Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GUL7LYqoMckeLAvwg6t6aYQhvaQ.roa
File: GUL7LYqoMckeLAvwg6t6aYQhvaQ.roa (raw, json)
Hash identifier: poXa8jSJe3fpUZLwEt0rcMwXTDfA+TQL0WzT4BUUVsY=
Subject key identifier: 19:42:FB:2D:8A:A8:31:C9:1E:2C:0B:F0:83:AB:7A:69:84:21:BD:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018564DF6E78F0487921B7CF938FF5B7A58C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GUL7LYqoMckeLAvwg6t6aYQhvaQ.roa
Signing time: Fri 30 Dec 2022 21:10:42 +0000
ROA not before: Fri 30 Dec 2022 21:10:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:64:df:6e:78:f0:48:79:21:b7:cf:93:8f:f5:b7:a5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 30 21:10:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1942fb2d8aa831c91e2c0bf083ab7a698421bda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cb:85:14:63:0c:8b:3a:16:48:2b:7c:0c:ae:
36:0f:30:37:1a:7a:60:04:31:5b:7b:65:a3:91:f7:
b3:61:d7:96:54:42:85:ee:38:09:79:4a:d9:8f:1f:
26:12:ee:22:0e:0a:dc:09:9a:d2:7b:97:4d:d4:81:
1b:25:2b:54:b3:94:06:86:a6:eb:fc:db:8b:3e:05:
88:ff:1b:a0:e0:1c:7e:c4:94:8d:d7:08:9a:9a:28:
ce:7c:98:ca:bf:2c:92:36:6a:0c:72:3c:b5:4e:9b:
91:f3:bc:ab:51:10:3c:34:be:6a:fc:32:c6:3e:ad:
8e:95:bd:66:1f:77:db:6e:af:6b:6c:f1:24:7a:ca:
c2:7e:c7:d5:8f:4c:e4:1d:5a:aa:02:5b:8a:3b:37:
e9:f0:a4:57:88:32:ec:18:8a:29:ff:5f:a9:95:d0:
50:ad:68:93:c1:c1:9b:ef:d2:5f:64:04:65:c5:04:
54:31:f6:f9:30:48:18:dc:c2:9c:08:0e:81:80:79:
c8:e1:30:bf:f0:73:1a:d7:1c:2d:aa:3f:44:23:56:
c1:a9:af:c1:52:40:b6:e6:c9:16:c3:3d:d2:d5:1e:
70:c8:4e:18:fc:15:d8:85:27:7e:16:17:f8:8b:4a:
06:3f:d3:69:98:91:1e:38:87:7d:45:e4:00:9b:da:
ff:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:42:FB:2D:8A:A8:31:C9:1E:2C:0B:F0:83:AB:7A:69:84:21:BD:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GUL7LYqoMckeLAvwg6t6aYQhvaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:29:21:a9:08:d2:f2:19:fe:9f:71:62:36:93:7e:f7:6f:60:
69:5f:7d:b6:02:75:2b:d5:22:73:13:ad:fc:8d:5c:b4:4b:04:
dd:fb:d9:f7:c0:37:8f:f7:26:e3:42:cb:f3:eb:a1:b7:a5:7b:
89:fe:bf:0b:5f:c3:26:1d:45:f7:6a:83:ea:77:73:86:ef:fe:
4f:9f:cb:02:ee:d9:ae:7e:1c:e6:0a:c1:48:20:1e:3a:64:63:
99:c9:9f:e5:22:93:4b:df:b6:d1:16:64:df:d6:7b:ac:47:07:
d3:3b:88:16:ce:d6:67:a0:4e:4f:cc:a5:51:e7:49:28:b5:86:
c5:03:6d:40:d9:c0:e2:cc:d0:b5:92:7d:26:a8:30:9b:18:e9:
bc:a3:28:78:0c:db:8a:9c:9a:1c:42:5f:2d:f8:20:89:e5:81:
cf:0c:5a:9d:61:bc:8b:29:9f:dc:45:f8:73:bb:6d:5d:e2:fc:
9a:25:d8:17:24:7a:39:11:83:e4:30:9f:53:26:94:e0:e6:3b:
d6:e2:d3:37:b2:c2:36:16:89:c5:42:5c:fe:14:87:e0:c6:07:
5d:fd:68:61:bf:67:d8:1c:e8:f6:d0:bd:f6:9e:60:6c:47:e3:
aa:02:a5:b1:cb:02:f5:c7:53:45:20:8e:fd:73:71:88:4b:52:
b6:06:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:56:12 2025 by rpki-client