Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GgxILjCDJGf96VWyB7JKFXdzdpc.roa
File: GgxILjCDJGf96VWyB7JKFXdzdpc.roa (raw, json)
Hash identifier: gSq5kmvLFMTOK0h9dHbIb+ZToXR78CT12gjR0sPhRyQ=
Subject key identifier: 1A:0C:48:2E:30:83:24:67:FD:E9:55:B2:07:B2:4A:15:77:73:76:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183B93CF09938DB377C3D9E76F7072E05D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GgxILjCDJGf96VWyB7JKFXdzdpc.roa
Signing time: Sat 08 Oct 2022 20:15:22 +0000
ROA not before: Sat 08 Oct 2022 20:15:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b9:3c:f0:99:38:db:37:7c:3d:9e:76:f7:07:2e:05:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 8 20:15:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a0c482e30832467fde955b207b24a1577737697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:8e:65:5f:cd:9c:c0:a6:9a:be:35:bd:5b:
0e:ee:91:a5:38:39:a5:d5:92:80:6e:e7:7d:03:74:
c5:ad:2c:b1:31:16:c5:66:e9:59:ff:38:b4:3a:95:
71:16:28:16:57:e4:53:3e:f0:f2:35:13:65:f7:d7:
f8:0a:60:72:f6:60:26:fc:8e:39:a1:60:58:63:c9:
5c:0d:17:69:4c:3d:dd:4e:a7:b5:01:4f:a4:70:30:
fe:38:3b:52:72:86:f5:66:e0:4e:de:05:ec:5d:b0:
cb:ae:c6:3a:d8:28:bd:58:1b:7c:37:0f:e7:7e:92:
c0:eb:ff:51:97:c8:7e:c9:c3:90:56:34:52:d3:35:
8b:e4:45:f2:d4:3d:8f:de:cb:df:4f:95:ef:8e:98:
4a:8d:9a:56:f9:a6:13:1c:1f:c9:bf:0e:8e:3c:15:
ab:f9:ff:ad:ef:62:69:14:22:22:d3:9e:e0:cd:10:
93:30:a8:9f:be:2e:fa:3e:e5:85:39:63:a9:ae:74:
38:a9:dd:ab:42:11:81:54:5b:c8:50:ab:70:98:61:
01:a8:a3:97:72:c5:e9:06:2a:0f:46:e6:0b:b2:ca:
a7:1b:3c:75:0e:7b:23:bd:9e:d0:25:f6:54:72:85:
af:5a:52:14:c0:ff:71:6c:d3:b3:1f:f9:90:37:93:
2c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0C:48:2E:30:83:24:67:FD:E9:55:B2:07:B2:4A:15:77:73:76:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GgxILjCDJGf96VWyB7JKFXdzdpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:06:83:2e:6f:72:08:12:26:27:b9:01:e3:0f:1e:ed:be:2e:
33:9f:0e:da:45:6b:17:f1:20:bb:ce:1c:14:14:72:41:6e:99:
c5:29:66:95:60:26:d2:65:08:92:ad:69:32:48:da:bc:ff:a8:
50:f9:4a:ac:14:56:67:4a:d6:7e:59:e0:de:99:4b:79:f0:58:
67:bf:37:7e:9d:f8:0e:27:b3:b8:48:27:78:a2:8e:27:ce:4b:
3a:2f:6b:ab:b1:c5:54:93:92:d7:77:c8:05:1b:7a:e2:55:79:
a0:d2:d1:df:28:31:f2:07:99:0f:a7:05:fd:b2:17:85:74:d8:
87:51:b0:01:9b:c0:6b:e2:83:25:f1:72:b0:3b:c1:79:f7:76:
04:8c:6b:45:7f:77:93:65:69:9d:16:38:2a:e2:31:36:b0:3b:
c0:5a:b6:ae:1e:46:1a:51:bb:51:3f:17:55:f4:b3:e5:89:9a:
db:30:26:91:c0:aa:2d:59:5c:0a:b5:60:66:a9:bc:60:f9:72:
64:a2:4d:01:8f:a9:d9:3e:fa:64:40:d5:92:41:ef:20:68:b4:
03:f5:1d:01:e5:11:fe:04:62:db:18:41:a4:c8:4a:5b:84:eb:
16:05:de:d6:93:96:01:1d:0a:62:2b:4e:5c:16:b2:e6:0a:a9:
ce:53:e5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:05:01 2025 by rpki-client