Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GKjhIkRv9Laa2z9KgF6giFobD3M.roa
File: GKjhIkRv9Laa2z9KgF6giFobD3M.roa (raw, json)
Hash identifier: Lhsw2L4Am9os5EOU5EzZ8D+reL9UN/PoizR3MJmiEzQ=
Subject key identifier: 18:A8:E1:22:44:6F:F4:B6:9A:DB:3F:4A:80:5E:A0:88:5A:1B:0F:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8540AD98
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GKjhIkRv9Laa2z9KgF6giFobD3M.roa
Signing time: Wed 18 May 2022 20:05:17 +0000
ROA not before: Wed 18 May 2022 20:05:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:d8c5:ad27/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2235608472 (0x8540ad98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 18 20:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18a8e122446ff4b69adb3f4a805ea0885a1b0f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:65:bf:df:62:cf:20:3a:dd:fd:b2:d7:ff:4c:
85:65:82:bc:e0:e5:ce:d8:8c:b9:84:c7:04:b4:b8:
50:5b:20:98:26:8f:cd:38:75:df:f1:30:f5:0d:27:
ac:4a:35:f0:0c:6c:bb:0a:08:2b:89:6d:91:56:4c:
f8:2e:1d:ce:e3:2a:89:0e:76:77:ad:86:d1:32:2b:
40:79:15:70:d2:1c:f2:02:28:f7:6a:0a:e5:c9:49:
30:5e:d2:c1:36:f3:94:dc:a6:de:9f:96:9e:14:80:
c3:5f:64:a1:56:84:c7:8d:52:a9:f8:9b:fe:96:d2:
5d:d8:2c:9c:4a:ea:56:97:c6:46:d3:f8:6a:59:1a:
ac:da:5d:53:c4:fa:7a:49:22:6e:cf:c7:97:f2:5f:
af:27:55:7e:38:15:72:54:dc:f9:ac:01:1f:1d:4c:
e1:4e:fe:ae:ee:c2:f1:75:2f:ac:00:9b:23:97:8e:
bd:84:ac:52:ad:8c:a3:4f:89:93:9a:b6:c8:fc:ef:
e2:e0:d7:66:eb:80:87:63:c0:b7:d6:70:32:07:73:
fb:cd:a3:d3:55:c1:13:21:97:e5:24:73:5e:97:96:
16:e2:f2:19:55:b3:94:8f:f4:af:0c:b0:69:b4:59:
8b:b2:34:05:32:c6:f4:4d:54:47:4e:23:97:42:af:
22:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A8:E1:22:44:6F:F4:B6:9A:DB:3F:4A:80:5E:A0:88:5A:1B:0F:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GKjhIkRv9Laa2z9KgF6giFobD3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:83:c0:45:76:b8:f9:6b:c8:eb:14:50:0d:fb:a7:92:d5:b0:
8b:ca:40:39:3d:39:e4:f9:91:25:d1:1c:66:5b:49:18:e1:3a:
58:3e:a1:ef:c2:1d:1e:7e:ca:d3:65:44:0e:a5:ec:22:fb:f7:
d7:22:7b:68:8e:4c:87:90:8d:cf:29:c5:4e:b6:05:88:a1:a7:
79:ed:da:c7:93:f8:16:30:e2:ef:42:7a:dd:a7:3a:22:f1:19:
d2:98:b9:10:84:17:5d:96:bf:06:eb:21:ff:47:8f:dc:12:2d:
ce:17:e6:c7:fc:f7:4a:eb:7e:89:cb:a6:ce:f9:87:ae:e8:a9:
1d:8b:1b:73:74:c7:ed:40:77:2e:b3:38:29:be:37:8a:85:7d:
04:43:8e:8e:9a:2c:9f:84:54:da:11:d5:ed:f6:c4:8f:4d:ff:
fd:37:1b:67:ae:c3:22:d7:df:b7:21:55:7b:31:e4:28:50:55:
56:3a:fb:be:ac:6c:d4:eb:ac:15:fd:88:33:fe:2e:d8:73:bf:
ec:69:71:1d:67:f6:2a:5a:ad:4e:fa:f7:86:90:d4:c5:c9:8e:
8e:4f:1c:0b:7f:61:f4:dc:7e:56:01:3c:d6:b9:1e:00:f3:d6:
e4:ad:31:56:ae:ef:62:48:96:47:9c:5f:e1:56:b6:ba:82:94:
0d:c4:e6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:47:51 2025 by rpki-client