Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GXuPOaWXrotPi0uje0iSBzmcmhA.roa
File: GXuPOaWXrotPi0uje0iSBzmcmhA.roa (raw, json)
Hash identifier: bWcw2Y5TbidmX8Axj3t/2Di48yB/3E4giLJqJgUJwhQ=
Subject key identifier: 19:7B:8F:39:A5:97:AE:8B:4F:8B:4B:A3:7B:48:92:07:39:9C:9A:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B08E5CB16B8F2A7E600D5FB91566134B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GXuPOaWXrotPi0uje0iSBzmcmhA.roa
Signing time: Tue 01 Aug 2023 10:04:27 +0000
ROA not before: Tue 01 Aug 2023 10:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:b08e:36b1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:8e:5c:b1:6b:8f:2a:7e:60:0d:5f:b9:15:66:13:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 10:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=197b8f39a597ae8b4f8b4ba37b489207399c9a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:97:40:f7:c4:c5:e5:ca:37:27:a7:bb:3c:
f7:cc:20:65:a9:d6:11:4b:48:dd:82:e4:e3:c1:1a:
a6:89:fe:75:b9:b5:1b:c3:4a:8d:a1:82:c3:fc:23:
17:2b:f1:b8:ae:8c:a5:cb:bb:6a:bf:53:1a:34:7c:
e0:99:57:dd:40:6f:f5:8c:7c:8d:dc:dc:61:79:9a:
c9:d6:9d:81:59:8a:e6:ff:db:d6:86:0a:f3:5d:f2:
83:ed:58:22:0f:cf:44:17:17:8a:c9:2a:db:35:2e:
7e:bd:3e:b2:c9:71:f4:94:dd:c0:c0:f0:2e:69:01:
70:68:67:b3:88:0e:04:65:4b:d2:a4:22:9a:4e:cc:
d5:bc:16:c6:d9:39:14:65:b5:84:5a:94:6c:0c:ac:
9a:48:f5:24:f7:cb:16:95:c2:2b:db:b0:0b:f3:d5:
c7:95:b8:39:48:ca:7a:22:ea:08:5d:7e:5d:86:f6:
b4:2d:60:32:80:1e:66:77:6d:30:af:88:db:48:34:
4a:a5:0b:59:5e:43:e5:98:a4:e7:e6:79:e8:fc:4b:
9c:b3:9e:a7:28:bc:e5:03:0f:40:ad:db:76:0c:64:
67:e5:f8:06:44:20:62:24:e0:a1:01:e2:25:0a:e6:
47:30:07:fc:55:96:68:4c:43:e0:20:d1:9b:df:f2:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7B:8F:39:A5:97:AE:8B:4F:8B:4B:A3:7B:48:92:07:39:9C:9A:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GXuPOaWXrotPi0uje0iSBzmcmhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:b9:8f:df:1b:84:03:ad:35:ad:fc:c4:3c:6b:fd:0e:d0:1e:
d6:e9:68:21:e2:29:60:87:05:6a:a9:4f:b6:7c:3f:de:0d:f1:
f3:50:21:7c:15:1e:c7:60:04:ad:02:20:2b:ff:ea:a3:85:3f:
16:2a:ad:ec:07:47:88:95:d6:71:0f:8c:aa:ec:da:7e:19:2f:
17:d8:98:aa:52:38:57:54:d9:ba:95:f4:ca:e9:90:21:80:5f:
77:0a:81:9f:89:41:9b:7c:85:d9:0c:4c:6d:6f:bd:ab:f2:fd:
ba:13:40:86:d4:e4:a5:77:ca:4c:04:bd:ce:01:86:f0:ea:e5:
f0:e9:1e:50:29:01:4e:bf:cb:c7:9d:80:c8:9f:0d:52:aa:3c:
65:44:3c:c2:3c:89:56:c6:c0:24:68:ba:c9:ee:de:9f:51:a9:
04:d2:a2:00:de:12:b6:ef:4a:c2:4c:81:7c:11:02:44:9c:f3:
6c:ad:b1:4b:cc:93:62:77:63:9d:f3:3d:ae:af:76:78:00:3d:
d3:e2:71:69:3a:44:b7:4a:16:3f:db:c7:e3:12:26:00:d9:7d:
b1:45:1e:1b:1f:a0:9d:6d:70:2a:13:ec:1b:fe:9c:80:3e:7e:
2e:ca:9a:6a:f8:18:bf:5f:02:af:fb:ca:83:86:5b:25:2d:d0:
f3:c1:2b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:11:42 2025 by rpki-client