Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GYeIjAj6Ro6p-UvVwYGinS8VUK8.roa
File: GYeIjAj6Ro6p-UvVwYGinS8VUK8.roa (raw, json)
Hash identifier: Zh8C2ah9XcD0QdGryLK3gC9UikYHBW8vmG6A9EBDeao=
Subject key identifier: 19:87:88:8C:08:FA:46:8E:A9:F9:4B:D5:C1:81:A2:9D:2F:15:50:AF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8289B82A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GYeIjAj6Ro6p-UvVwYGinS8VUK8.roa
Signing time: Mon 09 May 2022 16:09:28 +0000
ROA not before: Mon 09 May 2022 16:09:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2190063658 (0x8289b82a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 9 16:09:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1987888c08fa468ea9f94bd5c181a29d2f1550af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:62:1c:6a:1f:db:8a:37:4e:e5:54:53:71:
47:bf:79:68:b0:77:82:c1:73:9b:00:34:ee:a5:59:
1c:79:b1:ad:66:a2:c6:45:46:a2:97:50:6d:a7:50:
e7:5b:de:cc:b2:dc:aa:bc:5a:c3:a4:1f:c5:25:e9:
9b:16:06:90:19:b3:47:60:d2:5b:08:7b:af:c1:66:
f8:59:52:f2:aa:ed:2e:ed:d4:95:44:44:80:0c:69:
5e:e7:81:83:ed:da:08:ea:d1:3d:34:21:b5:e4:3a:
4b:11:e6:7d:94:91:c5:c0:60:3c:72:d3:fe:40:bf:
64:d9:fa:e5:79:82:64:2b:c0:5a:6c:f4:49:02:93:
3c:cf:cb:4c:70:5c:41:f9:68:e3:8e:83:95:af:d5:
97:b4:57:7d:5a:5e:a4:d6:6e:13:bb:c8:ad:3e:b6:
2e:57:98:00:4a:7b:21:5b:50:37:1e:33:db:7a:2e:
6e:f6:d3:b0:1e:cb:0c:57:b3:7f:11:d8:b7:84:ad:
90:7f:ab:83:52:7e:aa:e6:d3:ea:6d:e9:f9:bb:de:
93:79:a2:96:9f:a0:4a:7e:2a:72:22:b3:6f:ed:1a:
34:92:0c:b8:10:bb:f8:dd:45:8d:f8:f3:05:fe:6b:
6e:8c:b0:c0:c5:d3:7c:3c:f1:e3:6e:14:32:6e:a5:
14:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:87:88:8C:08:FA:46:8E:A9:F9:4B:D5:C1:81:A2:9D:2F:15:50:AF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GYeIjAj6Ro6p-UvVwYGinS8VUK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:08:36:a5:96:52:f1:60:fc:9f:7d:1b:70:8a:12:b6:a9:ba:
29:6c:a8:82:86:5a:08:9b:a1:e1:c9:a4:6c:0a:7c:5b:d4:6b:
c0:45:e6:2c:73:d6:80:9b:5b:43:2b:b8:08:ce:fa:89:b5:0f:
af:65:c5:b1:9d:37:49:16:6b:27:66:7a:76:a3:87:bf:3e:76:
85:f3:3d:ee:c2:c4:25:04:75:31:4e:cb:fd:3b:9e:16:61:45:
11:37:40:58:ca:f2:a3:97:77:4a:f3:c4:0a:48:0a:6d:54:66:
8c:79:ca:44:5e:1b:e2:ec:02:6e:f4:68:eb:6d:b1:f2:af:a8:
83:5b:96:81:15:53:05:e8:a5:e8:51:51:67:77:df:e6:5a:88:
47:75:ae:d4:e6:7c:1a:3f:75:81:93:bb:6a:2a:f3:2e:fe:6f:
b8:55:69:6a:48:e0:bd:e1:bc:50:0c:38:e7:07:27:4b:5a:aa:
bf:85:d4:c4:ac:54:64:1e:00:f0:f0:21:f7:dd:fd:fa:8a:aa:
ea:d6:6c:12:31:2b:d7:a2:79:49:b7:bd:54:0d:e8:87:09:a3:
1e:33:dd:0a:d9:a1:ca:fe:12:9d:bf:a4:d0:bf:dd:86:88:4e:
18:c8:d9:10:5b:32:6c:de:8c:73:83:06:2a:6e:e3:68:e6:5b:
56:46:60:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:27:01 2025 by rpki-client