Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GGvbrX2FFmVbbp8NmvFwf2naeFk.roa
File: GGvbrX2FFmVbbp8NmvFwf2naeFk.roa (raw, json)
Hash identifier: OzY2/WTU9D2D5JG7SlcoEEK0d0gVre10VAQ9ZYdTJsA=
Subject key identifier: 18:6B:DB:AD:7D:85:16:65:5B:6E:9F:0D:9A:F1:70:7F:69:DA:78:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181DBC97AF9D7E268D42EDAEEC4EC1DC895
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GGvbrX2FFmVbbp8NmvFwf2naeFk.roa
Signing time: Fri 08 Jul 2022 03:10:23 +0000
ROA not before: Fri 08 Jul 2022 03:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:db:c9:7a:f9:d7:e2:68:d4:2e:da:ee:c4:ec:1d:c8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 03:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=186bdbad7d8516655b6e9f0d9af1707f69da7859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e8:fc:be:eb:49:20:fd:6f:f2:65:89:e0:11:
ec:18:70:16:b1:20:84:d4:9f:f7:89:46:bb:1a:53:
3a:0a:7a:3a:3a:73:65:ef:a3:a9:a2:b6:ae:1f:0c:
c2:40:c1:56:9b:0c:7f:a6:e3:0b:c6:4b:ef:6f:d1:
3f:e8:44:04:cb:d9:ab:3c:b2:ec:0a:19:c8:af:21:
1d:fc:29:54:72:85:df:69:71:ff:7c:bb:8e:14:34:
c6:6c:9f:30:12:e5:18:13:31:ae:dd:57:f1:8c:7a:
d1:2e:97:a7:d4:1b:37:af:15:b8:c4:2b:ba:6c:d6:
f1:0c:fd:e6:07:b3:03:48:43:59:d6:03:f4:24:a0:
0e:0a:a4:86:62:81:c4:9c:98:d7:47:71:17:e3:f8:
16:ad:ef:50:aa:da:b7:6a:40:66:23:78:18:2b:91:
ad:d7:66:fe:0e:6c:03:8d:bd:73:1d:5c:98:e9:b4:
ad:36:cf:b7:1b:7e:eb:bf:b3:ee:4f:f6:73:10:2a:
d6:83:c8:fc:53:28:c6:a4:7e:00:06:2e:37:33:3a:
46:4a:85:1e:20:95:be:01:8c:2d:2b:51:45:4e:d6:
8a:15:2b:6d:03:53:22:7b:4c:19:d3:1a:1e:c0:f6:
06:d2:b0:38:f7:46:9d:b3:4c:8b:e2:0c:bd:80:db:
a6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6B:DB:AD:7D:85:16:65:5B:6E:9F:0D:9A:F1:70:7F:69:DA:78:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GGvbrX2FFmVbbp8NmvFwf2naeFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:46:27:e2:d6:4e:37:19:81:68:70:e8:85:61:1b:7b:80:07:
e4:33:94:a0:ff:cf:ac:36:81:f8:bf:60:13:ef:02:d6:53:19:
57:af:0f:7b:1a:b1:3d:55:5d:7b:d9:b8:96:2f:3c:ff:c3:54:
e3:b2:14:4e:00:a9:6e:a1:f4:99:5d:a1:63:66:80:76:58:02:
32:5e:e1:e7:0c:83:de:39:29:51:e5:e1:03:91:6a:a5:81:35:
bb:8b:d0:2f:d5:e1:27:8d:00:a3:89:b3:8c:c1:40:4b:5f:82:
21:48:67:32:08:02:38:5c:6d:03:6e:55:be:e4:98:7e:06:31:
93:ba:a6:7e:03:2a:c8:02:c8:d4:2a:a9:4c:f2:ff:04:fa:88:
8e:c6:fa:8e:2c:b0:e2:e8:4a:99:48:d1:42:06:b5:c5:f3:dc:
eb:b9:d3:8b:c2:2c:dc:f8:ee:56:d0:2b:2e:76:47:7e:2f:2d:
28:d9:29:aa:f8:be:52:51:cf:31:99:c6:0d:b1:78:05:18:da:
c9:a7:c7:7b:cb:91:c4:2a:38:18:a9:d9:22:26:27:31:77:df:
97:06:39:40:11:ee:d0:9a:3c:84:d3:8d:19:46:d6:cc:da:9c:
d3:e8:e0:2b:bf:a0:f9:7d:0a:15:53:33:24:a3:1f:90:2e:81:
d2:e3:bf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:24:16 2025 by rpki-client