Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GGxpO36HyPZxSNvp3aK2c0WVNf8.roa
File: GGxpO36HyPZxSNvp3aK2c0WVNf8.roa (raw, json)
Hash identifier: kDxiPs+3VjRNRznpwuLxo7m7UNDSXNDc6bWtmDlqqRo=
Subject key identifier: 18:6C:69:3B:7E:87:C8:F6:71:48:DB:E9:DD:A2:B6:73:45:95:35:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01847FB3DB01AB754C7856D2A139C4C15B9F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GGxpO36HyPZxSNvp3aK2c0WVNf8.roa
Signing time: Wed 16 Nov 2022 09:10:04 +0000
ROA not before: Wed 16 Nov 2022 09:10:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7f:b3:db:01:ab:75:4c:78:56:d2:a1:39:c4:c1:5b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 16 09:10:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=186c693b7e87c8f67148dbe9dda2b673459535ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:20:1e:5f:d7:14:51:a9:39:47:59:1a:37:
66:d6:a3:64:30:8b:16:fd:c7:b2:d7:bf:b0:79:14:
fe:29:e4:30:14:d2:7f:fa:a2:38:5a:09:7a:14:e5:
86:d8:24:51:0c:de:7a:fe:2c:11:1a:41:19:af:fb:
4b:d4:c2:bb:f6:3d:26:16:af:f5:cf:8b:53:dc:41:
b1:b3:3e:63:1a:03:4e:57:a3:08:f9:9d:b4:44:45:
c8:da:b7:17:c0:e2:1f:1c:ec:24:56:f6:6a:8d:d3:
0a:f1:e2:88:ba:96:c0:62:fb:89:90:cb:b2:36:a2:
c3:28:29:0e:12:14:19:20:dc:1e:6b:85:41:8d:61:
c5:b4:1f:fc:ec:a9:22:6c:dc:24:15:15:63:b3:a8:
d9:52:4f:9c:64:eb:de:36:27:87:a6:2a:3e:ab:e7:
9b:83:21:8f:5b:ed:71:17:39:7e:53:9e:ae:2f:ac:
7b:42:c3:28:b9:6f:88:3a:2f:0f:c8:00:23:e4:22:
53:49:ee:3d:76:a6:cd:5f:6d:8a:66:bc:06:f9:c5:
44:65:24:9c:2d:f7:80:bc:88:88:16:54:55:86:d5:
40:2b:96:a0:16:69:72:8d:8d:35:14:01:9a:12:30:
20:02:15:96:8a:7c:50:ac:10:e4:07:2d:32:e1:6d:
7d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6C:69:3B:7E:87:C8:F6:71:48:DB:E9:DD:A2:B6:73:45:95:35:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GGxpO36HyPZxSNvp3aK2c0WVNf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:75:6a:95:ec:0e:d6:ef:c3:22:f7:c3:d8:c5:4d:42:8e:97:
1a:6f:16:f2:2a:01:62:2b:b7:d6:b8:48:e1:cd:a7:f1:8e:05:
06:09:63:52:99:c4:89:14:50:ff:bb:ef:0f:d7:19:b5:3e:ff:
3d:23:80:51:c1:c9:d4:f4:1b:a5:2f:8a:3e:94:d9:98:7a:28:
06:a0:ea:f7:1f:2d:90:98:32:b1:0a:ae:51:2d:78:4c:7a:3e:
c4:3d:4b:c8:3a:b5:f6:15:9c:a9:1f:f8:5c:5f:a0:3c:fb:b6:
84:9f:0f:23:c4:c2:68:88:d8:b9:7e:66:66:f1:68:51:19:b2:
30:0e:ad:62:ce:34:e2:ba:a8:73:27:83:f7:82:23:f0:cf:b9:
87:81:ec:ac:a2:a2:3e:7c:d0:58:ab:dc:3a:ce:9a:af:2f:9b:
cd:56:bf:5e:9f:d5:6c:2e:e4:81:e3:48:0d:d4:64:69:59:c4:
bd:69:0f:66:13:de:e9:27:00:ea:bd:76:42:fa:7b:57:08:b1:
01:6b:ea:5b:b7:9f:84:95:2d:cc:0a:51:f6:90:0a:0a:ca:1d:
25:8e:e5:be:fd:83:e5:62:bc:5b:11:27:40:e9:b6:d8:5b:49:
25:61:f2:a8:f4:f3:7b:28:1b:4c:50:ee:1e:a8:d7:92:e7:b3:
6e:65:e2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:05:42 2025 by rpki-client