Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gqKolXwRJCjF8j_fD5ewjWHCiws.roa
File: gqKolXwRJCjF8j_fD5ewjWHCiws.roa (raw, json)
Hash identifier: 3oa8CIyLw6MZFAQpJxOEKJ9FSIzlJWEuoC+pD4zHMao=
Subject key identifier: 82:A2:A8:95:7C:11:24:28:C5:F2:3F:DF:0F:97:B0:8D:61:C2:8B:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A307F3CC3E717EE829561B3ABB910FFCB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gqKolXwRJCjF8j_fD5ewjWHCiws.roa
Signing time: Sat 26 Aug 2023 06:19:19 +0000
ROA not before: Sat 26 Aug 2023 06:19:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:30:7f:3c:c3:e7:17:ee:82:95:61:b3:ab:b9:10:ff:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 06:19:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82a2a8957c112428c5f23fdf0f97b08d61c28b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:eb:07:37:9e:f4:71:fe:10:86:9c:ee:94:
99:84:12:c1:95:3f:57:3e:3d:09:62:20:66:04:94:
3b:6b:0e:87:17:c1:6a:d6:db:c3:28:f8:f2:04:fc:
9a:b4:20:00:cb:e8:fb:4a:ca:6a:44:e9:68:9b:32:
e3:a4:04:03:23:1f:39:a9:c7:93:cd:37:60:07:c6:
b5:6c:67:d3:ee:5c:3e:c3:04:0f:36:18:a0:fc:d8:
c4:72:a4:f3:1d:1d:b5:f1:77:ca:43:46:5a:17:f5:
60:d9:23:41:3a:61:f6:ae:69:9c:84:2a:96:d7:c1:
cf:2c:0b:14:56:41:0d:d4:77:26:5a:c6:fe:d4:d5:
d8:70:db:7e:0f:c1:17:b5:9f:58:b8:4c:1d:f8:e3:
b0:c4:1b:61:a9:53:fa:f5:80:32:98:7e:ba:4e:f1:
e5:ac:38:61:85:32:d6:54:76:5b:59:c6:e9:6d:7d:
5b:64:24:9a:b4:88:28:b6:62:b5:9b:b6:8d:66:2e:
67:ca:4b:93:1c:af:ec:9d:7f:28:c7:6f:38:18:60:
ff:e6:55:58:d9:5c:b1:9f:cb:8a:13:16:99:d2:a1:
ea:00:e7:85:95:a0:cb:7e:18:8b:03:bc:e1:23:ad:
90:a4:ed:37:0e:8d:89:e1:e5:60:a9:76:6b:52:6a:
7e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A2:A8:95:7C:11:24:28:C5:F2:3F:DF:0F:97:B0:8D:61:C2:8B:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gqKolXwRJCjF8j_fD5ewjWHCiws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:00:ed:43:87:f7:87:13:40:cb:0a:51:2c:88:c2:9a:c2:7b:
bc:ff:d7:55:4e:58:22:d6:1b:fa:d8:72:d1:52:3b:6e:49:f6:
c1:3d:88:fa:1a:97:6b:99:e1:0c:de:ef:a9:4c:fb:a9:cc:fd:
1e:68:79:49:b4:5e:eb:86:00:77:f5:ac:fb:e9:bb:3a:48:af:
45:95:18:ac:8c:fd:10:1b:49:dd:5e:eb:e2:8b:cb:85:e9:ac:
d3:7c:1e:31:85:0b:cb:71:27:22:a1:d1:ae:6a:3c:ad:60:5f:
e8:73:7f:e6:cf:43:2d:8e:e3:c4:2a:ff:f8:f3:23:94:47:68:
27:3a:df:f2:ce:3c:03:64:7b:17:3b:e1:45:2c:0f:a3:0c:4a:
37:06:51:c6:1d:66:f5:26:de:d9:42:18:ad:1e:9d:c0:13:84:
fb:6c:0f:a6:5f:8f:09:65:93:47:03:df:64:0c:86:7f:58:34:
d6:58:3a:92:a5:70:4c:9b:60:f5:20:8a:ec:b9:d5:e8:be:5f:
52:f7:94:78:70:b0:36:ad:0f:04:b1:d6:fd:ae:95:3a:f4:f6:
96:51:a7:30:d3:3d:33:3b:a7:f0:d7:44:a5:af:bd:78:fc:04:
33:bf:ba:0b:d2:10:a9:b6:84:9a:4b:fd:22:a3:e3:87:05:c8:
de:c8:6d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:10:02 2025 by rpki-client