Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kGobuNEzso2rn8kospnuF6-4aXA.roa
File: kGobuNEzso2rn8kospnuF6-4aXA.roa (raw, json)
Hash identifier: +di3afhGQ3TRU6bn9XInbALbUkXhilyDNRe4bFr+d5I=
Subject key identifier: 90:6A:1B:B8:D1:33:B2:8D:AB:9F:C9:28:B2:99:EE:17:AF:B8:69:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182CF8E73EC7CCBB491F02F600197948B92
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kGobuNEzso2rn8kospnuF6-4aXA.roa
Signing time: Wed 24 Aug 2022 11:13:15 +0000
ROA not before: Wed 24 Aug 2022 11:13:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cf:8e:73:ec:7c:cb:b4:91:f0:2f:60:01:97:94:8b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 11:13:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=906a1bb8d133b28dab9fc928b299ee17afb86970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ec:f5:73:5c:fb:d0:45:2d:e5:95:41:61:72:
13:d3:15:bc:ad:fc:a9:f5:4f:b8:20:f5:71:23:88:
97:9e:da:e3:44:d5:10:ea:9e:0c:c5:bf:da:3b:a6:
12:76:bc:02:c3:74:0e:24:cf:16:a6:f4:64:a8:fd:
a3:2e:f0:5c:5d:7c:7f:e6:7c:89:f0:80:a9:52:79:
ee:d1:47:fa:a1:b1:9a:a6:4c:e1:05:ad:a7:8d:4c:
24:20:e0:a7:fa:cc:c4:f3:96:44:58:80:ac:fc:7e:
2e:7c:e5:84:75:60:97:74:36:3e:1a:4e:5d:7f:69:
e2:f1:e4:52:89:09:58:43:81:b7:25:cf:71:cd:de:
bd:64:4c:6d:66:b2:c0:b9:31:27:38:85:6b:b8:f1:
32:5e:58:f4:ec:73:4f:68:67:61:43:1d:67:ae:2a:
99:d3:fa:b2:74:47:c7:ff:c2:f9:75:e9:ac:30:f7:
98:c1:88:58:4e:5e:6b:82:bb:e3:2f:a5:05:4f:07:
a5:c5:3d:6d:2c:8c:8e:cf:a5:e8:e1:b2:7b:b9:0d:
c0:24:e3:8c:ff:ed:9f:3f:57:99:b5:c4:30:08:3b:
b2:ad:90:81:2f:72:1d:04:ed:22:48:97:be:39:5c:
70:d1:05:99:d6:1a:0e:9a:8c:39:9a:50:d4:fe:38:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6A:1B:B8:D1:33:B2:8D:AB:9F:C9:28:B2:99:EE:17:AF:B8:69:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kGobuNEzso2rn8kospnuF6-4aXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:ff:da:4d:84:ff:bc:a5:c6:b1:18:57:77:39:12:4e:47:46:
5b:08:e7:b8:fc:88:a6:a3:54:b1:5e:39:61:56:93:a8:09:c2:
49:e8:6a:5a:a7:89:13:f1:49:9d:a0:fe:d2:1a:3e:ec:7b:a6:
3b:e0:2c:21:75:f3:1f:66:c0:6d:92:15:cb:a7:77:bb:1c:ee:
d7:9c:76:dc:37:14:79:b2:8d:c0:c4:5c:5d:d4:5e:78:38:df:
f2:4b:30:50:29:ed:d6:22:d4:a4:64:a1:ef:79:29:4d:6b:b6:
6f:84:7d:26:03:7e:d2:1c:e1:ae:5c:c9:b4:4b:85:7f:b2:55:
e0:9b:93:81:92:44:8a:88:6f:fa:4d:d6:e3:03:62:c2:59:c1:
b5:a9:f2:fe:14:cc:c3:5d:d5:b1:3e:ad:a9:70:97:e2:d4:c5:
bd:89:b6:7f:9b:6c:3c:6a:d5:34:ef:21:20:c0:06:56:7c:de:
23:18:0a:41:8b:79:ae:62:87:71:a2:79:bd:3c:77:b5:98:66:
bc:dd:e6:fe:d2:e2:a7:9a:b8:e9:b3:c7:05:e0:30:75:9f:88:
11:09:bb:47:49:43:e1:8e:01:ac:e5:51:30:42:1a:57:bc:05:
03:48:04:77:22:9b:f5:51:03:de:cf:45:40:da:be:f0:45:39:
ac:12:d5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:10:23 2025 by rpki-client