Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GBwd28ew6TTKMACBghzz_8G1p-w.roa
File: GBwd28ew6TTKMACBghzz_8G1p-w.roa (raw, json)
Hash identifier: jRnosWw8xh71NcWvRrqGcMrioyeyGFGR4rxFb4FpQ+8=
Subject key identifier: 18:1C:1D:DB:C7:B0:E9:34:CA:30:00:81:82:1C:F3:FF:C1:B5:A7:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182BF4265AE0372AF5DD609926196623764
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GBwd28ew6TTKMACBghzz_8G1p-w.roa
Signing time: Sun 21 Aug 2022 07:16:15 +0000
ROA not before: Sun 21 Aug 2022 07:16:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:bf:42:65:ae:03:72:af:5d:d6:09:92:61:96:62:37:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 07:16:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=181c1ddbc7b0e934ca300081821cf3ffc1b5a7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:4b:1e:e6:c6:c7:32:f2:1f:10:4b:a9:f0:
78:0b:6a:ec:cd:ae:79:a0:5f:41:16:5c:27:1e:9b:
c8:d6:b8:5f:d2:eb:81:b9:53:f5:bd:ec:89:bc:e0:
33:af:5c:57:8b:fc:a0:39:44:cc:a8:e1:83:b8:96:
58:ae:29:0f:94:95:22:c3:47:1c:bd:5e:e9:84:e0:
18:3f:bd:a3:20:dc:15:93:a4:3e:a8:53:5b:ca:b5:
81:51:78:9a:bc:b5:d6:0e:33:b8:ac:8d:cb:71:22:
30:9c:7d:48:25:22:a8:eb:91:ca:7e:4d:1f:ca:23:
23:a7:b2:91:69:8e:67:c9:7d:c7:da:18:ed:f7:08:
76:ef:9c:22:c8:33:9a:24:a4:ea:31:5d:c3:0d:91:
4a:c8:a3:47:d1:cf:97:0d:c3:78:96:b7:0a:0e:83:
ba:31:32:59:12:14:ab:52:5f:99:b4:3d:df:c5:e5:
46:c0:ef:44:2c:34:f5:da:7a:5c:66:dd:14:89:d6:
d4:b4:d5:90:45:8a:75:6d:a2:46:5f:3f:0a:1c:18:
95:b9:ba:d6:1f:6d:ed:26:d6:64:d9:9b:33:e2:3e:
af:99:a0:af:b9:cb:ab:05:5b:d3:15:f6:9d:48:35:
93:f7:eb:c5:c3:78:00:4c:86:b3:db:85:54:85:c9:
6a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1C:1D:DB:C7:B0:E9:34:CA:30:00:81:82:1C:F3:FF:C1:B5:A7:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GBwd28ew6TTKMACBghzz_8G1p-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:80:9b:5d:1b:bc:a0:9d:5b:03:39:18:eb:ff:bb:4d:dc:fc:
d7:2e:49:89:b8:2e:55:ad:4e:a2:d7:af:44:7a:d9:03:ab:21:
c5:c7:38:81:93:a6:85:dd:11:7b:b3:3c:84:82:9c:eb:07:1e:
a4:27:26:3f:f2:32:4b:b7:05:32:da:27:a3:a4:bf:ce:6e:23:
e2:49:8b:5e:a3:7c:0b:75:f5:f3:19:be:f6:ba:86:6e:23:b0:
ff:3a:d7:07:8b:0e:bb:63:93:3a:00:f9:a2:8d:c3:e5:fc:82:
2b:25:bc:50:46:fb:9a:32:c9:7e:c5:38:80:24:21:21:f2:16:
fb:45:7a:7a:c9:31:8a:3f:b2:85:76:24:42:0d:cf:e6:94:3e:
93:1d:67:ad:38:98:f5:76:63:8d:a5:4b:81:06:11:d1:de:84:
df:54:fa:73:b1:4a:60:88:8d:e9:7f:2a:25:38:7b:ab:1c:6c:
04:ef:f7:39:22:de:ea:5a:35:a3:8a:51:c5:d3:58:22:1c:4d:
b7:be:c3:7f:d0:b1:de:28:b2:52:31:70:1e:b9:11:9d:cc:6f:
d9:bb:28:10:9b:6b:b4:05:4f:c7:66:73:4e:1f:45:62:ef:29:
64:94:d3:65:ca:5f:8b:64:c5:77:2f:d9:5c:e5:09:e1:f5:98:
50:bc:34:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:23:10 2025 by rpki-client