Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p2GynOp0AkVfMLHKBHoPLqek2D4.roa
File: p2GynOp0AkVfMLHKBHoPLqek2D4.roa (raw, json)
Hash identifier: knzZeD5qHGVAknA3mJ32tF/TQB2eGjDHxfK3QHE0btA=
Subject key identifier: A7:61:B2:9C:EA:74:02:45:5F:30:B1:CA:04:7A:0F:2E:A7:A4:D8:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B7AB46AD717685911BA9354F36299CCB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p2GynOp0AkVfMLHKBHoPLqek2D4.roa
Signing time: Mon 06 Mar 2023 16:05:00 +0000
ROA not before: Mon 06 Mar 2023 16:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:b7aa:f06f/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b7:ab:46:ad:71:76:85:91:1b:a9:35:4f:36:29:9c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 16:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a761b29cea7402455f30b1ca047a0f2ea7a4d83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:af:55:a7:6e:e6:ce:f6:5b:b9:78:c0:16:
2e:75:ab:85:aa:07:da:10:a3:0b:6d:12:b5:ba:3f:
04:94:f5:bf:c1:11:e6:bb:eb:d3:5d:e0:56:be:2d:
20:c5:a7:58:ab:68:84:c4:bc:57:01:7b:30:2e:d2:
22:0d:33:e9:d1:2a:17:96:0a:e8:a2:b3:c3:05:44:
ba:b9:60:53:10:7f:28:43:fc:e2:5e:1c:b4:ab:ed:
70:9f:8e:0e:fe:3e:c7:2a:00:3d:0c:10:57:bf:66:
78:66:ed:e7:f7:f6:7e:a1:85:e0:d1:35:3f:3b:81:
1d:07:71:6a:38:1e:ea:9e:80:60:74:0e:48:39:21:
9c:0a:ea:8c:c3:ca:7c:33:5d:97:c1:43:f4:11:14:
b4:cc:38:af:36:ff:4b:32:56:0d:28:d4:55:51:b7:
70:ea:6d:ef:67:50:82:0c:02:90:5e:9a:7a:a6:22:
c1:0a:59:78:c7:e6:60:28:be:43:ce:6e:f8:e7:53:
1d:db:48:6c:92:dc:dd:7a:4d:ab:3b:b0:ee:0d:92:
27:e0:71:55:57:a9:26:b3:83:3a:cf:03:66:37:90:
24:62:e7:44:2f:60:68:dc:06:8b:b8:ee:24:03:a2:
07:e1:42:54:e6:19:6f:82:97:5a:fa:32:a7:e4:e1:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:61:B2:9C:EA:74:02:45:5F:30:B1:CA:04:7A:0F:2E:A7:A4:D8:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p2GynOp0AkVfMLHKBHoPLqek2D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:92:55:f6:8d:5d:31:35:ee:f4:35:e1:1d:b3:7e:a7:96:da:
de:31:af:39:a3:13:8c:82:0a:52:07:fa:12:92:b3:e3:b7:2a:
5a:16:d0:39:d6:35:5d:22:1d:42:1e:b9:c7:55:c0:d1:ce:ef:
43:20:dc:98:31:aa:2a:e4:25:d9:7a:b7:53:ff:4a:32:2f:1a:
ea:96:92:77:67:03:0e:2e:fb:66:90:55:3a:63:89:54:46:e0:
f2:6e:de:98:61:56:49:50:56:e5:8e:2c:f3:37:09:5f:d8:1a:
2c:c3:53:70:ae:69:8d:3b:01:fe:32:20:1c:39:0c:07:a4:74:
73:31:bd:8c:36:2c:fc:58:d8:1a:09:ef:6f:87:8f:0f:21:57:
31:c4:9a:0b:8a:f6:82:ec:ae:3b:20:cd:2e:a5:49:5c:0a:0f:
79:62:39:b1:fe:c6:1c:ae:35:eb:2e:5c:e1:ef:89:b0:8d:11:
72:ba:ee:5b:b4:60:f3:ad:58:12:30:78:d9:7b:c6:68:3e:ce:
f9:ae:ad:70:f5:46:06:6f:33:03:e4:43:44:e0:12:a8:b0:94:
e1:1a:67:c1:0d:6b:c4:a5:d0:ea:31:0c:71:de:ce:d4:d6:89:
50:04:e3:3f:06:df:b1:a0:c6:ce:4d:95:4a:f1:90:c9:de:32:
e0:da:f6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:29:33 2025 by rpki-client