Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GTB4q5OnfpWoCcjhoUxfJWayZgU.roa
File: GTB4q5OnfpWoCcjhoUxfJWayZgU.roa (raw, json)
Hash identifier: 2t2AlAMel3DjVPWPsJqM/XMP0Ay39+y5/jfBDjcRV08=
Subject key identifier: 19:30:78:AB:93:A7:7E:95:A8:09:C8:E1:A1:4C:5F:25:66:B2:66:05
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018696DE7172B3C8BD26FE483D39D0A63292
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GTB4q5OnfpWoCcjhoUxfJWayZgU.roa
Signing time: Tue 28 Feb 2023 07:13:25 +0000
ROA not before: Tue 28 Feb 2023 07:13:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:96:de:71:72:b3:c8:bd:26:fe:48:3d:39:d0:a6:32:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 07:13:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=193078ab93a77e95a809c8e1a14c5f2566b26605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1c:b5:70:6a:4e:cf:d7:c1:f2:29:59:8d:26:
b5:99:da:4b:08:99:3f:42:96:1e:ea:5a:8c:0e:02:
19:fb:67:b4:35:97:c4:1d:30:ad:82:aa:e0:f9:cd:
71:56:f0:c0:c3:80:44:52:b8:39:c5:20:d4:b2:0a:
d8:b4:7d:87:6d:59:12:18:24:1f:a2:af:92:6b:fb:
60:a2:7b:08:5e:ec:24:87:a6:9b:ba:da:4e:50:7a:
15:72:97:ad:58:7a:c1:df:91:7d:8a:76:f2:e5:2d:
aa:80:71:0f:50:40:41:ec:67:9e:60:a1:71:d8:cc:
a6:96:b7:a4:32:95:a7:a7:81:78:51:32:84:25:39:
98:29:a6:8e:e2:bc:e8:11:56:f8:41:21:df:33:29:
69:73:81:1c:c3:14:9a:51:87:0c:fd:2c:d3:d8:ef:
35:b0:33:f6:6c:4f:90:f2:3b:e2:28:41:74:fc:13:
60:71:84:d8:be:aa:35:47:26:77:26:3a:b7:b2:a5:
5f:ca:bf:3a:44:6c:76:b2:b2:2e:82:d2:2b:2f:e2:
cb:6e:0c:b7:dc:c6:54:67:3b:64:e0:d8:c8:6b:e9:
a4:e3:77:08:87:30:58:da:0a:63:68:2f:2c:33:f1:
b8:05:c5:fc:cc:ad:28:e4:32:35:1a:2b:2e:71:77:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:30:78:AB:93:A7:7E:95:A8:09:C8:E1:A1:4C:5F:25:66:B2:66:05
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GTB4q5OnfpWoCcjhoUxfJWayZgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:5a:40:fc:d4:7f:aa:6f:51:84:31:d7:fe:c0:c7:53:ce:e4:
1e:e4:2d:2d:53:4f:c4:68:0b:0f:c5:9c:ac:ef:85:59:4c:38:
81:7e:c6:cb:59:06:df:b9:45:dc:b1:f6:10:19:5f:3b:e8:ce:
0c:5e:26:65:42:5a:f8:cb:88:eb:b7:d5:b5:c7:a9:f0:db:a2:
21:49:23:bd:52:07:c3:04:5d:87:85:81:5b:01:d7:6b:af:86:
cd:94:c3:81:90:f8:0b:ae:57:d1:36:b6:20:f0:c0:d0:a5:1c:
d3:a5:15:f9:0d:5a:c4:21:75:56:c8:fb:d8:4d:ce:77:c4:d7:
fd:8a:88:81:90:18:c7:78:5b:0d:3c:b5:db:9e:d0:7f:c6:fb:
29:03:57:a6:e4:3f:a3:12:5f:0b:dc:aa:c2:91:4e:4a:84:81:
ca:fe:4d:f1:39:37:fe:5d:96:d8:ca:74:cc:22:a0:0c:9a:9b:
b1:9a:2e:55:a5:7e:56:e1:6e:d0:d4:58:94:84:e2:7d:5d:41:
5d:5a:f8:ce:e3:50:dc:9a:d5:77:7d:c2:a9:f0:dc:21:e8:9e:
5e:e9:8d:80:77:41:03:95:d8:b0:77:6c:fb:38:c3:e2:09:6c:
39:45:ce:55:1f:3f:11:ba:d4:d4:93:3e:75:58:9e:de:ed:08:
5d:6d:4b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:15:55 2025 by rpki-client