Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gY5OKuzQtP2OWCP_HZVmkumySoI.roa
File: gY5OKuzQtP2OWCP_HZVmkumySoI.roa (raw, json)
Hash identifier: vowYlzSTFGO94bj9ZStgDFGezCDVYw1HjeJPEW9uFSY=
Subject key identifier: 81:8E:4E:2A:EC:D0:B4:FD:8E:58:23:FF:1D:95:66:92:E9:B2:4A:82
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01887227D20B2A886312E0A04A05A12CB644
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gY5OKuzQtP2OWCP_HZVmkumySoI.roa
Signing time: Wed 31 May 2023 14:13:12 +0000
ROA not before: Wed 31 May 2023 14:13:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:72:27:d2:0b:2a:88:63:12:e0:a0:4a:05:a1:2c:b6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 14:13:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=818e4e2aecd0b4fd8e5823ff1d956692e9b24a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2b:c7:45:3b:f5:bd:3c:8b:dd:c5:ce:d2:ec:
8c:8e:10:9f:e6:55:ca:ba:9a:70:f9:92:7b:23:ed:
76:0c:24:ba:61:83:da:32:fd:07:f0:a4:c6:30:d1:
e3:69:81:04:a2:ea:19:1e:c1:08:59:06:b3:cf:14:
48:c3:e3:bb:b1:43:5a:e0:b3:45:23:d6:0f:7c:39:
3b:24:f9:2d:c2:4a:84:11:b4:6d:fd:0a:9e:38:22:
8a:1c:57:84:39:8f:3c:fa:d2:ab:e6:84:12:19:78:
f6:5c:60:f8:51:83:9e:15:c0:8d:30:69:b8:19:b9:
d0:8f:d9:7e:91:57:42:42:8f:f4:d2:c3:94:46:9b:
80:03:18:e6:0b:de:dc:97:d2:7b:3c:82:9e:bd:03:
1e:43:9e:29:a3:36:ef:cb:2d:75:9f:19:0b:40:c5:
bf:29:60:a6:aa:95:9a:4f:6c:1d:60:47:4c:1f:7d:
12:4e:d6:d4:bf:5b:a3:0d:77:0f:b3:e8:6c:24:6a:
78:60:03:5d:a5:a2:fc:70:0b:30:27:57:8e:46:3c:
49:c4:db:50:7a:3b:14:1b:70:51:bb:99:8c:ff:d7:
22:de:8e:1f:f1:14:b5:05:55:2e:84:50:c6:da:16:
d8:b2:a2:5c:b0:d4:3d:38:47:2c:00:f6:1f:9d:db:
b4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8E:4E:2A:EC:D0:B4:FD:8E:58:23:FF:1D:95:66:92:E9:B2:4A:82
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gY5OKuzQtP2OWCP_HZVmkumySoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:70:2c:68:3f:b1:ac:ee:48:9c:42:69:1a:b1:b7:0a:eb:6e:
63:13:93:a9:ca:ec:2f:4d:50:38:52:42:92:6c:0c:1c:d4:c5:
1e:f4:e3:0d:85:a2:19:58:b3:0e:4a:05:5b:b7:9e:22:48:ab:
49:5c:ad:a4:65:11:0c:ea:0b:d3:e6:15:c4:29:af:22:7d:4f:
31:70:e7:f8:20:5e:a6:a9:36:4e:88:ef:be:4a:b9:bf:73:2b:
7c:c6:07:76:c4:46:a7:06:99:e6:ea:f5:fd:51:ae:40:f7:17:
4f:01:dd:7c:2a:27:99:09:e3:49:36:01:21:37:80:6a:5b:06:
fb:40:9b:2d:33:3c:af:bd:7d:f0:00:9b:e8:c5:48:a4:90:c3:
9c:65:0d:37:f4:7e:f9:da:81:4a:fd:58:c3:ed:8b:03:81:c7:
72:f5:5a:7e:eb:e4:d1:97:4d:d2:fd:58:05:6a:02:02:a6:91:
d0:39:16:51:2d:ec:6a:13:6f:1f:4c:d0:57:f6:e7:ce:ab:82:
87:51:eb:a0:17:de:29:4c:0b:85:26:39:fc:0d:28:c6:bc:dc:
c1:31:02:97:0a:36:ce:1d:24:c7:98:d1:a8:12:ec:d5:bd:c7:
22:67:df:d9:2e:85:2b:0a:13:3a:12:3e:d4:f6:13:c2:62:c2:
6b:cf:9d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:35:45 2025 by rpki-client