Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GL5_fud1bRqpLJM34Gf2SsjfXpE.roa
File: GL5_fud1bRqpLJM34Gf2SsjfXpE.roa (raw, json)
Hash identifier: u7v8OditL1TvW3Mmw61JuuO9SvVvrM3qenDRJ7Q2OS8=
Subject key identifier: 18:BE:7F:7E:E7:75:6D:1A:A9:2C:93:37:E0:67:F6:4A:C8:DF:5E:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E86B5B430F518384AB2400E6B2DF9134
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GL5_fud1bRqpLJM34Gf2SsjfXpE.roa
Signing time: Tue 06 Dec 2022 17:11:00 +0000
ROA not before: Tue 06 Dec 2022 17:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e8:6b:5b:43:0f:51:83:84:ab:24:00:e6:b2:df:91:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 17:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18be7f7ee7756d1aa92c9337e067f64ac8df5e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f7:2b:e2:d2:8b:9f:e7:09:d4:02:a6:df:88:
9e:07:05:c0:1e:30:63:ec:d9:33:55:2c:ba:e2:c2:
0d:ff:b6:c7:a8:6c:4a:5f:ed:21:d9:31:22:28:ea:
97:68:19:bc:5a:ef:66:a2:cb:74:cb:09:8d:e0:34:
69:90:33:67:f5:b8:9e:5a:86:17:35:a4:11:f0:ff:
e5:f0:9d:8e:3d:04:25:2a:74:ee:df:b3:52:23:23:
b2:52:df:a2:80:be:23:62:c7:43:7a:4b:05:d9:11:
3b:1a:20:10:47:6e:f2:bc:7d:1c:3e:00:72:c6:3e:
d6:e2:a4:4a:ae:1d:86:07:bc:b0:3a:c2:64:d0:46:
61:37:03:8d:29:3f:57:4f:ab:67:5b:c6:6d:da:9d:
2b:db:7f:d2:1c:bf:d5:c2:2c:cf:08:08:a5:9c:fa:
85:7a:28:69:c2:2b:f0:8c:e7:d1:f5:f1:d4:27:60:
15:29:79:fc:97:31:b3:9c:31:b2:88:f6:bb:4a:a0:
1b:db:9a:42:03:4a:f9:bc:94:00:96:6b:38:85:42:
69:24:aa:8a:92:e6:fe:f1:19:87:36:61:f7:83:f7:
d4:48:b0:c4:71:4a:ac:bf:c4:eb:05:79:c5:d0:5e:
09:a8:00:42:be:21:e9:73:0e:be:9f:28:8d:48:fa:
5e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BE:7F:7E:E7:75:6D:1A:A9:2C:93:37:E0:67:F6:4A:C8:DF:5E:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GL5_fud1bRqpLJM34Gf2SsjfXpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:99:34:48:d2:46:a1:28:32:d3:ac:89:b4:0c:a4:89:bc:cc:
5a:d4:7d:f7:b9:76:98:10:be:93:1f:5a:46:b4:5f:be:5a:37:
31:a3:d5:78:99:93:3c:26:fa:a4:6e:ed:dd:86:9d:53:3e:d5:
f3:48:ad:2d:af:23:c1:66:4f:40:ac:b0:fe:f4:5b:79:cc:51:
cb:86:e5:9e:14:34:7f:3b:38:49:88:6e:0b:ec:b5:a5:48:5f:
8a:f9:ae:d8:64:c9:c9:4f:f4:e4:b4:e4:69:4f:0a:02:f8:0d:
92:4e:29:19:0e:1b:ad:51:58:45:f2:3e:a6:7c:90:05:39:d5:
b6:a3:59:cf:5a:8e:a6:bd:a7:b5:dc:49:06:ba:19:45:d0:30:
be:3a:ce:7a:a7:e5:1c:bc:0a:46:9f:1b:c8:de:a5:07:2a:69:
01:59:dc:2e:e6:11:b1:9f:4c:98:03:c3:40:c9:05:bc:19:97:
ca:94:ba:c2:3f:39:aa:63:b0:50:e8:e0:e6:94:50:ef:3a:9a:
68:3d:55:e4:21:ee:0b:1d:a2:5f:9e:55:cb:39:ef:f6:e6:57:
fc:c1:b6:ce:f1:b4:17:77:0b:30:8f:7d:fd:2e:b0:a2:db:8c:
d6:92:73:50:a0:94:c5:19:d2:5c:a9:d6:c1:60:55:ea:33:55:
94:d4:1c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:14:50 2025 by rpki-client