Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GbEuYutFsD0SPOa_tBUcpbiQeKc.roa
File: GbEuYutFsD0SPOa_tBUcpbiQeKc.roa (raw, json)
Hash identifier: D5WXqxpoaM6ZKCjgtmx+IdtmgfLiCPhtySCoHceq7s4=
Subject key identifier: 19:B1:2E:62:EB:45:B0:3D:12:3C:E6:BF:B4:15:1C:A5:B8:90:78:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182D4B67F78F33BD3023F3D3398A2DEE371
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GbEuYutFsD0SPOa_tBUcpbiQeKc.roa
Signing time: Thu 25 Aug 2022 11:15:06 +0000
ROA not before: Thu 25 Aug 2022 11:15:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d4:b6:7f:78:f3:3b:d3:02:3f:3d:33:98:a2:de:e3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 11:15:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19b12e62eb45b03d123ce6bfb4151ca5b89078a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:52:7e:4c:1f:75:7e:49:84:74:63:89:7d:60:
02:44:16:13:3c:90:a6:b4:70:8d:22:28:0d:b1:f7:
a1:96:8f:70:0f:87:9f:76:51:e8:e0:76:8d:fd:ee:
eb:eb:3a:b9:fd:91:ea:ec:56:b4:7a:26:34:7d:3f:
47:8b:38:60:cf:42:23:4c:9d:38:57:db:15:a8:f1:
c3:9f:25:ba:59:ce:14:49:8e:df:e0:26:36:ad:b2:
bd:de:0b:9f:48:ce:27:ca:52:d8:04:8d:64:61:b5:
cd:cb:bf:9a:bd:f3:b3:15:80:da:ed:0b:98:62:54:
84:1e:2f:e2:d1:46:4b:9a:65:30:7c:75:3f:49:f8:
91:59:ac:50:e9:25:3d:ed:af:a1:d8:09:05:da:82:
35:b9:9f:85:c0:c5:18:94:4f:94:a2:4d:f7:33:2a:
0c:26:f1:da:76:bd:1d:ad:9d:27:38:c1:78:bc:49:
a8:f2:46:b5:df:62:a4:af:9a:7e:b6:54:95:0c:24:
1b:d7:66:51:35:2c:3e:35:d4:18:44:52:22:35:fb:
17:cb:aa:41:0e:82:1c:36:e6:36:6c:71:1f:84:f2:
63:63:ee:79:7c:35:15:7d:d6:b8:d4:bf:55:30:87:
c2:14:5c:14:0d:cb:87:e4:55:7d:08:d4:36:fb:e1:
c8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B1:2E:62:EB:45:B0:3D:12:3C:E6:BF:B4:15:1C:A5:B8:90:78:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GbEuYutFsD0SPOa_tBUcpbiQeKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:19:57:f7:9a:23:fd:7b:84:97:f3:b4:ef:72:93:0d:a2:bb:
54:dc:21:88:9a:bf:71:29:0e:7f:a7:be:41:bc:13:7e:90:55:
1d:61:ab:93:da:d0:bb:49:47:40:4b:0b:c1:0b:de:71:e2:2b:
bc:ee:7e:12:67:6a:2c:6b:40:d1:ac:4a:27:13:fe:67:8d:75:
8b:2c:8a:72:2d:31:23:d6:ec:da:75:3f:da:05:c1:f2:16:e2:
41:66:0b:a5:13:63:92:7f:aa:8b:cf:4a:37:91:bc:3f:da:62:
5b:42:95:23:c1:60:9b:63:e6:fa:ac:71:8d:ca:b1:e6:4a:db:
00:ee:7d:a3:46:e8:03:58:9b:cd:c0:8d:25:26:33:05:de:92:
d6:4d:ba:b7:84:7a:dc:41:fc:be:c0:e6:34:5a:2b:b8:e4:fd:
94:ac:12:8f:79:af:03:be:85:40:56:f6:a4:06:f4:a3:c3:79:
8e:7a:68:22:e7:5e:d3:bf:b0:04:60:25:e8:54:a3:4f:1a:45:
39:cb:65:39:10:97:2c:5d:63:ba:7b:83:32:36:50:b1:dc:c6:
50:5c:34:c5:cc:cd:26:a4:1a:84:9b:9d:f7:09:d5:d4:57:8d:
46:c0:30:ce:60:d9:ee:5a:03:2c:fa:fc:c9:f7:45:62:61:2d:
8e:bb:b2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:45 2025 by rpki-client