Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gxxGcdEABRwmG3XZrTcRL57_aeA.roa
File: gxxGcdEABRwmG3XZrTcRL57_aeA.roa (raw, json)
Hash identifier: OHnu850PCz+4b6irtLthCFpcsu0UKCueFukuXmyFUEk=
Subject key identifier: 83:1C:46:71:D1:00:05:1C:26:1B:75:D9:AD:37:11:2F:9E:FF:69:E0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181F063A16EA2951B1ADB1AE4FBD7EAFF53
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gxxGcdEABRwmG3XZrTcRL57_aeA.roa
Signing time: Tue 12 Jul 2022 03:11:10 +0000
ROA not before: Tue 12 Jul 2022 03:11:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f0:63:a1:6e:a2:95:1b:1a:db:1a:e4:fb:d7:ea:ff:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 03:11:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=831c4671d100051c261b75d9ad37112f9eff69e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d8:56:1e:c3:0d:31:ef:ee:2b:b0:5a:7d:f2:
78:e4:f3:8b:77:0b:f6:cc:45:34:61:72:76:72:90:
a0:0f:73:88:dc:8c:7a:99:2a:56:8e:07:a3:cc:8a:
d1:9b:35:98:cf:98:9b:22:a9:1c:de:e6:ee:92:cb:
12:39:6e:50:78:cf:4b:ef:4b:ba:41:f6:13:a4:fc:
e4:30:f6:1e:c4:03:24:bf:0f:7c:15:52:04:da:7f:
08:25:1d:39:d1:5c:fb:74:76:24:2b:ad:43:c9:6a:
ad:12:41:d7:65:a1:19:47:2d:aa:5a:d7:7d:96:cd:
15:9c:ae:bf:19:78:70:09:1c:bc:aa:6c:67:20:cb:
fb:9e:d5:bc:83:24:c6:96:d6:b2:a9:6d:0c:a4:3e:
98:2e:c0:ad:38:4f:70:d4:7b:51:bd:13:5d:b5:87:
06:e0:6b:af:92:ce:0c:d7:f2:25:ec:88:9f:76:46:
7e:9f:a8:ee:f6:1b:05:e7:b4:e4:58:40:69:e2:30:
d1:20:ad:96:f6:11:22:4a:a7:7d:50:1c:1b:3c:8e:
57:20:9d:8e:d6:9e:3a:53:af:10:0e:15:08:f3:ac:
76:22:16:83:7a:8b:59:74:d2:5c:ac:6e:30:3c:82:
0a:11:8f:ad:5c:38:f6:c1:e2:a7:bf:47:c2:d9:fa:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1C:46:71:D1:00:05:1C:26:1B:75:D9:AD:37:11:2F:9E:FF:69:E0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gxxGcdEABRwmG3XZrTcRL57_aeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:ef:c1:05:7e:64:cb:1b:18:7a:2b:01:75:9c:3c:e5:da:93:
f6:b1:f0:04:88:64:70:0e:57:4f:d7:d0:65:1c:dc:d3:fc:cf:
66:72:2d:4f:dc:49:0a:c9:de:7e:e7:c6:42:3f:45:bf:9f:73:
ca:39:30:ae:2c:e6:22:48:c0:70:c5:9c:4c:f2:18:69:38:74:
b7:54:15:b3:5b:18:5f:24:3b:a2:8b:51:ba:d2:65:01:33:d9:
21:bd:ba:d4:1c:2e:2b:d8:41:c8:e9:bd:16:ce:f1:a3:b9:2e:
1c:b9:4b:2a:a4:56:9c:7a:71:11:db:d6:f5:3b:f1:39:0f:33:
8d:19:2a:00:0f:d5:15:a8:c4:6a:68:fd:7e:56:58:06:b6:33:
b7:d2:38:9a:d9:23:41:fd:d6:00:00:ab:62:32:ef:ee:94:39:
fc:ee:30:79:29:82:34:63:f6:c6:a8:c8:14:60:1f:4e:6d:23:
93:76:7f:b4:4b:43:6b:e6:80:8e:63:87:53:a0:01:da:6d:b8:
2e:4e:92:db:cf:ff:10:35:fd:da:ea:b7:17:d6:2a:91:ff:eb:
72:b8:db:18:d6:ee:45:ef:ac:36:15:46:a2:73:2c:f8:85:08:
8a:83:23:cf:eb:bc:62:23:50:35:96:41:dd:bc:e4:20:e5:90:
89:81:55:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:36:20 2025 by rpki-client