Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GhSd5DdxSHqb0dpAmvd6lWm7blY.roa
File: GhSd5DdxSHqb0dpAmvd6lWm7blY.roa (raw, json)
Hash identifier: kUQdDYl++xqeKWNdrFxnFGIwTXG56sv9XPt0G7S+Ea8=
Subject key identifier: 1A:14:9D:E4:37:71:48:7A:9B:D1:DA:40:9A:F7:7A:95:69:BB:6E:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018517312781277ACA94FEE6D0FB2661EDFE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GhSd5DdxSHqb0dpAmvd6lWm7blY.roa
Signing time: Thu 15 Dec 2022 19:09:35 +0000
ROA not before: Thu 15 Dec 2022 19:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:17:31:27:81:27:7a:ca:94:fe:e6:d0:fb:26:61:ed:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 19:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a149de43771487a9bd1da409af77a9569bb6e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1c:0b:bd:fb:b9:c3:a2:f8:e8:30:60:db:09:
ac:b1:1e:cc:8d:c9:8f:90:df:2b:86:f2:59:63:fc:
39:9c:01:6c:2a:13:d6:72:41:27:c3:03:eb:08:09:
be:bb:77:77:a6:61:0f:41:86:e8:57:60:93:cb:b6:
ca:df:f5:7b:5d:86:38:de:2c:57:71:98:d4:91:f9:
c0:98:b5:f9:6a:22:47:a5:20:30:41:2a:8a:a1:cd:
48:aa:e0:0e:3c:72:bc:a4:7b:3e:9a:bd:68:ea:92:
52:51:6a:ae:b5:1d:eb:76:12:1f:d0:4e:98:d3:56:
61:cb:c1:28:6a:24:51:67:aa:cc:63:0e:d3:47:7f:
b2:22:c3:84:d2:5f:e8:eb:f2:86:cb:e7:4c:17:62:
bc:61:02:ae:a6:f9:69:0d:90:17:13:13:36:bf:b1:
9b:e5:4f:84:29:5f:7f:a2:fd:d9:2c:a6:87:2b:a6:
2a:fd:8d:ca:7c:03:cd:86:ee:91:48:ff:d7:41:90:
80:88:de:cd:ac:42:cc:59:b2:b6:88:ba:18:03:0e:
42:56:2a:ac:42:8b:54:78:a7:2f:88:e5:58:72:5a:
50:7c:0d:24:e9:81:7f:29:0a:11:9f:7b:05:74:47:
bd:2b:55:33:e1:66:10:99:7f:d3:a7:ae:3b:4d:09:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:14:9D:E4:37:71:48:7A:9B:D1:DA:40:9A:F7:7A:95:69:BB:6E:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GhSd5DdxSHqb0dpAmvd6lWm7blY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:94:09:21:2f:92:0b:ed:4c:34:25:51:8d:65:3c:69:00:2f:
cf:1b:09:09:83:e7:45:ce:e5:70:01:3f:40:28:c7:86:5a:56:
8d:29:2a:9b:06:33:a7:9c:50:60:b9:ac:9e:24:40:8d:f6:e9:
99:8d:79:c2:20:fc:90:f1:8a:f1:3d:23:39:1e:16:34:11:80:
fa:c8:59:92:73:e0:d6:9b:99:57:95:8e:6b:95:6f:14:f7:42:
a7:38:f7:ac:1b:c1:a2:6d:8b:6f:91:0f:db:7d:80:6a:74:65:
4f:63:ad:68:e0:8c:dc:e6:4d:56:48:e4:94:08:64:cb:9b:ff:
9f:8c:cb:0b:6e:0b:88:7c:1a:23:0c:18:c2:49:41:61:66:9b:
3d:a9:0a:93:f1:7f:2f:90:41:19:bf:b3:c6:1d:f5:9f:37:f2:
e3:70:b6:ed:61:fe:3d:78:ca:9b:64:c7:dc:9c:eb:14:25:34:
89:b7:02:c3:9f:7d:17:1e:cd:9c:22:3d:1b:14:bb:a9:a5:e5:
fb:d9:7e:0e:33:b4:28:4a:92:b8:2c:98:89:8a:7c:6a:7c:ca:
7b:aa:4a:73:9b:c0:5c:ac:df:8a:2c:81:70:84:51:b2:64:b7:
51:82:88:62:12:77:2a:cb:7e:90:36:0c:77:fd:98:11:71:4a:
c8:b9:76:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:07 2025 by rpki-client