Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GRGEExLoBHppTgbtoIXQYNflFuA.roa
File: GRGEExLoBHppTgbtoIXQYNflFuA.roa (raw, json)
Hash identifier: kE6uBpvGQ7BakQ3TBnj3YhDdR6D03qXsx7sjMc5qpXQ=
Subject key identifier: 19:11:84:13:12:E8:04:7A:69:4E:06:ED:A0:85:D0:60:D7:E5:16:E0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C41E2151BBF15A53A73F8D4F3F09187A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GRGEExLoBHppTgbtoIXQYNflFuA.roa
Signing time: Thu 27 Apr 2023 19:08:41 +0000
ROA not before: Thu 27 Apr 2023 19:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c4:1e:21:51:bb:f1:5a:53:a7:3f:8d:4f:3f:09:18:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 27 19:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1911841312e8047a694e06eda085d060d7e516e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e0:bd:80:c5:9f:43:7b:f3:1d:2d:ba:7b:8e:
b2:49:61:1c:94:ed:7e:fe:9c:06:3f:c4:b1:d3:fa:
3d:9b:09:bb:c9:d2:3b:4f:56:5b:36:20:04:2d:78:
1a:db:eb:70:1e:94:86:41:6e:77:6d:59:b7:07:50:
3d:60:b9:aa:a7:bd:a5:cd:fd:01:99:e3:9e:e1:2f:
07:4b:6b:17:78:c0:98:4d:8a:96:e3:c4:cd:12:7e:
02:ca:85:b8:b5:bf:64:c9:9e:15:13:cd:90:5a:2d:
65:06:f0:41:4b:62:32:e4:08:6f:36:65:33:60:ad:
f0:06:06:71:d8:a0:d4:13:a8:e6:f6:4b:6e:95:90:
48:42:04:94:f7:98:86:6c:39:28:a7:e5:e6:9b:b0:
6a:29:e9:da:49:90:08:7a:b8:99:9e:6f:cb:67:5c:
93:17:df:91:c4:7f:fa:03:ab:68:77:fe:7b:24:65:
43:2e:98:97:e6:b6:e2:a7:58:35:21:84:e2:b1:79:
ac:00:13:da:4e:b6:77:bc:b2:be:10:d3:58:1a:c8:
1c:16:d2:dd:a4:27:e9:83:c4:19:40:e1:fd:70:ce:
ee:99:bf:ea:49:4b:db:6d:f0:24:62:57:6d:af:c8:
fe:af:68:12:71:e7:f3:98:33:91:73:d7:e2:fe:36:
1b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:11:84:13:12:E8:04:7A:69:4E:06:ED:A0:85:D0:60:D7:E5:16:E0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GRGEExLoBHppTgbtoIXQYNflFuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:38:74:1a:1b:4a:66:68:5a:80:2e:25:83:db:85:d4:a8:d6:
67:50:8b:77:e2:6f:08:74:8f:f3:bb:49:df:8c:c2:f8:fe:97:
ee:cc:35:0b:87:ef:45:48:08:c9:c4:3e:77:d5:4f:b5:6c:23:
f9:cf:50:a4:06:45:a4:92:8b:a3:b8:67:6b:df:d0:d8:31:d6:
90:2c:ab:83:fc:61:3f:a5:58:a1:ac:85:48:20:84:be:fe:40:
b0:3e:5a:2f:da:a9:b4:32:ed:fe:ce:2e:bf:8f:76:de:59:4a:
1c:ef:2d:43:22:28:cb:ba:d0:9f:a3:bd:04:94:fb:db:65:d4:
7f:eb:55:a4:72:53:b1:87:6a:d5:cb:1a:e0:70:b7:81:9c:84:
c1:b7:0a:08:9b:b5:f9:1d:91:1d:bc:d0:d9:4a:7e:d3:aa:93:
93:05:c5:30:59:b7:7e:a1:f7:44:c1:5f:f6:cb:f4:fc:77:b7:
8a:1a:42:5a:99:92:47:10:8f:1b:61:31:d6:9d:84:f9:fe:b5:
6a:30:50:9a:5c:56:cd:3e:cd:d5:aa:b4:08:1c:53:c7:f3:49:
7f:8a:f0:05:83:52:8d:c7:d7:0a:26:c4:6a:9c:48:d9:f4:12:
a2:a5:c4:ad:4b:1a:85:31:42:b2:23:2e:8e:a2:15:5c:df:83:
b2:32:22:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:39 2025 by rpki-client