Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gvUsJTytThuEvAFa91_0nuhtfkk.roa
File: gvUsJTytThuEvAFa91_0nuhtfkk.roa (raw, json)
Hash identifier: 3LLWe3W7UUxoy03WkSGbLKc2HO4DcA38FqIo4Ct/eJ8=
Subject key identifier: 82:F5:2C:25:3C:AD:4E:1B:84:BC:01:5A:F7:5F:F4:9E:E8:6D:7E:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E93BFA6E4FED69E0B1B78A3B67666D64
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gvUsJTytThuEvAFa91_0nuhtfkk.roa
Signing time: Thu 16 Mar 2023 07:04:27 +0000
ROA not before: Thu 16 Mar 2023 07:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:e93b:d24b/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e9:3b:fa:6e:4f:ed:69:e0:b1:b7:8a:3b:67:66:6d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 07:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82f52c253cad4e1b84bc015af75ff49ee86d7e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:7d:0d:c3:e9:fe:b1:09:76:f1:bc:b5:71:
bb:b1:2c:78:be:57:e3:fa:09:2d:7c:94:fa:68:84:
d0:bc:03:32:aa:ca:c1:97:88:e6:18:94:23:95:2f:
83:59:8f:fb:16:a4:24:f9:e8:98:1d:7a:59:d7:70:
82:47:c2:2b:fd:fd:41:15:51:3a:19:af:71:e0:43:
d3:08:78:81:94:14:5c:c8:79:36:79:b1:f9:fc:f6:
2b:2b:cb:0e:eb:57:de:b7:aa:54:bd:16:c3:07:a4:
a9:60:fd:37:e9:8e:1b:b1:fd:bb:16:d8:3c:67:0e:
c6:7e:3d:eb:02:a6:ef:b8:a2:f7:1b:c5:2a:34:23:
a6:7e:53:ff:c0:6b:6c:eb:be:ef:51:b3:3a:b4:59:
8d:1d:18:8b:52:0a:72:8d:f0:2c:4e:f2:41:6e:3d:
78:c9:ee:49:66:22:8a:5c:e5:6d:01:53:fd:7c:fa:
7e:57:fe:e0:15:6f:a3:95:a0:12:37:6e:3c:8e:c4:
9b:e7:b0:39:6a:f5:a0:b5:ae:14:a1:b2:c4:d0:23:
36:8a:62:84:91:eb:4a:0e:a2:d4:5e:2d:39:df:d7:
46:ae:f8:91:fc:f3:f1:20:48:b6:3f:7b:fd:d6:cd:
58:91:f5:a5:16:be:21:74:38:e6:20:9e:f6:83:64:
be:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F5:2C:25:3C:AD:4E:1B:84:BC:01:5A:F7:5F:F4:9E:E8:6D:7E:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gvUsJTytThuEvAFa91_0nuhtfkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:99:ea:d5:f1:a6:98:8f:fc:f9:67:c7:cc:1f:93:89:d2:85:
0c:96:95:e7:34:f5:99:4e:4a:c4:80:dd:7a:63:8c:86:cc:1a:
c0:24:67:d6:a4:91:a1:57:20:b4:16:5b:15:9c:2b:33:ed:27:
44:42:14:52:c9:46:87:34:fc:27:f8:1f:b2:7e:29:de:a9:fa:
0a:64:c7:9c:56:9e:ba:b0:22:b0:dd:2a:b5:cb:d7:72:28:97:
5b:6c:85:9c:0d:d1:d5:f5:ac:47:30:2d:06:6d:61:1a:ef:09:
0f:b6:04:45:2d:3d:30:d8:23:f4:03:0a:1a:67:76:c4:d3:b0:
e7:cb:d9:a8:c4:dd:5e:fd:e3:74:fa:34:e0:47:61:de:4b:e1:
f0:42:ef:ab:8f:e8:e6:a9:d5:50:1a:26:fc:00:a5:21:2b:be:
25:82:fd:85:b0:c9:4e:4a:8a:43:f0:a4:c0:9f:d1:30:49:f0:
67:2e:6a:5e:79:43:93:db:77:b9:93:9b:6c:88:36:74:99:e9:
7e:e1:d4:ed:79:5f:21:f6:63:35:0f:fd:2a:7a:60:bf:23:7a:
aa:62:a7:ac:25:60:5d:df:cc:b8:60:18:6d:b7:c8:c7:37:32:
b9:ad:ae:47:37:57:c5:93:3d:4f:9a:09:46:4c:4d:76:20:ac:
14:5a:f4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:16:51 2025 by rpki-client