Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GUWNiDwCmK_uZth1-4d0B_3lzWY.roa
File: GUWNiDwCmK_uZth1-4d0B_3lzWY.roa (raw, json)
Hash identifier: xpjrkaRuEaV/VH2xXyJ1h8127vh/ijPjJE2yctLglyQ=
Subject key identifier: 19:45:8D:88:3C:02:98:AF:EE:66:D8:75:FB:87:74:07:FD:E5:CD:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187416D4C0B8E7EA1DF5D786F3E845B191E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GUWNiDwCmK_uZth1-4d0B_3lzWY.roa
Signing time: Sun 02 Apr 2023 10:04:54 +0000
ROA not before: Sun 02 Apr 2023 10:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:416c:f422/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:41:6d:4c:0b:8e:7e:a1:df:5d:78:6f:3e:84:5b:19:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 10:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19458d883c0298afee66d875fb877407fde5cd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:20:72:8f:c5:d6:32:c7:de:f4:c8:79:c5:
56:0f:c3:19:a5:a8:e0:e4:d2:a2:5d:89:11:23:48:
a4:5c:52:33:5b:c9:8a:b2:ff:2f:80:dd:1b:36:a4:
2c:22:a7:e3:39:8d:3d:fd:66:22:1d:12:d2:98:b6:
c6:78:2b:21:57:02:95:0f:ca:18:f6:87:a1:68:70:
b8:22:64:ff:90:cc:67:db:89:50:92:38:09:ce:7b:
0a:d2:00:04:1a:88:1a:44:17:2e:d9:c2:82:b0:82:
b8:c6:19:26:2b:40:ea:ec:16:b7:1d:9a:e4:c6:53:
0d:35:45:e0:a2:30:7b:56:29:9f:e3:c0:d0:66:17:
b3:6e:c3:dc:e9:70:d2:eb:b7:ac:02:c9:5c:37:04:
ec:43:c0:27:d1:7c:4b:4a:7a:01:60:5e:75:cb:ce:
6a:a6:21:2d:51:7b:76:c7:99:53:fd:b0:94:11:04:
98:ad:09:80:52:c6:e6:db:7a:a7:c0:84:ef:25:3d:
22:bf:9b:29:c3:b0:36:60:e9:89:01:2c:9a:fb:a1:
1d:74:73:7c:9b:9f:2e:59:3b:cb:95:e1:d2:67:30:
9c:26:a2:6d:7a:53:be:7a:87:e2:25:e3:e6:38:94:
09:b1:c2:de:bf:3c:27:d8:87:f9:04:52:67:07:40:
25:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:45:8D:88:3C:02:98:AF:EE:66:D8:75:FB:87:74:07:FD:E5:CD:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GUWNiDwCmK_uZth1-4d0B_3lzWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:45:4e:d2:68:b7:88:0d:9d:6e:87:c9:57:87:c5:4a:a6:a0:
ef:5d:7c:6f:09:52:a1:64:3b:98:45:d8:f0:a3:50:4b:04:62:
28:a7:a9:10:2e:ea:0c:68:47:e8:06:b0:9a:56:01:4b:cc:54:
76:12:f4:73:07:0e:b5:0d:77:8b:eb:b6:50:77:ad:e2:92:b8:
13:b7:30:1e:06:cc:bf:3e:ca:47:d5:88:ac:4f:f5:5c:c1:94:
17:0e:98:26:10:44:4a:5e:91:ca:3f:7f:7a:34:31:ce:f7:5d:
2c:43:2e:95:8b:5c:44:e4:cc:0f:f1:69:4e:58:4d:36:e8:7b:
01:4d:05:c6:3e:8c:ca:af:f4:01:b3:5a:38:f8:fd:d6:04:10:
83:f6:25:1e:d6:3e:3d:29:c0:43:43:87:69:0a:75:41:35:04:
c4:20:a6:a9:7f:34:b0:07:97:80:79:9f:f2:b7:a6:9e:1d:96:
53:07:98:d0:36:09:d5:38:fd:db:d1:6a:97:b9:d0:af:17:a7:
b0:05:22:f3:eb:9f:d6:7e:98:13:2c:5b:de:7a:b7:82:f4:ea:
37:7e:be:c4:66:19:80:fb:38:83:aa:2a:91:be:59:23:3b:7b:
ed:a8:65:c9:13:3e:91:20:9d:3b:e4:68:9d:d8:8a:91:c8:5b:
bb:f5:4d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:12:01 2025 by rpki-client