Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GcdEzQwhrTyBocajko4BrfHIx2A.roa
File: GcdEzQwhrTyBocajko4BrfHIx2A.roa (raw, json)
Hash identifier: 1bJlysb6JtETo+nmg8zyj8nP4QSgdRyGZGo1cFSgds4=
Subject key identifier: 19:C7:44:CD:0C:21:AD:3C:81:A1:C6:A3:92:8E:01:AD:F1:C8:C7:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 81D74EF3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GcdEzQwhrTyBocajko4BrfHIx2A.roa
Signing time: Sat 07 May 2022 04:12:15 +0000
ROA not before: Sat 07 May 2022 04:12:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2178371315 (0x81d74ef3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 7 04:12:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19c744cd0c21ad3c81a1c6a3928e01adf1c8c760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:1c:2a:c9:1b:42:32:0f:4d:6d:0b:d9:80:
9b:00:0b:bf:1c:3b:b3:3f:2b:32:75:dd:bc:e8:32:
9b:3d:94:68:85:55:fd:17:e7:1e:13:18:d8:b4:c4:
b5:0c:59:b4:83:f0:fe:ae:3a:62:44:26:85:b6:c7:
16:ef:1d:03:13:06:1b:35:83:7d:73:e1:6a:5b:23:
6b:cf:8a:ba:be:33:44:20:bf:84:05:3e:49:10:e0:
61:6f:71:7c:ed:7f:9e:1d:57:bc:4f:b1:fb:87:b9:
13:32:8e:51:71:74:8b:e4:23:76:65:4d:8b:3f:70:
84:0e:36:12:5e:f1:c2:66:7b:2a:26:25:dd:54:a8:
b3:44:94:b8:77:57:a4:5f:b5:61:64:bc:61:4c:f7:
37:07:3a:6c:12:30:7e:e2:ba:e5:b0:d1:ed:20:e4:
b9:87:72:fb:bb:6c:5c:d3:a0:99:1c:86:4d:f2:02:
5f:fb:cd:fe:af:8c:ae:bc:ad:c6:b4:ec:46:34:16:
88:f7:22:31:c2:0b:02:a8:43:73:15:3b:6c:3d:25:
3a:01:e2:20:69:cc:e1:05:02:21:c8:69:87:8d:3e:
97:bf:2e:fb:a4:1d:9b:b0:2e:49:2e:a3:ec:cd:ed:
9a:6c:bc:c5:1c:07:d8:23:98:33:f6:d3:32:8f:b2:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C7:44:CD:0C:21:AD:3C:81:A1:C6:A3:92:8E:01:AD:F1:C8:C7:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GcdEzQwhrTyBocajko4BrfHIx2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:93:13:1f:0e:8d:05:66:8d:de:bf:4b:8c:65:d7:d6:29:0b:
20:c6:61:55:88:40:a1:31:40:33:02:f5:b5:0e:ab:7b:af:9d:
f8:d0:7a:00:e1:48:c6:3f:ed:a5:01:26:b9:a3:ab:4e:27:a9:
10:90:e6:75:8e:b6:47:b7:53:20:24:be:87:a1:96:4e:0a:52:
70:7f:95:93:f6:95:35:85:ff:cc:15:eb:a4:71:78:bb:93:63:
37:64:18:b6:a3:41:80:e4:4a:f1:80:8e:94:4f:36:02:15:44:
c2:f5:e3:83:26:4f:93:c7:7b:5e:43:57:ba:ec:f6:38:70:0d:
bd:1f:37:d7:56:b1:1a:ec:e0:a6:f6:19:d6:84:2b:14:6c:0e:
1d:45:76:2e:ba:da:2f:fa:aa:46:51:d4:1a:07:60:64:e3:19:
a2:d3:e2:f0:13:a2:7f:b9:bf:b7:ca:61:ca:ed:2e:7e:62:b1:
91:ab:0c:77:30:b2:ce:35:44:23:1e:de:17:7c:aa:ba:2a:f6:
ec:b9:96:6e:ad:15:3e:73:e4:95:00:e0:30:77:24:46:d5:5b:
be:ca:72:9a:d3:df:b9:8f:d4:0f:e2:8d:68:cb:8c:71:07:51:
99:bf:71:f6:e2:88:62:07:6d:0b:44:4a:17:6a:91:64:a0:bf:
82:ee:fb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:11:44 2025 by rpki-client