Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gLYnsU1dpfXEd5nDB1_rNKrdcPw.roa
File: gLYnsU1dpfXEd5nDB1_rNKrdcPw.roa (raw, json)
Hash identifier: JsoL5k3oKoOZytnjjuhj2zgBfjixREYbpgO39P5B9/I=
Subject key identifier: 80:B6:27:B1:4D:5D:A5:F5:C4:77:99:C3:07:5F:EB:34:AA:DD:70:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8218C0EB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gLYnsU1dpfXEd5nDB1_rNKrdcPw.roa
Signing time: Sun 08 May 2022 03:10:48 +0000
ROA not before: Sun 08 May 2022 03:10:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2182660331 (0x8218c0eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 8 03:10:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80b627b14d5da5f5c47799c3075feb34aadd70fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:70:41:e0:a9:39:ec:af:c6:22:c2:49:b6:60:
8f:ee:e2:b9:66:a9:13:3c:15:33:dc:50:8d:ae:3a:
07:86:2e:5c:aa:8a:ed:15:74:96:e2:66:b3:a8:c8:
db:97:f3:8c:37:0e:42:0c:cd:bb:b5:36:7b:b8:5e:
1a:91:f4:14:6f:5d:37:30:fd:70:7b:39:45:fe:00:
ab:e0:03:87:ec:9b:74:1c:31:27:02:0f:f3:fc:31:
d8:31:02:9f:ff:20:66:3b:d3:78:f6:3b:4e:3d:dd:
5d:e2:62:fe:e0:6d:dc:a6:f1:37:d6:b6:71:5f:ac:
ea:1c:a6:fa:ec:73:f7:28:35:10:e7:d7:3a:13:1e:
55:a2:c4:90:60:c3:b0:92:65:c8:b7:43:49:0e:13:
98:e0:71:a3:d5:e1:81:e8:35:68:f7:59:bc:a0:d5:
1e:36:ad:fe:a0:42:52:18:46:a4:95:42:01:88:97:
df:50:2d:1d:83:63:6b:da:56:43:f6:e5:da:cb:19:
a7:c1:64:57:55:e1:d8:2b:99:03:4c:96:43:22:02:
ce:d4:a7:0d:81:73:14:54:01:77:ac:61:f5:fd:2d:
51:a7:43:c2:06:63:41:7f:c1:a4:50:39:d5:7b:4b:
16:f2:06:a6:a0:2f:7e:f7:d1:f3:dc:8a:f7:72:71:
ae:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B6:27:B1:4D:5D:A5:F5:C4:77:99:C3:07:5F:EB:34:AA:DD:70:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gLYnsU1dpfXEd5nDB1_rNKrdcPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:56:35:7c:dd:cf:f5:16:0a:b2:2a:55:0b:14:56:ce:5c:ca:
1c:0c:f2:36:b7:ab:91:6d:d9:7b:ce:54:ec:bd:ed:a0:45:34:
ad:8e:2f:a8:ab:2f:48:cd:4a:3a:02:71:4b:c3:e1:57:7c:fd:
7e:6a:bb:75:b9:ad:f4:b6:f6:2a:13:d9:19:f1:e7:48:5c:fb:
83:c9:56:a1:1f:df:71:29:38:b4:6d:1b:e4:9d:25:91:2c:05:
01:1a:ed:8f:e8:9e:99:68:a8:05:58:b0:43:3a:b2:40:15:4b:
23:01:df:79:63:42:52:60:95:ca:38:a3:cb:d8:78:32:77:a3:
47:7d:c0:ab:09:09:d3:08:f8:83:4a:65:59:88:d6:81:59:d0:
7f:34:72:4b:f4:33:40:ec:32:64:8f:61:ec:e0:e8:18:1e:84:
59:5f:23:42:da:37:9a:94:b8:72:22:f8:25:4d:0b:24:d0:7b:
bb:76:fe:9b:ba:14:df:0a:a4:23:8c:cb:ec:33:44:99:32:c3:
0c:8f:f2:f7:73:b6:1b:65:3c:32:7d:d8:2a:ce:f5:9a:26:41:
af:3f:fa:ef:a5:cd:2a:8f:ec:47:5f:74:c1:95:f8:31:67:10:
0e:c1:47:8e:a0:03:be:f3:54:34:88:60:ed:db:19:0e:38:01:
7b:64:05:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:39:35 2025 by rpki-client