Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GalhiZWdwuaTRpEsqupuM3cA9S4.roa
File: GalhiZWdwuaTRpEsqupuM3cA9S4.roa (raw, json)
Hash identifier: ncK4IJH3aVToR9gwmbGsVzJ5dvcoIRFQW/CUwSFGbYM=
Subject key identifier: 19:A9:61:89:95:9D:C2:E6:93:46:91:2C:AA:EA:6E:33:77:00:F5:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7DD99F1A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GalhiZWdwuaTRpEsqupuM3cA9S4.roa
Signing time: Sat 23 Apr 2022 16:10:33 +0000
ROA not before: Sat 23 Apr 2022 16:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2111414042 (0x7dd99f1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 23 16:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19a96189959dc2e69346912caaea6e337700f52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c9:b5:0c:46:a0:ea:f6:27:ce:2f:04:f0:c5:
cc:76:e3:5a:9d:5a:4a:62:e6:7f:b2:8e:65:8b:35:
b9:94:54:7b:56:98:76:c8:ae:70:6d:61:4a:77:62:
82:9f:db:ef:9c:e3:27:ea:80:2a:0a:48:f7:fa:0d:
8b:a1:0e:ab:d8:13:33:10:4a:38:0f:02:62:77:5f:
24:55:e3:4a:5b:a4:4e:63:a5:6a:21:fc:22:21:8c:
ef:5d:2e:8a:38:f7:b8:33:4c:fc:1a:1b:35:8f:9f:
8c:85:07:af:ec:d8:b6:97:6e:a2:45:1f:1a:76:1d:
1c:92:ae:03:4d:0e:ee:46:d4:b2:f8:3f:32:e7:85:
64:95:af:31:40:05:74:b9:46:13:08:45:f7:2a:6b:
46:99:cc:62:15:97:30:49:50:af:f2:6b:3e:3d:f0:
50:92:e4:35:62:b0:03:82:0e:0f:eb:69:4d:6f:00:
f3:02:56:d9:c9:f7:5c:d6:ef:57:50:fc:1b:10:a0:
46:aa:c3:e4:7a:94:e1:26:11:b4:c4:3d:cb:69:5e:
31:6c:06:7f:1f:47:08:6a:e5:5e:af:ea:70:06:54:
9f:89:c9:5d:2b:a4:54:60:cd:ca:7a:ba:47:70:9d:
19:69:72:83:5e:48:e0:eb:8c:21:95:95:a8:d2:10:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A9:61:89:95:9D:C2:E6:93:46:91:2C:AA:EA:6E:33:77:00:F5:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GalhiZWdwuaTRpEsqupuM3cA9S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:26:fa:b7:ff:0d:52:92:4c:29:6f:69:32:0d:57:3b:77:83:
9a:eb:93:e4:22:2b:af:66:d8:83:02:4c:bb:cf:7a:dc:98:a9:
d4:ac:cc:11:cf:db:e7:17:90:d0:83:00:b6:d8:ff:05:02:c9:
2a:c4:27:1e:f5:3f:c6:33:e9:b4:47:b3:48:5e:6c:30:49:59:
0d:21:25:54:30:19:4d:88:4f:73:19:d6:dc:47:72:32:f4:84:
61:2a:6f:cd:42:d8:9c:4b:17:3c:b2:97:ae:f8:65:f4:85:38:
1c:07:09:c2:86:aa:31:ae:47:33:b4:45:6c:21:73:99:6d:14:
95:69:97:4c:7d:a8:24:9a:ef:36:7a:4b:d5:ce:c8:68:f5:7a:
86:b7:74:ad:75:80:10:7e:e8:54:72:b5:3f:48:81:15:9f:7f:
bb:53:76:a3:78:60:3e:20:4d:62:91:11:35:93:fa:5a:51:5f:
56:2d:f3:98:a5:d9:24:0c:59:e7:57:b7:35:8e:1a:dc:bb:16:
bf:a1:65:7b:32:2f:fa:c4:4f:6f:ae:4b:84:a9:a2:f6:95:10:
e5:8c:a0:57:6a:01:82:9d:2e:30:f3:33:64:94:11:51:8f:cc:
cb:63:42:f9:aa:77:a9:c5:f3:79:35:f7:ca:e5:ab:46:ac:31:
57:f8:ff:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:08:53 2025 by rpki-client