Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g_16SLS_1cXKxLq-U17k3BI_d5I.roa
File: g_16SLS_1cXKxLq-U17k3BI_d5I.roa (raw, json)
Hash identifier: TZQq/PO5xo/+3FKk0IEhVEooWUfZskER+i/t+huwfwo=
Subject key identifier: 83:FD:7A:48:B4:BF:D5:C5:CA:C4:BA:BE:53:5E:E4:DC:12:3F:77:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018302D90DB922C9E9A04B50306FF33C4F62
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g_16SLS_1cXKxLq-U17k3BI_d5I.roa
Signing time: Sat 03 Sep 2022 10:15:22 +0000
ROA not before: Sat 03 Sep 2022 10:15:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:02:d9:0d:b9:22:c9:e9:a0:4b:50:30:6f:f3:3c:4f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 3 10:15:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83fd7a48b4bfd5c5cac4babe535ee4dc123f7792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:41:93:66:60:b2:68:56:94:b7:23:c8:c0:
6c:3a:54:a4:40:45:6f:60:03:c6:bf:06:91:38:72:
70:61:95:9f:a0:9e:1b:2f:fe:f2:02:f1:f5:2a:45:
f6:f9:f5:ed:47:87:2c:e4:76:36:a9:3b:f3:3e:fe:
ac:a8:c0:47:ae:6f:aa:90:90:ed:2a:72:25:c8:57:
37:25:98:52:bc:66:c3:d5:a3:ca:1e:57:e9:8b:8f:
40:c4:00:1a:03:54:d3:c0:57:f7:6d:ef:52:13:44:
57:51:4e:9d:fd:65:95:57:d0:e5:e2:7a:27:37:de:
2d:74:10:cc:38:61:9b:a3:f2:f4:f9:5e:b6:20:04:
81:fb:73:45:33:bd:d1:75:86:c5:ca:ae:17:15:ed:
de:8b:48:1c:fa:36:47:3d:c8:46:71:c4:4c:aa:19:
2d:95:0e:11:39:ab:ce:be:7d:41:5b:5e:ca:59:8c:
65:ec:28:e8:f4:6d:6a:03:5b:b6:62:c3:02:85:98:
27:34:3c:29:27:c4:51:d6:25:a3:ab:44:09:fa:c7:
db:6f:88:e4:21:31:1c:43:0d:ac:08:44:4e:b3:8c:
49:9c:aa:71:90:ac:0d:71:a1:94:a9:82:0c:3a:fb:
03:c0:e9:4e:a1:2c:ba:4b:08:d9:c6:3f:dc:db:b2:
ca:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FD:7A:48:B4:BF:D5:C5:CA:C4:BA:BE:53:5E:E4:DC:12:3F:77:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g_16SLS_1cXKxLq-U17k3BI_d5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:34:17:a5:69:d8:6d:98:5a:db:1c:17:0d:f0:72:62:97:0a:
82:79:72:de:d9:07:7f:28:24:08:64:4d:a7:b9:cc:12:7c:c2:
39:d9:53:ec:45:8e:73:91:a7:86:0b:61:5e:3a:6a:c4:0e:af:
7d:e3:f0:88:96:3d:0d:32:da:f3:ff:d3:b9:a8:ea:9d:50:51:
24:e2:ee:e2:85:4b:96:f2:c3:de:6c:c6:98:63:8b:55:02:ca:
f2:94:e1:fc:dc:6b:f0:8b:86:8f:a5:3f:a6:ec:47:98:4d:94:
3a:d8:25:94:4e:17:f3:81:29:5d:9e:99:ca:1c:88:67:c8:02:
63:8c:8d:03:2c:f8:ed:c5:86:d4:c9:a7:9b:43:d1:00:a4:32:
77:b3:7c:aa:13:d3:53:fc:f4:cf:a5:63:7a:5a:94:e3:93:ed:
d9:5a:d1:02:7a:41:4d:17:3d:4a:d3:43:3c:72:87:eb:0c:45:
b8:6a:78:c8:14:96:23:2b:04:ee:35:e1:5e:9c:ac:0b:fd:4d:
64:e4:9e:ca:8a:22:c8:02:65:3d:97:b2:9d:0e:b9:41:99:62:
46:a3:90:e8:bf:ff:a2:c6:6e:3f:57:8a:9a:1b:b6:3c:bc:33:
0b:b0:7d:b9:05:22:dc:0d:52:6f:2c:61:28:40:ba:db:e5:ea:
55:c8:d6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:20:40 2025 by rpki-client