Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tGplzxROCtWjvs9bzRsAOkHBhGI.roa
File: tGplzxROCtWjvs9bzRsAOkHBhGI.roa (raw, json)
Hash identifier: YcpHzDerkT5hSDqXdn4vtxwXY0DHal9CfqLLZsfOKTI=
Subject key identifier: B4:6A:65:CF:14:4E:0A:D5:A3:BE:CF:5B:CD:1B:00:3A:41:C1:84:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187BAE15223F3BE187DB87140F13F1A3A8D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tGplzxROCtWjvs9bzRsAOkHBhGI.roa
Signing time: Wed 26 Apr 2023 00:05:41 +0000
ROA not before: Wed 26 Apr 2023 00:05:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:187:bae0:a2b9/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ba:e1:52:23:f3:be:18:7d:b8:71:40:f1:3f:1a:3a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 26 00:05:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b46a65cf144e0ad5a3becf5bcd1b003a41c18462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:11:0d:5c:74:2b:f7:78:6a:d0:ed:9e:70:fc:
51:79:db:9f:6e:c8:26:56:7a:d4:ba:20:da:16:dc:
ae:e8:1e:83:5c:93:19:21:aa:e3:a9:70:d0:4e:62:
ec:d1:c9:ea:61:2c:9b:da:a2:0a:19:f7:8e:fe:44:
cb:81:a8:70:3a:53:80:3b:09:e0:fe:49:91:98:db:
4c:f0:3d:c5:20:80:ee:c6:6e:e5:7a:bf:be:eb:5e:
10:f1:2b:7d:b0:03:d1:c7:7f:df:45:64:b3:c2:46:
33:17:08:bf:ed:1a:f4:92:34:58:04:58:f5:77:59:
08:43:a3:c5:ef:b5:c8:9c:93:42:fa:a6:bb:f6:30:
cf:7b:7c:87:7a:75:b7:bb:e0:60:c8:be:4e:ed:09:
70:09:b3:ac:ff:b6:d9:a9:37:2d:eb:37:a0:ff:55:
4e:0e:06:36:dd:44:fd:91:e1:38:fc:ae:41:e2:79:
55:cc:72:f0:41:1d:a8:ec:71:53:78:1a:e2:4b:29:
70:54:9b:76:56:5f:18:db:66:89:5f:3c:79:3b:75:
2e:57:45:74:18:c2:03:7d:5a:3d:07:b9:b1:4c:5d:
1d:0d:26:79:6c:a1:9c:87:1c:bc:54:e6:81:07:6f:
7f:8a:8d:5c:a1:08:0f:2e:5a:e5:dd:b3:d5:f0:51:
39:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6A:65:CF:14:4E:0A:D5:A3:BE:CF:5B:CD:1B:00:3A:41:C1:84:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tGplzxROCtWjvs9bzRsAOkHBhGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:d0:63:8e:27:e9:32:c1:50:1c:cc:15:74:73:24:a6:e6:1e:
75:62:80:06:e3:42:56:8d:f9:df:db:ba:cd:d9:f4:66:99:25:
7f:d2:71:0b:72:4e:ea:65:9e:54:35:63:72:5a:54:a0:ea:da:
94:9f:9e:d5:1a:08:27:b9:1c:c8:c6:f8:44:d5:2b:e3:e0:ad:
e6:7b:7e:07:90:7f:2d:8b:9e:b7:51:81:2b:f8:25:cd:4a:f2:
9c:d8:1b:21:85:30:44:6d:dd:9c:00:8b:c1:45:64:7e:d6:f3:
cb:97:eb:48:4f:92:ab:0c:4b:7a:7a:cf:12:b6:aa:26:9d:51:
f3:20:1e:e2:f8:52:e6:2d:e2:d3:4a:b8:2c:a1:64:b5:60:1a:
04:55:78:15:5b:f4:47:f1:88:84:44:e3:7f:18:3e:2f:c0:68:
1c:57:25:cb:51:2a:c6:bf:99:38:22:c6:b7:4e:43:9b:fc:26:
8d:cd:4c:9f:23:af:5e:79:5d:14:64:52:90:db:7c:e4:a7:76:
d3:8a:78:26:70:ec:dc:1c:49:17:89:bd:ce:e2:72:0c:c9:28:
a3:44:86:8c:69:04:b6:bc:c2:99:08:5a:41:eb:07:5d:59:6a:
53:4d:59:83:a8:69:a1:ac:2f:56:b2:46:50:72:48:e2:61:26:
0b:1f:b1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:09:38 2025 by rpki-client