Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GM4S2KuksIlTPMAshpr82Azx8bc.roa
File: GM4S2KuksIlTPMAshpr82Azx8bc.roa (raw, json)
Hash identifier: q5vNKTGJoLCoa7Z+BETfRrIzyNi2kEs6k0vAQ3ZE5BI=
Subject key identifier: 18:CE:12:D8:AB:A4:B0:89:53:3C:C0:2C:86:9A:FC:D8:0C:F1:F1:B7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E29C60E84DA3E2E7EA99AA9ED3CAB4BE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GM4S2KuksIlTPMAshpr82Azx8bc.roa
Signing time: Tue 24 Jan 2023 07:09:37 +0000
ROA not before: Tue 24 Jan 2023 07:09:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e2:9c:60:e8:4d:a3:e2:e7:ea:99:aa:9e:d3:ca:b4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 24 07:09:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18ce12d8aba4b089533cc02c869afcd80cf1f1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:2f:2c:de:ad:2a:0f:2a:7f:d8:58:4f:10:
4a:c2:4b:2c:e6:be:0d:63:be:b8:e3:50:07:43:b5:
08:99:54:12:bf:52:19:d3:f1:ae:bc:8e:92:dd:a1:
c0:b1:3c:13:da:24:a3:3d:ca:28:d3:f2:ad:ee:92:
a3:a7:64:c8:66:db:b3:c7:46:e0:18:50:35:03:5f:
b5:2f:e5:84:30:e5:41:00:a8:a0:a8:b1:8d:af:c2:
ea:8b:97:80:f4:e7:73:7b:01:a7:f0:6e:77:90:bc:
56:e2:24:7d:b4:5a:7b:cd:aa:19:51:c3:a1:20:63:
38:cc:13:20:8c:ac:dd:80:35:1e:6a:6c:8f:e8:42:
80:be:3b:f8:20:42:1e:8b:9c:87:88:30:41:8b:65:
37:d4:21:ab:6f:30:72:44:96:cc:9a:0f:5f:8b:0d:
bd:b6:c1:80:90:79:19:01:34:01:f8:c1:5f:06:72:
11:e3:ba:ad:b2:a9:af:b3:c7:75:c2:56:d0:1f:ee:
7e:f1:a8:b0:60:9a:1f:57:b8:cc:99:0a:cc:72:e0:
56:36:a1:84:d9:39:44:b9:3d:ff:65:25:fd:c6:9b:
d4:67:d8:a4:50:a6:ce:51:52:9e:b0:4e:fb:35:03:
ce:2a:74:2f:1d:09:81:76:d0:1b:ca:44:fa:fb:61:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CE:12:D8:AB:A4:B0:89:53:3C:C0:2C:86:9A:FC:D8:0C:F1:F1:B7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GM4S2KuksIlTPMAshpr82Azx8bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:4d:9f:b8:72:bf:15:be:41:ca:dd:49:d3:01:80:50:fb:23:
91:04:1a:b2:4e:6c:b3:90:23:5a:33:a6:ef:14:e2:79:aa:b3:
10:16:07:92:e6:d8:bd:72:cc:5c:02:b2:bc:e2:ac:c4:57:4f:
6b:ca:57:ff:45:1e:32:09:19:a0:56:9f:54:6e:05:d8:1a:72:
1b:13:84:1b:c5:32:dd:e9:14:45:0a:fd:5d:a7:df:7c:78:ce:
b6:06:76:ad:dd:3d:05:c7:38:43:2e:07:f7:eb:d6:ed:be:68:
70:f7:ca:e9:d2:42:37:86:bd:84:1c:29:b0:d4:52:66:a8:df:
cc:41:76:fd:92:59:82:7f:0e:83:00:bd:84:37:7a:ff:f9:3b:
cd:b8:08:56:cb:07:79:51:30:ac:9b:bc:c3:13:5a:92:56:3e:
97:1a:5f:dd:f3:a1:95:9a:9a:97:31:cc:af:72:4c:28:93:b3:
6b:f4:76:46:f6:ef:e2:30:9b:4a:73:e4:fc:1f:10:3f:ec:8a:
2d:00:2b:c2:ee:52:3c:22:0a:ce:d6:cf:91:34:31:61:40:26:
ea:59:c9:0e:8f:b3:bc:7e:47:cd:20:32:bf:45:a5:34:82:42:
de:75:3e:21:50:6d:73:dd:dc:2f:ca:d1:46:30:38:1e:7c:fb:
02:45:de:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:18 2025 by rpki-client