Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g1tUgPpD314jzeRadHaBTe6PSXI.roa
File: g1tUgPpD314jzeRadHaBTe6PSXI.roa (raw, json)
Hash identifier: jQkCdVcvfi/QKOH7lB7TftEx2FgCbztAyqFsd6dUia0=
Subject key identifier: 83:5B:54:80:FA:43:DF:5E:23:CD:E4:5A:74:76:81:4D:EE:8F:49:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186AEA82670E706F5B9C8D472AC544DC561
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g1tUgPpD314jzeRadHaBTe6PSXI.roa
Signing time: Sat 04 Mar 2023 22:05:00 +0000
ROA not before: Sat 04 Mar 2023 22:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:aea7:6d72/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ae:a8:26:70:e7:06:f5:b9:c8:d4:72:ac:54:4d:c5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 22:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=835b5480fa43df5e23cde45a7476814dee8f4972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:48:c5:82:9e:fd:a5:4b:80:75:98:71:7f:bd:
af:4b:dd:a5:e1:af:de:8d:83:fa:50:d2:e1:cb:39:
79:7c:d6:37:ca:c0:58:b1:f9:84:cc:38:f8:c4:86:
3f:6d:13:86:86:3b:d0:97:04:02:c1:e6:66:4e:00:
21:34:88:fa:ab:9a:db:0e:d7:d9:a2:16:e8:22:b9:
05:6e:68:a6:cf:a6:61:50:86:47:b4:36:62:e7:1d:
8f:17:46:cb:89:6f:69:a7:36:4a:08:12:0a:c1:c5:
14:61:88:47:99:f7:6a:c1:89:e1:c5:fb:e1:53:0c:
bf:b9:ca:c1:35:1f:b6:96:df:2d:74:b5:9a:26:8f:
3e:d7:93:db:39:b9:6e:5d:05:7a:9a:99:4e:4f:8d:
b6:08:73:69:ea:74:68:2f:27:fd:0b:a6:f8:5b:d5:
b8:ef:a4:e3:0c:a4:43:a1:10:30:bb:b2:4d:dd:4e:
59:53:ce:bb:02:0f:b8:99:f8:92:f2:a8:13:a1:a7:
18:02:43:59:ad:80:ca:ad:51:43:ea:28:57:19:3a:
6f:a1:1d:1c:42:98:1a:7a:75:ba:a6:e9:e4:cc:0d:
f9:a8:21:f2:d9:47:d6:f1:69:f4:11:d8:df:ea:fe:
2c:f5:51:2d:4b:6c:f8:34:65:f6:ba:38:42:0c:96:
4f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5B:54:80:FA:43:DF:5E:23:CD:E4:5A:74:76:81:4D:EE:8F:49:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g1tUgPpD314jzeRadHaBTe6PSXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:07:ab:c7:23:4e:de:10:20:3d:6e:f5:01:05:fc:aa:18:62:
ce:b7:8e:e8:b5:a1:c7:80:37:3d:0a:6b:9b:ba:45:98:f1:f5:
7b:c1:29:97:eb:87:7e:3c:38:9c:8c:41:0e:ee:ca:c5:a5:76:
85:77:46:21:12:b2:01:0c:b9:69:18:25:f3:02:cd:fd:86:5d:
db:2e:40:73:b8:3d:38:83:80:0e:ab:7e:89:00:22:54:88:f9:
74:b6:16:e1:93:2a:8c:42:0b:9a:0e:b0:e5:7d:25:e5:bc:f1:
0c:ec:fb:12:3b:5d:63:3d:0d:0e:fe:0e:e9:e4:5d:63:ea:62:
d1:15:03:2c:0c:92:cb:cf:3d:e7:f3:ef:4b:a2:74:22:68:a4:
71:51:bf:5e:15:b7:e6:28:d7:e1:b8:98:d6:86:f6:25:18:8f:
2c:a4:94:d5:6e:3b:8c:e3:fb:1e:8e:5b:cd:18:91:55:42:12:
95:5d:37:6c:4b:3d:58:62:16:63:0c:29:34:fb:6a:aa:5f:b3:
d1:30:fb:a2:46:61:78:61:54:3c:be:0c:6d:82:b4:95:a7:fa:
1a:ad:8a:63:8d:5f:de:86:41:94:80:e9:0c:17:52:99:74:fa:
25:5f:93:b7:a2:ce:aa:c0:a5:94:2c:35:f7:d2:30:b6:9d:5c:
ad:d3:b9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:33:18 2025 by rpki-client