Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GYQUhaHYG2_wYuvM2GYAh9-x7Cw.roa
File: GYQUhaHYG2_wYuvM2GYAh9-x7Cw.roa (raw, json)
Hash identifier: Ph99Jc71CY7WTuRJ+6fVIc19jkpg1teVTbVCLXJeAa4=
Subject key identifier: 19:84:14:85:A1:D8:1B:6F:F0:62:EB:CC:D8:66:00:87:DF:B1:EC:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018305A155A9638AFA4D34F1518A6BF83773
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GYQUhaHYG2_wYuvM2GYAh9-x7Cw.roa
Signing time: Sat 03 Sep 2022 23:13:22 +0000
ROA not before: Sat 03 Sep 2022 23:13:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:05:a1:55:a9:63:8a:fa:4d:34:f1:51:8a:6b:f8:37:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 3 23:13:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19841485a1d81b6ff062ebccd8660087dfb1ec2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:a7:b9:87:6b:a5:2e:5d:b6:11:a2:11:5a:
a9:c8:1c:16:a1:69:bd:3a:77:0b:d8:b6:68:6a:13:
24:88:a4:c0:25:c7:76:0f:63:37:5a:2c:ba:60:af:
a3:2b:86:6c:86:e1:31:be:93:80:7e:f4:c5:2e:ce:
d5:2c:08:a9:69:9b:13:52:91:ad:05:6b:7e:37:27:
b2:04:af:27:02:ff:5b:a8:8f:6a:dd:4b:81:fc:46:
38:b1:59:cd:da:91:83:35:59:af:cf:bb:b2:8d:22:
24:c0:59:c7:df:6a:f4:d6:70:28:9f:ba:90:e6:33:
d0:10:bd:b7:95:40:b1:e3:df:65:51:28:3e:ed:9e:
8f:08:e1:21:ec:13:ca:cd:42:15:97:c6:d2:65:6b:
19:21:64:b0:b9:27:6b:ba:ba:c3:d4:d7:a8:c8:8c:
6a:01:3a:b5:dd:f9:a0:65:0d:d5:56:e9:0c:8b:e6:
4f:93:91:0b:70:bb:7e:cb:b5:db:19:a3:6b:99:51:
bf:dd:b3:0b:8c:68:5d:0b:cf:88:f5:21:26:e7:91:
e2:4a:8c:40:5f:1c:2e:46:f1:af:9b:96:71:dc:43:
e0:11:7c:04:ad:4f:af:71:ae:c1:39:95:51:3e:77:
fd:10:24:6d:16:c9:5a:2b:e6:f8:bf:e9:0d:32:a1:
1e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:84:14:85:A1:D8:1B:6F:F0:62:EB:CC:D8:66:00:87:DF:B1:EC:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GYQUhaHYG2_wYuvM2GYAh9-x7Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:ea:94:ff:28:7e:66:82:31:50:7d:24:18:98:58:14:1d:dc:
68:b2:70:b8:83:0d:06:28:8b:cc:d2:74:5a:01:38:1a:49:ea:
48:b5:08:bd:61:9c:44:30:58:73:53:a7:17:c9:98:e0:0c:6d:
85:d5:c7:5f:b2:7d:fb:9a:ff:b3:45:fb:a0:85:8c:5f:50:ea:
05:6d:6d:bb:ed:fc:aa:12:50:7c:86:07:a6:f1:85:41:c9:29:
f5:1c:13:9e:f1:e3:ca:a4:db:2e:66:7e:03:76:99:f8:49:40:
87:f7:cf:75:06:56:44:e1:af:2b:7b:a4:9c:d3:24:3d:12:ef:
bd:9d:37:bd:df:f7:1c:37:3e:b3:c2:a1:e7:65:94:fd:55:2e:
72:b5:dc:6c:3c:e1:11:37:ea:fc:bc:85:a5:08:82:8a:6b:ae:
87:49:e5:31:a4:1f:00:85:ca:06:9e:4a:3e:31:02:45:ea:5d:
af:9b:2c:ce:fa:fb:6b:70:c9:f3:3d:23:88:dd:12:e1:0c:d4:
31:8b:d1:e1:fe:71:01:39:97:9f:51:c9:53:6f:8e:d1:9b:42:
65:2e:1d:26:77:58:0c:85:67:29:f0:55:6a:16:1c:21:2a:b1:
91:e6:e6:be:6d:41:03:8c:7c:3f:31:05:90:a3:e1:a0:8a:1b:
39:20:76:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:17 2025 by rpki-client