Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gx-wOKPDhkgaQrD9JLL0SnmS4SM.roa
File: gx-wOKPDhkgaQrD9JLL0SnmS4SM.roa (raw, json)
Hash identifier: CVdNVU996VbrSXaF9Jvdj4LUOKvxQpAsBzWgofEyuiQ=
Subject key identifier: 83:1F:B0:38:A3:C3:86:48:1A:42:B0:FD:24:B2:F4:4A:79:92:E1:23
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A44DFAECCBF86B636D37A100486EB5CF8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gx-wOKPDhkgaQrD9JLL0SnmS4SM.roa
Signing time: Wed 30 Aug 2023 05:17:04 +0000
ROA not before: Wed 30 Aug 2023 05:17:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:44:df:ae:cc:bf:86:b6:36:d3:7a:10:04:86:eb:5c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 30 05:17:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=831fb038a3c386481a42b0fd24b2f44a7992e123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ff:33:fd:e8:3d:0e:fd:25:00:c6:0a:42:4e:
e1:98:2e:07:8a:da:76:e0:84:d5:83:e3:1a:49:78:
cc:67:da:bd:d4:9a:cd:15:6c:64:bb:f8:aa:6c:09:
4d:74:78:38:0c:64:1c:ff:76:ee:f2:be:df:20:c0:
ce:e4:e6:5c:e1:d9:c7:91:52:bd:ab:65:57:86:a8:
73:ba:11:9a:cd:55:a9:89:fe:7e:44:6c:e8:52:4c:
01:46:6a:51:38:c4:43:4e:c6:73:6e:76:4a:5c:05:
00:e4:f2:4a:1a:94:8e:64:a8:ba:b1:bc:90:30:68:
79:06:e9:c0:e9:15:ee:73:03:02:4e:23:38:62:14:
c5:d3:58:6a:bd:d4:d9:6f:74:a1:82:ba:65:3b:e1:
ae:87:c1:93:8d:51:a1:32:10:10:0a:66:60:1b:1d:
a8:43:42:2c:0e:d0:8a:98:37:79:00:cf:15:61:d2:
3b:9e:73:9c:13:b1:f9:c0:73:a4:c3:aa:20:73:1c:
1c:37:94:0c:91:52:d8:6a:9d:8a:3a:81:47:26:cc:
40:2f:d9:cf:4a:81:89:89:5a:33:49:dc:ee:39:8c:
a1:02:b7:6b:12:de:7b:46:cf:8f:62:27:ac:5a:0b:
8d:46:2f:6d:7b:11:dc:40:45:fd:72:bb:d0:ad:a3:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1F:B0:38:A3:C3:86:48:1A:42:B0:FD:24:B2:F4:4A:79:92:E1:23
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gx-wOKPDhkgaQrD9JLL0SnmS4SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:a7:12:24:d7:8a:27:33:c9:cb:8d:b0:36:ed:96:88:35:46:
c3:66:fd:0d:75:36:11:c9:44:6f:46:b0:53:e7:97:e2:35:8e:
76:84:f5:9b:82:98:4e:3b:e1:ae:f1:8f:9c:f5:f4:05:2f:7c:
b3:d0:ad:38:bc:de:7c:0a:b3:c2:ed:2c:8e:65:46:bb:81:8c:
89:20:70:da:9e:c1:d8:b9:72:ad:6d:00:cb:cc:4f:47:3a:41:
5d:ae:be:9f:d7:d0:46:d8:a6:ec:65:71:d9:60:61:5c:37:2a:
f8:f7:43:3d:7b:33:48:2d:b5:f1:e4:51:4d:21:6e:e5:45:29:
9d:23:06:58:f3:23:e3:8a:f2:75:69:39:2d:1f:53:d2:d0:43:
56:1e:94:41:e5:df:0b:66:28:78:e7:da:33:c2:2e:01:d1:ba:
5b:6f:a8:81:0c:03:2c:48:f5:72:b7:e5:96:54:71:3b:22:13:
d0:5e:0c:0a:59:73:77:8b:26:04:99:8a:51:c6:45:bb:b7:81:
d7:7c:6b:74:26:40:82:9d:ee:39:60:0a:3c:a1:fd:24:4d:82:
58:80:85:6a:f5:9d:30:6e:66:e0:46:83:a9:1e:1b:b5:88:40:
b0:57:9e:b9:4d:2c:40:a6:94:71:61:c4:83:98:93:56:68:02:
37:e4:2d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:46 2025 by rpki-client