Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gMuuMdgDfeCTZ0ndq3fcCMqBNG8.roa
File: gMuuMdgDfeCTZ0ndq3fcCMqBNG8.roa (raw, json)
Hash identifier: qhsOilhcnrQG4zDIl+HeiC4EGj9+0UQwnb+82QeF1Dc=
Subject key identifier: 80:CB:AE:31:D8:03:7D:E0:93:67:49:DD:AB:77:DC:08:CA:81:34:6F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187378E75624B1947BD71B3F2237B909F71
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gMuuMdgDfeCTZ0ndq3fcCMqBNG8.roa
Signing time: Fri 31 Mar 2023 12:04:55 +0000
ROA not before: Fri 31 Mar 2023 12:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:378d:d583/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:37:8e:75:62:4b:19:47:bd:71:b3:f2:23:7b:90:9f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 31 12:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80cbae31d8037de0936749ddab77dc08ca81346f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:67:f2:90:cc:e0:66:b9:41:15:3c:bc:3f:
03:57:50:a0:cf:aa:4c:dc:f7:e6:1e:08:c3:63:84:
2e:a2:c1:0c:40:5f:fa:5d:61:ed:c7:4b:52:6f:21:
85:12:fb:21:5f:40:eb:43:ea:ae:a1:39:0f:49:6d:
1d:54:74:bb:c9:a2:f6:fe:8b:d9:78:3f:5e:42:0b:
0c:af:74:ab:6b:8a:26:63:f5:c1:b7:44:eb:42:04:
77:43:6b:57:c4:56:81:a1:05:cb:98:8f:44:b9:e4:
00:8c:bd:9f:68:8a:a2:a6:de:d1:7a:90:99:0f:e0:
be:13:1f:61:5e:e8:01:e0:98:08:74:87:0e:48:64:
bd:ec:18:ab:4c:42:04:2b:82:a5:24:d3:7b:53:4b:
e0:a0:e8:b8:3a:2d:2b:85:64:58:fa:4c:fe:cf:d8:
56:0e:8f:49:98:e6:7a:3c:2a:a1:3d:47:41:e9:b6:
ba:3a:11:d1:f7:12:1d:4d:d4:d8:16:b8:d9:af:9a:
f4:92:30:69:9c:6b:bb:6c:93:a0:45:4c:ed:e4:bb:
9e:68:8b:06:ef:4c:ea:ce:e2:2b:40:56:ed:05:c0:
f5:d6:0a:fd:53:33:e3:34:2f:5b:59:99:e9:d8:9a:
54:67:33:76:c9:7a:c2:14:6d:d0:65:1c:6f:12:d0:
f2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CB:AE:31:D8:03:7D:E0:93:67:49:DD:AB:77:DC:08:CA:81:34:6F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gMuuMdgDfeCTZ0ndq3fcCMqBNG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:bd:15:a9:fa:4e:3e:ba:f4:11:ae:b5:b7:64:5c:28:62:fb:
68:06:22:1a:53:85:89:35:b9:e8:43:17:3d:b3:42:3a:a9:c1:
e4:b9:59:a4:80:f2:95:82:25:74:15:ae:40:65:77:29:68:42:
6a:b4:85:0c:b8:24:04:60:16:99:5e:6f:be:dc:30:d6:bd:eb:
1d:60:4d:32:c2:d2:74:df:74:d3:37:26:4e:26:89:82:13:73:
ce:bf:66:3b:12:7e:6f:18:9b:7a:a6:38:e8:67:d0:58:e1:3d:
ac:96:8c:f4:b3:0d:27:49:94:64:b8:0c:16:6e:24:28:83:2b:
ca:62:c2:c0:86:53:97:8c:0e:47:e1:10:46:d3:f5:65:84:c7:
ab:2d:9f:13:f8:f5:ef:a1:5a:e9:78:ff:5a:49:e6:8f:73:e4:
17:72:37:10:2c:75:88:d8:80:af:24:af:6e:1f:32:af:10:8c:
23:22:ad:23:4b:1a:84:1e:38:b9:30:32:1d:4a:96:e2:92:1f:
f3:ae:24:e9:10:e8:a3:f8:0a:07:8b:d1:56:4b:ae:40:45:76:
4a:57:2b:65:d8:af:33:aa:8c:79:84:76:1f:10:6e:b6:5b:42:
32:30:d3:cc:49:ab:4a:df:57:04:2f:c9:95:4f:ac:b9:dd:5e:
6a:7f:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:26:21 2025 by rpki-client