Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GbvYP0IHx-me75qvzIyKMfjcazs.roa
File: GbvYP0IHx-me75qvzIyKMfjcazs.roa (raw, json)
Hash identifier: NMU8yicQEwJF72KeBHstKODKfRvtrKoYQUJIBqxu+rU=
Subject key identifier: 19:BB:D8:3F:42:07:C7:E9:9E:EF:9A:AF:CC:8C:8A:31:F8:DC:6B:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018829D3EB2AB6D1F6DBC47FABC9C5E86125
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GbvYP0IHx-me75qvzIyKMfjcazs.roa
Signing time: Wed 17 May 2023 13:08:54 +0000
ROA not before: Wed 17 May 2023 13:08:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:d3:eb:2a:b6:d1:f6:db:c4:7f:ab:c9:c5:e8:61:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 17 13:08:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19bbd83f4207c7e99eef9aafcc8c8a31f8dc6b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:6e:f7:68:41:92:b5:44:87:a6:f4:9d:4d:
a6:a0:72:20:b8:60:90:12:b2:04:ce:8e:14:ef:8b:
99:3a:cc:07:8a:df:99:e7:93:f0:5a:e0:b1:45:0e:
a9:d8:ec:01:69:0e:ec:f6:cb:b4:74:d7:ab:57:d9:
88:51:e3:c2:5e:f9:a1:ba:c6:57:d0:ce:9f:f2:49:
6c:1b:12:75:d8:79:9b:10:a7:17:0e:ec:4b:fb:0f:
65:b0:9f:ea:e0:53:a0:11:50:0d:74:0c:63:05:32:
e8:38:54:63:53:8a:89:bd:60:83:d3:2b:c4:51:4b:
d9:48:ff:bb:c8:97:09:55:96:48:4f:43:7a:da:64:
52:4a:f9:15:05:fb:5f:fb:bd:3c:62:e5:f5:18:44:
4d:2c:34:3f:1c:92:5e:04:d4:1d:8f:6c:52:8f:a6:
ab:94:dc:d0:dc:b8:b6:aa:a8:1f:a4:de:5e:e8:40:
0c:01:a5:46:5e:9f:f0:f0:a0:3d:87:44:f1:ac:25:
0e:39:1f:ec:ef:33:41:0a:75:3a:5f:b0:c0:ec:8f:
b3:72:45:bc:e2:8a:c4:29:f6:31:98:50:ad:f0:2d:
c7:76:37:aa:00:58:44:9c:1b:dc:fe:c8:c0:e9:f8:
eb:ec:0d:06:30:d4:bd:a3:9c:be:6e:2e:c9:90:c8:
ca:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BB:D8:3F:42:07:C7:E9:9E:EF:9A:AF:CC:8C:8A:31:F8:DC:6B:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GbvYP0IHx-me75qvzIyKMfjcazs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:9f:42:1c:77:00:1f:8c:83:08:29:83:04:1c:02:04:68:30:
74:5b:92:85:16:df:8e:99:c2:cd:00:06:1b:93:8d:99:84:12:
08:f8:d3:b6:c7:50:75:24:f7:76:82:c1:aa:7c:8b:df:3e:a7:
92:62:67:ab:2c:53:3b:7b:d2:05:82:4a:bf:8c:4b:4d:66:f6:
9b:bc:4e:70:c2:27:6a:dc:d7:68:20:cd:1c:80:a6:35:17:9f:
4f:15:8d:4d:7a:20:1c:d8:95:74:33:c3:f0:21:f8:f1:64:ce:
45:97:dc:f0:54:5f:36:a4:e3:0d:fc:43:d4:7e:11:af:ea:25:
10:65:28:52:91:27:7f:fa:a7:d4:79:18:9c:65:7b:70:47:4d:
bb:1c:d1:e6:5c:fb:0a:44:fd:6b:88:ae:1a:66:bf:32:4e:6f:
c4:71:2c:54:40:54:bf:fa:3b:96:9f:64:c5:89:b5:bb:5a:ad:
cf:30:17:8c:13:f5:e6:51:97:07:4c:31:68:9f:9f:7b:57:fe:
2b:1d:e1:dd:85:5a:02:ce:17:78:1c:04:c5:16:c2:a8:31:5f:
b3:fe:a2:78:73:c8:a6:17:79:58:ce:8f:8b:4e:bf:dd:5e:12:
89:8f:4d:e0:bb:ee:6d:eb:aa:2b:2f:59:25:32:0b:1a:02:05:
02:4b:f9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 20:11:51 2025 by rpki-client