Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GghygS881UWPO-TxHVWp1p7fWdQ.roa
File: GghygS881UWPO-TxHVWp1p7fWdQ.roa (raw, json)
Hash identifier: JB/wedosdJUnZOxzziEl219L6NAdiUsxt9JGagbBl10=
Subject key identifier: 1A:08:72:81:2F:3C:D5:45:8F:3B:E4:F1:1D:55:A9:D6:9E:DF:59:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B35DCD68493DF155B8A5DE3B53A73C77
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GghygS881UWPO-TxHVWp1p7fWdQ.roa
Signing time: Mon 24 Apr 2023 13:04:41 +0000
ROA not before: Mon 24 Apr 2023 13:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:187:b35d:8172/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:5d:cd:68:49:3d:f1:55:b8:a5:de:3b:53:a7:3c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 13:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a0872812f3cd5458f3be4f11d55a9d69edf59d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3a:7d:3e:87:6d:d3:c4:e3:c0:db:d8:70:f7:
8a:33:2e:82:cb:40:38:22:50:10:7c:76:18:0a:eb:
7e:85:4e:94:00:69:34:a0:ad:32:9a:3d:4d:73:43:
09:96:52:13:ff:aa:11:ce:83:dc:86:9c:91:94:26:
84:d9:db:b7:bf:47:c6:f0:24:c7:ea:93:97:6b:00:
7b:bc:6e:7b:47:12:89:b4:a2:54:c4:6d:2c:60:4c:
b9:24:04:e1:89:e4:3c:93:96:8a:8f:eb:04:95:fa:
da:6b:82:2f:f1:f5:f4:f3:a5:d5:9b:da:e4:5a:70:
5c:7e:39:a1:1d:e3:ed:ad:4d:59:b1:3c:17:56:85:
91:9f:a6:d4:67:2d:3e:2f:c8:27:3f:c5:6f:32:a1:
78:43:85:41:b4:e2:26:70:31:7d:d4:12:34:bf:f4:
94:fd:92:59:f0:2e:dc:7f:36:95:cf:b7:ce:4f:94:
15:a7:58:a4:e7:1b:d4:b0:ba:e6:d2:fe:f1:79:0d:
2f:12:67:3f:2c:6b:8e:59:ff:f5:ba:3f:ad:36:7c:
76:d5:3a:5e:1f:a0:3d:fd:52:c4:db:8c:28:2e:eb:
8f:b9:32:b1:f3:da:c1:59:30:78:6d:ec:26:f0:bd:
34:03:b1:aa:a5:00:5d:a1:4d:d9:da:ac:a7:1a:e0:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:08:72:81:2F:3C:D5:45:8F:3B:E4:F1:1D:55:A9:D6:9E:DF:59:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GghygS881UWPO-TxHVWp1p7fWdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:c5:cb:2c:9b:57:d9:76:84:a3:6b:f3:c2:c6:e8:62:e1:ae:
d5:47:e1:e2:06:80:f0:16:41:e0:32:b3:15:e6:ba:a9:38:86:
43:cc:4f:56:8b:80:28:01:3c:05:9a:aa:6b:e5:bc:86:14:13:
f3:67:a3:5a:72:1c:c6:e8:31:7d:6a:2d:0c:6d:e1:4a:81:3a:
13:09:e0:d8:4f:ea:30:bb:24:bd:4f:00:17:18:5c:e8:65:c5:
c9:a8:f8:28:4e:e3:7d:1a:ec:dc:d9:3f:cf:20:5c:70:4e:d3:
c7:61:73:e5:81:bc:ab:b9:7c:fe:8e:a6:c1:74:b0:f7:81:4b:
db:fa:68:33:1c:e6:6e:7a:63:2e:68:f7:2d:3c:86:62:88:99:
d4:2b:88:53:61:aa:64:10:5b:55:99:db:60:3f:c9:ca:9c:f8:
a3:4e:7f:aa:ad:80:74:51:35:31:db:a0:db:90:46:8a:6c:6e:
84:73:4b:12:4e:e9:08:d7:14:83:92:e5:57:f4:b1:71:2e:0d:
a6:b8:1e:82:89:cd:b6:f8:fe:6e:28:14:6b:37:dc:89:f7:18:
d0:1c:78:9e:dd:1d:88:bc:a4:38:b7:25:78:88:37:fb:00:29:
bc:5c:2e:ef:01:cf:29:b7:55:54:33:d5:a1:d4:aa:7f:04:26:
64:9e:3b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:05:03 2025 by rpki-client