Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v_0Gk9TTuQxEoNc9hHT8sP0DgtE.roa
File: v_0Gk9TTuQxEoNc9hHT8sP0DgtE.roa (raw, json)
Hash identifier: 3N6kVrwb6+8coNpJ0uFGmm/JFc7vhZ7lrAebASkbXXc=
Subject key identifier: BF:FD:06:93:D4:D3:B9:0C:44:A0:D7:3D:84:74:FC:B0:FD:03:82:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018565F213FED269FD3BCEE204E70C1AB43F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v_0Gk9TTuQxEoNc9hHT8sP0DgtE.roa
Signing time: Sat 31 Dec 2022 02:10:41 +0000
ROA not before: Sat 31 Dec 2022 02:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:65:f2:13:fe:d2:69:fd:3b:ce:e2:04:e7:0c:1a:b4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 02:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bffd0693d4d3b90c44a0d73d8474fcb0fd0382d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:db:27:e9:51:7c:f5:f5:63:c3:38:82:40:06:
15:91:1d:a4:2f:73:38:c1:4c:b7:4e:b8:25:5a:45:
bf:8b:a8:b2:5c:12:fb:99:18:6d:83:7c:80:c8:c4:
43:d9:81:4d:3d:61:42:74:68:d6:c1:a3:50:1d:a2:
4b:f2:2d:f7:81:f3:ee:73:83:70:f0:83:17:a3:94:
f4:d2:21:3a:42:b3:fe:d8:03:be:10:4c:72:a7:a9:
1d:f4:b9:da:1f:d6:b0:4c:14:59:42:85:33:ed:49:
d4:5d:d9:cb:20:a3:8f:db:46:f7:8e:f5:3a:52:b7:
7a:d1:2b:cf:a4:0c:ff:bf:8d:3d:36:5e:0e:08:d2:
de:d8:91:8a:38:ce:6d:2d:72:a7:68:83:02:6e:e8:
7d:19:bc:85:74:b0:1c:5f:f4:a3:c4:bb:11:c5:9c:
fd:da:b8:19:44:00:27:24:14:5e:ed:d1:85:31:30:
96:5f:84:83:71:6c:07:a7:a4:5e:18:86:64:27:61:
ab:3a:0b:7f:22:82:28:de:a6:8d:ce:b7:56:e1:c6:
17:56:04:2f:96:be:a6:57:cc:9d:6f:8d:ce:fa:fc:
57:e2:5f:dc:fd:c2:23:db:a2:39:0e:ad:39:24:59:
b9:ad:47:e7:7b:78:a0:c4:6d:91:35:cf:92:57:05:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FD:06:93:D4:D3:B9:0C:44:A0:D7:3D:84:74:FC:B0:FD:03:82:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v_0Gk9TTuQxEoNc9hHT8sP0DgtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:0b:7b:44:a0:de:06:73:55:31:5a:13:c8:8c:b2:62:7d:80:
90:ad:5d:31:21:30:62:7d:53:89:97:5f:37:07:73:cc:60:84:
29:4b:d9:c5:89:32:20:26:3f:45:dc:db:78:f9:36:ea:e7:73:
6a:c0:4e:cf:69:24:97:b0:da:c9:c2:33:bf:3a:ee:1a:8b:48:
81:e6:59:4c:f9:48:73:6c:e8:11:ba:0a:75:4e:07:4c:55:eb:
7e:8a:ca:08:b8:d8:c0:47:dc:14:7f:14:2c:e3:a6:c8:7f:1c:
56:a3:3c:b8:a8:1f:7b:0e:3c:01:29:91:63:cd:0b:cd:1a:bd:
5e:bb:df:14:10:43:4f:9b:23:6f:03:7f:88:5b:53:30:c9:f1:
16:51:b9:c0:dc:56:54:ce:17:a1:d2:8a:b1:01:1a:76:17:80:
c1:5c:60:6a:87:6d:61:84:40:7d:ba:88:46:0d:23:af:fb:16:
76:38:f2:54:f4:de:c9:d6:3a:54:e2:83:88:df:2a:27:7e:72:
9e:6f:e8:1b:f7:e5:1a:d4:15:7d:a2:af:6d:b5:2b:da:03:99:
35:b0:cd:ea:af:37:66:3e:60:7a:c5:68:c4:93:cd:b2:44:25:
23:65:94:03:d0:64:b2:2b:58:fb:8f:51:ac:55:5b:d0:18:cd:
66:a3:42:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:38:22 2025 by rpki-client