Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GUlueUnA9ZuShIXEG1rP1UXH6_k.roa
File: GUlueUnA9ZuShIXEG1rP1UXH6_k.roa (raw, json)
Hash identifier: Mjl8QdyD8U8sy+SP3JrYWDmu32v41k0k1toHuxuuoXI=
Subject key identifier: 19:49:6E:79:49:C0:F5:9B:92:84:85:C4:1B:5A:CF:D5:45:C7:EB:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B284EAABC522CCA6C8BF542573ABD9E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GUlueUnA9ZuShIXEG1rP1UXH6_k.roa
Signing time: Sun 05 Mar 2023 16:05:00 +0000
ROA not before: Sun 05 Mar 2023 16:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:b284:35e7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b2:84:ea:ab:c5:22:cc:a6:c8:bf:54:25:73:ab:d9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 16:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19496e7949c0f59b928485c41b5acfd545c7ebf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:59:fa:82:e3:cf:2f:ed:7e:28:50:b7:f0:c2:
5d:c6:95:7c:b1:b3:08:a1:47:f8:a9:da:0b:3e:e7:
73:40:66:2f:c9:61:44:4c:fc:3c:30:06:c5:c3:d7:
1e:66:f2:39:99:8f:82:40:d1:e0:af:07:bf:f8:67:
96:21:3e:6d:65:cd:86:49:00:50:a1:52:a9:30:0c:
7c:8a:03:f5:fb:3a:87:4a:e6:ec:ba:91:a6:61:41:
a3:f9:1f:01:f0:02:f1:d6:4e:d5:31:4f:b2:a8:c1:
14:8f:5e:8f:6e:0f:e2:cd:1f:de:f7:21:12:68:bd:
80:41:21:d7:e0:92:d8:af:7b:09:a9:2c:cd:ac:44:
a8:a0:eb:59:d9:be:35:70:7a:bc:41:d6:34:4d:69:
c0:15:69:31:7d:1c:4c:2b:43:a6:28:b5:78:d8:ed:
90:40:cd:f4:18:a7:b6:a3:31:b9:e4:5c:de:47:56:
d5:6b:bf:d3:ac:f5:c4:93:2b:2f:23:a5:92:91:de:
82:83:b3:dc:17:33:aa:b2:7a:6f:0d:6a:97:ae:c1:
57:c3:39:09:db:5d:e7:e4:c8:3e:df:44:fc:57:29:
77:01:c4:26:55:35:38:aa:f3:3e:24:c2:88:3b:b2:
96:cb:99:05:60:1f:c1:37:d7:7a:0e:fe:28:65:06:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:49:6E:79:49:C0:F5:9B:92:84:85:C4:1B:5A:CF:D5:45:C7:EB:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GUlueUnA9ZuShIXEG1rP1UXH6_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:12:ad:e8:09:3d:61:20:74:fa:90:61:49:a1:89:8f:2e:ab:
b3:0e:cd:60:35:9c:ca:42:8a:00:93:57:ad:a0:60:3f:ec:58:
b7:f7:46:38:04:84:83:58:1a:3f:9a:f7:78:0c:8a:71:4f:9c:
5a:d4:71:b8:5e:0a:2a:a2:9a:78:80:ab:62:b9:43:16:a1:ca:
bf:45:e6:15:6e:2d:d7:b9:36:f5:25:af:f7:f3:a8:1e:d5:e1:
ad:95:95:d4:d9:10:b6:d2:03:e4:c1:82:de:99:87:1a:22:15:
5a:5a:e9:0b:f3:34:4d:7b:11:3b:9f:fa:9b:4a:09:65:3a:f5:
81:a2:a6:4b:5e:3b:53:e5:db:b7:51:2a:e2:f7:2e:72:b3:0e:
b7:a2:bd:0b:74:40:4a:0c:57:3f:95:7a:55:63:d6:38:14:c2:
77:d3:20:a2:09:55:4a:41:a5:d9:ad:4e:4c:78:69:5c:f0:b6:
b7:f2:95:97:60:fe:c1:30:9e:65:21:fe:94:b3:77:fc:65:fe:
b9:77:fe:8c:6d:73:c8:07:74:59:6c:30:ec:2f:af:27:a7:67:
a2:90:c2:40:c0:73:01:8e:9a:cc:35:57:4c:ac:b7:be:a6:55:
11:63:ab:9b:19:aa:6f:6a:13:ab:6c:31:36:b3:b6:a2:b9:ed:
db:6f:10:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:35:56 2025 by rpki-client