a1:32:8b:44:65:8b:
91:1b:b4:48:99:43:68:08:bc:e9:70:fa:31:bb:5d:
4b:76:82:0c:b2:14:d9:d6:9c:23:53:33:dc:0c:72:
99:05:97:5a:d1:ce:71:a6:4d:3e:10:8e:86:33:d7:
32:05:d5:36:7e:81:a8:67:ea:56:74:07:58:06:7b:
18:1d:00:6c:8a:b4:34:bc:b1:46:83:58:30:ba:b7:
8a:12:d8:e6:c8:a5:d4:ce:b9:e2:20:97:ae:8e:4c:
21:81:d9:84:7e:9e:5a:e2:f6:f5:00:06:4d:cc:b4:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F2:E1:8A:B8:38:CE:38:23:89:27:21:92:A4:37:98:3A:41:90:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gvLhirg4zjgjiSchkqQ3mDpBkIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:96:a8:0f:2b:84:67:ad:d9:c7:20:a7:06:86:d0:04:d2:b6:
42:43:59:1d:8d:44:10:77:0e:e4:63:45:f6:5d:82:75:db:b8:
6a:cf:1e:99:c0:69:c7:fb:8f:e8:26:06:37:65:3f:41:a6:05:
ad:87:d7:1b:e5:17:9d:9d:3f:2c:3a:37:98:2c:06:a8:ee:fe:
e3:48:fa:33:94:96:a2:a4:92:17:91:d7:21:ee:35:a1:95:58:
39:cb:ee:75:e4:a7:c2:e8:25:1e:87:5e:16:48:fa:76:6a:9d:
26:c6:2b:8d:f6:c7:29:ad:c6:be:2f:27:52:45:1b:86:a5:9c:
65:cf:30:6c:ed:6f:ed:19:ae:f7:83:c0:8c:93:9b:90:72:bc:
25:31:8d:b1:7e:8c:89:27:e2:8f:42:3e:7a:26:12:d4:ca:c7:
c5:1e:f1:f4:74:a7:70:86:de:ea:99:dd:34:5a:ad:b5:26:99:
2e:12:59:03:a8:a0:2f:48:e9:83:d5:3e:56:ad:0d:54:95:8c:
86:e4:8a:7c:91:34:32:b6:72:20:d4:76:27:0e:6e:92:0a:7f:
a9:14:a6:f3:07:01:b5:3a:f6:f8:1d:02:16:2b:a3:9c:29:b0:
c9:a7:0a:47:90:46:ce:e2:eb:bc:5b:a0:19:31:46:49:80:8b:
36:74:b2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:27 2025 by rpki-client