Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GLB6NKkT1FlMbjE88RfEXMlmC9I.roa
File: GLB6NKkT1FlMbjE88RfEXMlmC9I.roa (raw, json)
Hash identifier: VGLgQxBsFiJy7Cm24lfuTryDBJ5EtuVUocXBQyYGYmU=
Subject key identifier: 18:B0:7A:34:A9:13:D4:59:4C:6E:31:3C:F1:17:C4:5C:C9:66:0B:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185462F47566A40CD652D34C6C6F50EFE36
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GLB6NKkT1FlMbjE88RfEXMlmC9I.roa
Signing time: Sat 24 Dec 2022 22:09:41 +0000
ROA not before: Sat 24 Dec 2022 22:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:46:2f:47:56:6a:40:cd:65:2d:34:c6:c6:f5:0e:fe:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 24 22:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18b07a34a913d4594c6e313cf117c45cc9660bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:9e:34:d4:a0:82:17:06:b6:c4:0b:93:a4:
10:14:7f:25:ba:1f:4f:59:77:12:6a:fc:4e:2b:73:
ca:2e:18:b0:1b:fa:ed:f0:84:21:c9:15:12:4c:73:
24:a9:89:b1:58:05:dd:ed:01:91:85:8c:e8:fe:e1:
f4:23:ec:d8:99:66:c2:cd:e0:10:c9:e8:f3:36:59:
36:7c:af:c3:e6:9b:21:61:1f:1f:79:ae:d7:38:1f:
9d:89:95:0b:7a:07:99:3f:d2:1f:eb:ea:c8:67:8a:
ca:f8:37:b6:8d:60:82:75:4f:df:54:bc:8c:0b:e8:
c8:9e:15:9d:15:55:0f:28:25:df:07:7c:80:13:11:
4b:3e:a8:81:42:81:59:69:24:b4:29:8b:95:1d:a8:
dc:74:37:d7:41:78:6d:83:fb:a5:ee:18:cb:c9:dc:
13:3a:27:05:29:d7:ed:cd:3f:05:20:30:a7:86:83:
fa:12:a5:f2:8e:71:3b:ac:42:84:e5:00:76:74:d0:
4a:5f:24:75:f8:14:6c:de:d8:76:16:4c:cb:87:93:
47:57:a9:eb:fa:c6:1c:c5:04:91:9a:77:12:a6:50:
c3:15:7d:9d:97:9e:88:17:46:82:7b:2a:48:eb:69:
96:f6:af:82:bb:06:7b:85:2a:c3:36:27:d7:01:14:
97:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B0:7A:34:A9:13:D4:59:4C:6E:31:3C:F1:17:C4:5C:C9:66:0B:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GLB6NKkT1FlMbjE88RfEXMlmC9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:4a:72:9c:da:8b:85:b7:16:61:c0:a6:6c:da:2d:3f:6b:2e:
84:8e:ea:03:36:bd:37:69:23:ac:f1:dd:e6:b6:6b:4f:c8:aa:
4b:6c:80:c5:79:f8:c1:63:6c:9a:8a:df:a5:66:f1:43:b5:d3:
b6:27:35:4b:37:33:61:18:ad:b7:14:2f:b7:2a:06:d7:96:09:
10:b2:d3:16:56:99:18:95:9e:6e:21:6c:df:a4:1b:53:e3:2d:
8f:02:6d:a8:18:46:e4:ae:72:ef:70:14:3b:41:8a:28:b9:81:
67:53:6b:8d:25:3e:f9:d9:f4:19:a9:4c:46:73:aa:a8:fc:b3:
99:13:dc:56:40:58:1c:ea:96:dd:61:07:58:0a:96:f6:97:eb:
8c:63:8e:59:34:6e:c8:54:10:4a:86:2a:8a:2e:9b:ae:5a:57:
99:0d:da:74:aa:9e:43:48:e5:46:c7:63:eb:df:24:f2:42:52:
a0:95:3a:1a:bc:30:3b:5a:ad:86:1b:fc:c7:03:ef:44:b2:9e:
5d:27:e3:ef:6b:45:c1:6b:ca:71:43:1e:6b:d0:ad:65:dd:90:
f2:00:34:f0:24:cb:c4:24:3b:7f:2b:94:85:df:9e:19:28:32:
52:9c:74:4e:ab:78:64:5e:21:21:c1:c0:5e:a1:76:db:18:06:
74:6a:65:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:02:54 2025 by rpki-client