Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GGr8fIiqUBLc1LRNUVju7R2YcBM.roa
File: GGr8fIiqUBLc1LRNUVju7R2YcBM.roa (raw, json)
Hash identifier: psrU9aOjH3zTrGo7S3aU7Uuo94vmBhj7HGSPk8qptls=
Subject key identifier: 18:6A:FC:7C:88:AA:50:12:DC:D4:B4:4D:51:58:EE:ED:1D:98:70:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 9212EBEE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GGr8fIiqUBLc1LRNUVju7R2YcBM.roa
Signing time: Sun 03 Jul 2022 16:12:25 +0000
ROA not before: Sun 03 Jul 2022 16:12:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2450713582 (0x9212ebee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 3 16:12:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=186afc7c88aa5012dcd4b44d5158eeed1d987013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ab:be:1e:de:87:45:0f:f3:2c:95:01:a2:38:
15:ca:cd:f0:3c:af:25:2c:8d:8a:a5:f4:61:68:6f:
4b:71:65:ee:15:e8:65:a0:1b:af:5a:8d:e3:a1:3a:
7c:43:16:a9:73:3f:80:b2:ce:dd:67:3d:30:07:d3:
1f:2f:11:22:e2:31:ab:4e:28:7c:71:a3:7d:de:76:
17:23:ed:3c:aa:0c:6b:a7:4a:0f:1f:e7:0d:fb:3e:
42:2e:00:40:29:b5:c0:fa:de:f7:b9:dc:94:1e:bf:
c3:9e:e2:e5:10:28:cd:f8:9e:ed:06:53:d2:aa:4c:
a1:1c:63:a6:7d:5d:e8:6f:ba:23:97:b4:6d:85:7a:
a0:71:36:d4:43:ee:e1:7e:92:fa:91:aa:ad:90:05:
2b:ba:70:81:3e:25:34:37:d7:eb:51:6f:6c:ea:af:
af:0d:22:26:8d:57:b9:a3:6f:bd:9e:32:9a:a1:b4:
14:f7:bc:89:12:7d:2a:73:cb:ab:d1:f6:86:1f:9d:
6c:72:dc:b8:fe:14:e7:7e:bd:93:9a:c2:86:7b:50:
9e:b8:54:3c:82:a0:ea:e5:e3:37:1b:8c:be:8b:10:
8c:06:73:94:e1:a4:dd:6b:cc:40:fd:21:55:2b:e0:
ea:d7:08:3c:c4:c1:4c:18:a1:06:b8:b5:a4:be:0b:
1e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6A:FC:7C:88:AA:50:12:DC:D4:B4:4D:51:58:EE:ED:1D:98:70:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GGr8fIiqUBLc1LRNUVju7R2YcBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:15:d5:ee:5d:d7:0e:15:91:34:c1:18:6e:8c:1c:75:20:9e:
d0:d8:52:1a:06:6a:36:a2:45:28:8c:fe:82:bb:0f:a2:f6:92:
3b:65:69:bb:9a:3d:fc:ad:04:b7:19:b2:8f:c7:b0:0e:28:68:
20:f4:ea:8a:e5:22:6b:62:33:80:69:38:eb:c1:f6:91:56:fa:
b3:64:5c:f2:7b:56:37:13:25:37:34:d5:da:3e:d2:a8:7f:05:
a5:da:69:98:7f:bc:1a:a1:0c:40:37:8e:3f:3a:ce:b2:20:dd:
aa:eb:92:7b:1d:e8:8d:ce:42:9e:7a:8c:75:b6:50:27:bb:f5:
b2:9b:b9:b8:55:93:18:56:99:1a:c9:a3:89:13:2b:53:89:2b:
f3:d8:37:1e:9f:e4:1f:36:24:77:35:c0:c9:26:b2:d1:2e:18:
aa:91:96:dd:2c:be:48:a9:93:e4:64:e2:23:5d:ca:11:91:9d:
00:90:9d:06:31:4d:c3:b3:7b:d9:65:1c:86:03:73:b6:55:a8:
69:cc:ce:af:4c:7b:88:71:d0:40:c1:de:c8:b5:9e:15:df:0b:
e6:32:14:79:ae:e7:26:a5:08:2d:85:58:fe:87:74:89:ad:42:
21:48:fa:36:bc:9a:07:11:09:ad:7c:55:a2:23:cf:b1:0c:43:
a5:79:e7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:18:45 2025 by rpki-client